Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft
File:                     7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft (raw, json)
Hash identifier:          6gJIyiu2sFrtHhsP9zikLLC0cKdaQf0Naj79/WMusa4=
Subject key identifier:   5F:A7:D2:4A:A4:24:FA:4B:13:7E:3B:32:AE:06:B9:23:3D:A1:9B:5C
Authority key identifier: 7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A
Certificate issuer:       /CN=7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A
Certificate serial:       7E7F42D655361BD26AE9F8A1D67E0FCB3F99CCCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft
Manifest number:          D2
Signing time:             Tue 01 Jul 2025 02:21:38 +0000
Manifest this update:     Tue 01 Jul 2025 02:16:38 +0000
Manifest next update:     Wed 02 Jul 2025 05:28:38 +0000
Files and hashes:         1: 3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (hash: xKg9JEwMWvpr9LB2nzcRlLQ8+77BvLv27uytLDxv4Zc=)
                          2: 34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (hash: i/vQf1QJEMny6yICIusclOoRSU1G9KQDoNQ/F2XXsII=)
                          3: 34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa (hash: Gb8jHyMJ8NYHPL8BPt/1Umytho+E+/rCO2l55bHiFIA=)
                          4: 34352e372e302e302f32322d3234203d3e20323637333838.roa (hash: TwmC/+tBsxFzrihMGB8sJGUhk9LnbU5h5meQW1anaJY=)
                          5: 7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.crl (hash: /s0YEC5+Wo3gJp3le87N7kHQUw8TAS004WNT0wozcC4=)
                          6: 3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa (hash: YFtPBJ7S6uRBKJXJmRuZNOfTIRWD4NPjBaovUT/t31g=)
                          7: 34352e342e3135362e302f32322d3234203d3e20323637333838.roa (hash: lhATrZaDjK2YlWMfdnWvfrQDGG9/jjxxJjmaVpcIwwM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7f:42:d6:55:36:1b:d2:6a:e9:f8:a1:d6:7e:0f:cb:3f:99:cc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A
        Validity
            Not Before: Jul  1 02:16:38 2025 GMT
            Not After : Jul  2 05:28:38 2025 GMT
        Subject: CN=5FA7D24AA424FA4B137E3B32AE06B9233DA19B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:46:3b:5b:b3:d4:9f:1c:3f:cd:b1:e5:4b:
                    bb:ad:69:7b:81:fb:c1:47:13:76:96:89:06:78:f9:
                    93:80:dc:04:27:f2:d3:aa:47:23:99:8e:93:14:6a:
                    15:73:06:4b:3c:a1:d0:c3:16:67:12:8a:e9:9e:10:
                    89:41:42:34:8f:7d:b0:6e:61:7c:8a:87:27:09:80:
                    71:c9:3c:d6:c4:23:2a:52:56:2b:24:92:f9:b7:a7:
                    21:43:6f:58:69:f7:3d:0e:e2:16:db:c7:ea:d9:4f:
                    b0:63:47:84:6c:ff:5e:be:71:13:e4:6a:72:0f:89:
                    a8:56:55:4d:16:0f:3b:ab:6d:57:0a:89:a3:c8:64:
                    9c:57:e9:ca:75:18:e5:20:7b:b0:d3:9a:04:eb:a7:
                    d9:7e:e9:fc:c1:9a:cd:be:38:85:3f:1b:aa:6d:24:
                    db:39:21:5e:f4:ae:4a:81:9f:dd:ce:d1:8d:5c:b9:
                    e5:41:84:80:99:2f:7b:c1:d5:92:12:46:cc:b6:4c:
