Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.mft
File:                     293C24E146AE3D251ADFCB896B963E9A88757F42.mft (raw, json)
Hash identifier:          S4FpB2F9q+Iyxdp8fpEFIz1IsvqaEGO9RdWiv06ndrY=
Subject key identifier:   AB:27:E4:75:11:FD:29:AE:2F:71:53:41:F1:52:B7:92:27:1A:E3:61
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       40ACFFB35A6FDCD2A39187E690D1675994BC8520
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.mft
Manifest number:          02
Signing time:             Mon 30 Jun 2025 14:27:44 +0000
Manifest this update:     Mon 30 Jun 2025 14:22:44 +0000
Manifest next update:     Tue 01 Jul 2025 16:23:44 +0000
Files and hashes:         1: 3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa (hash: Dw8Gtro3k3+rBQZivej+yWNt1diCWmZJjVVlO3nj1zA=)
                          2: 3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa (hash: dfm4PHTSGCUQiLHbNQqFygpbw7NGXweAW54Mh53N1dI=)
                          3: 323830343a343162633a3a2f33362d3336203d3e20323637343533.roa (hash: UWGp2bWstGf1V480om5ai5EY1DLBs2tGdud1fx0z+1s=)
                          4: 3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa (hash: A0T6jiQCXNgoflY3s21vWAkbHYNS5eq0Y1Bdw9DurqA=)
                          5: 293C24E146AE3D251ADFCB896B963E9A88757F42.crl (hash: e1CenJyEG5O4R+K8RHvzR7wwQwOokVCtffF9G7U3NqE=)
                          6: 3138312e3139312e35302e302f32332d3233203d3e20323637343533.roa (hash: yfEqpm4ij9+2OWLtyjAEDKrwIaREJ8YcA34+R69q6t4=)
                          7: 3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa (hash: txJn4BL1bhB+5HHYjLE96mDQBkCQo+WR3N6kC8myCHk=)
                          8: 3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa (hash: QM9Wgrv+SITF3g8MsSIS/75eH/HxckIzbOZM8lN1LUw=)
                          9: 3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa (hash: rA2Yt2hZJx1Wx/0vmIsgsNeVKcjBdRAnGZbGX8xMj0Q=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ac:ff:b3:5a:6f:dc:d2:a3:91:87:e6:90:d1:67:59:94:bc:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:44 2025 GMT
            Not After : Jul  1 16:23:44 2025 GMT
        Subject: CN=AB27E47511FD29AE2F715341F152B792271AE361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:34:98:57:0f:71:b0:67:ee:f9:88:13:79:
                    51:65:ac:30:94:19:96:0e:ba:38:f9:4b:5a:e9:d0:
                    8f:97:a6:c9:7e:65:3f:f7:c9:b8:df:6f:6a:7d:9d:
                    8b:9c:5b:70:fe:c7:10:de:d3:3c:a5:d7:18:d8:16:
                    78:2e:9e:88:8c:06:5f:06:03:9e:e2:05:67:34:a0:
                    a1:ad:e2:37:fe:66:68:e5:63:f3:ac:b6:29:f9:8a:
                    94:d1:4d:bc:f5:1d:94:69:de:34:76:9f:51:23:dc:
                    d3:08:8b:a9:13:1f:e9:84:2f:4c:3f:5b:31:3a:6f:
                    d6:19:ad:9b:5f:86:20:51:8b:62:94:4a:d9:1b:74:
                    b9:93:3e:10:bf:d3:94:9c:6d:92:69:d9:1d:21:06:
                    30:fd:66:80:89:51:a0:c8:9a:54:fe:16:2a:0f:99:
                    39:34:a7:44:47:b5:c0:57:08:b0:28:d3:e5:08:99:
                    1f:cf:31:fd:a7:8f:ae:c3:34:cc:c7:ac:d0:81:7a:
                    27:a5:d8:b3:52:4e:c3:c8:21:54:69:ff:fb:70:a3:
                    81:33:d8:d5:4a:55:3d:ef:5e:0f:79:d4:8e:33:8d:
                    10:b5:f0:fc:ce:5a:c8:0f:9c:0d:20:3e:ea:59:9e:
                    61:c5:4f:fc:25:91:4e:4c:f4:2e:89:34:0d:f5:e1:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:E4:75:11:FD:29:AE:2F:71:53:41:F1:52:B7:92:27:1A:E3:61
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:18:6e:96:09:2f:96:60:3e:dc:26:43:a4:7e:ac:f9:a3:
         13:7a:d8:64:32:24:74:70:9c:4d:da:c6:fe:49:5d:21:65:13:
         9f:67:b2:e8:e6:c3:b6:1c:58:eb:ac:3e:60:a3:1e:cf:1b:ea:
         0a:a2:a3:e9:f8:ee:ff:b6:f8:1a:db:ec:0b:29:7f:48:fb:62:
         84:9f:08:2d:fd:1b:21:14:49:f9:f7:8f:ac:3c:e2:55:56:74:
         f5:57:9d:7e:61:cb:95:51:7c:ea:4d:24:e5:50:ba:32:af:5a:
         6f:40:d4:56:90:06:34:dc:d7:83:be:4e:86:2d:7f:bf:80:7b:
         fa:84:f5:69:6f:fc:c0:db:78:e4:d7:5b:60:b1:4e:2d:d5:3e:
         4a:98:01:2f:56:67:0e:cd:5b:ff:6a:48:04:f5:97:60:1e:41:
         6a:ef:cf:e5:81:03:d3:b2:f2:26:a1:e5:5e:9c:fb:d5:03:80:
         95:35:01:95:78:46:dd:0a:d7:3d:14:e8:c2:ff:97:dd:6f:8c:
         2a:6c:c5:ad:95:4f:a2:1c:18:a0:dc:b5:c2:a6:4e:56:fc:14:
         80:da:61:a6:1c:f1:9e:75:dc:ba:f9:91:c6:78:58:34:90:76:
         67:e6:0a:8f:ea:49:40:eb:62:8d:66:87:7b:48:f4:52:64:0b:
         40:f9:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:50 2025 by rpki-client