                    0f:ba:92:6c:66:89:37:bd:d7:61:d8:8a:b2:ac:b1:
                    67:fe:d3:11:92:43:d4:9f:18:3f:57:fc:2d:05:bd:
                    52:5f:cd:7d:ab:76:7a:50:20:9a:cc:a6:e4:d1:98:
                    9c:a8:f1:f3:ea:84:2c:cf:e3:55:43:98:73:fd:cc:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:D2:4A:A4:24:FA:4B:13:7E:3B:32:AE:06:B9:23:3D:A1:9B:5C
            X509v3 Authority Key Identifier:
                keyid:7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:36:43:4c:91:c9:f2:b1:24:7f:c7:72:b9:3f:90:64:29:
         61:d4:03:ce:37:c3:57:f4:f2:0a:b6:4d:0c:8c:32:24:c5:38:
         13:d6:bf:11:1e:35:07:ff:09:70:01:5b:a1:a2:99:23:c0:74:
         85:5d:5c:75:80:7d:63:5a:ed:c0:57:91:eb:33:33:c8:ef:b2:
         70:f4:b2:e4:01:72:f2:c8:18:9a:f6:59:c3:e8:56:2f:ff:42:
         00:71:d8:9d:50:65:99:a8:30:62:4f:1f:32:ac:9d:e0:df:ce:
         84:2b:26:9f:d1:ba:08:b0:c0:97:74:c4:4b:89:14:7c:7d:39:
         90:cf:07:cd:8f:23:88:39:c0:ec:59:ae:b1:4d:3e:c6:32:e9:
         63:b5:aa:38:0d:22:4a:52:de:49:fa:fc:3b:94:91:93:12:18:
         90:06:6c:e2:f9:95:19:64:af:e1:2b:ca:69:97:95:1c:51:9f:
         78:94:f6:88:cd:3d:33:d6:aa:65:57:65:f6:ef:67:5c:03:39:
         04:00:ab:8b:42:b5:62:4f:cb:1f:8c:10:08:16:7b:bc:36:d3:
         61:ab:3e:06:03:bc:de:bb:e4:88:ac:0f:30:d0:1f:d6:79:df:
         95:22:32:00:e2:27:40:45:0c:c1:68:f9:be:da:91:0e:bf:79:
         85:cf:8c:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfn9C1lU2G9Jq6fih1n4Pyz+ZzMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I4MkEyQTFDQzlDREU0QTdGRkU5MDBGNkMxRjIwNEM0
MEFFMDE5QTAeFw0yNTA3MDEwMjE2MzhaFw0yNTA3MDIwNTI4MzhaMDMxMTAvBgNV
BAMTKDVGQTdEMjRBQTQyNEZBNEIxMzdFM0IzMkFFMDZCOTIzM0RBMTlCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUt0Y7W7PUnxw/zbHlS7utaXuB
+8FHE3aWiQZ4+ZOA3AQn8tOqRyOZjpMUahVzBks8odDDFmcSiumeEIlBQjSPfbBu
YXyKhycJgHHJPNbEIypSViskkvm3pyFDb1hp9z0O4hbbx+rZT7BjR4Rs/16+cRPk
anIPiahWVU0WDzurbVcKiaPIZJxX6cp1GOUge7DTmgTrp9l+6fzBms2+OIU/G6pt
JNs5IV70rkqBn93O0Y1cueVBhICZL3vB1ZISRsy2TA+6kmxmiTe912HYirKssWf+
0xGSQ9SfGD9X/C0FvVJfzX2rdnpQIJrMpuTRmJyo8fPqhCzP41VDmHP9zH8lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX6fSSqQk+ksTfjsyrga5Iz2hm1wwHwYDVR0j
BBgwFoAUe4Kiocyc3kp//pAPbB8gTECuAZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC83QjgyQTJBMUNDOUNERTRBN0ZGRTkwMEY2QzFGMjA0QzQwQUUwMTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCODJBMkExQ0M5Q0RFNEE3
RkZFOTAwRjZDMUYyMDRDNDBBRTAxOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRHN2MvMC83
QjgyQTJBMUNDOUNERTRBN0ZGRTkwMEY2QzFGMjA0QzQwQUUwMTlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVqw2Q0yRyfKxJH/Hcrk/kGQpYdQDzjfDV/TyCrZNDIwyJMU4E9a/ER41B/8J
cAFboaKZI8B0hV1cdYB9Y1rtwFeR6zMzyO+ycPSy5AFy8sgYmvZZw+hWL/9CAHHY
nVBlmagwYk8fMqyd4N/OhCsmn9G6CLDAl3TES4kUfH05kM8HzY8jiDnA7FmusU0+
xjLpY7WqOA0iSlLeSfr8O5SRkxIYkAZs4vmVGWSv4SvKaZeVHFGfeJT2iM09M9aq
ZVdl9u9nXAM5BACri0K1Yk/LH4wQCBZ7vDbTYas+BgO83rvkiKwPMNAf1nnflSIy
AOInQEUMwWj5vtqRDr95hc+M4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:40:20 2025 by rpki-client