Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft
File:                     328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft (raw, json)
Hash identifier:          ifs3BzC1tld4EHK4s1z4p38dpX6RYcns1U4JLYjIHZA=
Subject key identifier:   69:19:FE:52:50:80:D9:66:76:89:2E:7B:B5:D0:2B:5B:16:BD:0C:F0
Authority key identifier: 32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38
Certificate issuer:       /CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
Certificate serial:       6D77DA8FC7DA0AFD5D0054E250DAB6D0DAAA37E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft
Manifest number:          0A
Signing time:             Mon 18 Aug 2025 12:28:09 +0000
Manifest this update:     Mon 18 Aug 2025 12:23:09 +0000
Manifest next update:     Tue 19 Aug 2025 12:48:09 +0000
Files and hashes:         1: 328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.crl (hash: 0W9g2iBFp1WwIzDpyIt7z85k68LGe0q8bNa9r4xhZuE=)
                          2: 3139302e382e382e302f32322d3332203d3e20323731363935.roa (hash: UOxZvvLgKesJUsb9oSpjbimPxuwtGB5gngWRX47b3fk=)
                          3: 323830343a376638633a3a2f33322d313238203d3e20323731363935.roa (hash: EKT4PMD9sCW3kyqn9XgnhpA0gAjIdeev4eJLNmChjP4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:77:da:8f:c7:da:0a:fd:5d:00:54:e2:50:da:b6:d0:da:aa:37:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
        Validity
            Not Before: Aug 18 12:23:09 2025 GMT
            Not After : Aug 19 12:48:09 2025 GMT
        Subject: CN=6919FE525080D96676892E7BB5D02B5B16BD0CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:5a:00:4f:0a:d9:67:d1:7d:c1:69:51:77:
                    d7:b3:ed:8e:82:03:ac:95:6c:a0:71:fb:6a:2a:90:
                    88:a0:4e:62:cb:27:6b:b5:f5:df:d8:84:43:6c:bc:
                    07:59:0b:fc:c3:aa:5b:8a:d3:e6:82:db:bb:9b:66:
                    21:83:a4:c6:2f:f4:f4:c1:d5:6b:40:74:34:b7:be:
                    c7:3f:14:63:12:95:b4:60:08:22:bf:19:26:34:bd:
                    d8:6e:d1:5d:37:db:a9:c3:5a:9e:eb:a3:48:5b:cf:
                    72:d7:72:d6:53:ca:39:36:65:f7:d1:a7:2e:29:ab:
                    a4:8a:e2:45:dd:b5:7e:90:c3:24:c9:5e:05:de:a9:
                    01:ea:ee:db:b7:45:31:dc:04:9d:77:cb:a5:4e:a8:
                    9d:dd:43:35:3f:07:7d:b4:1c:65:09:af:2f:5e:c0:
                    76:b1:54:0c:09:ea:38:e7:b5:d8:89:7d:33:e7:7f:
                    ed:ef:df:99:e8:95:81:6f:b3:bd:e6:3a:f5:30:61:
                    65:a5:68:b2:0c:73:71:f0:2a:f6:10:ff:5f:0f:86:
                    ef:95:56:5b:f0:ef:b6:5c:f4:f8:68:ec:d2:0e:7d:
                    64:29:91:cb:31:3c:45:4a:86:b6:c2:ec:5f:04:f9:
                    96:ae:fe:28:57:76:0e:d7:f2:32:19:10:98:54:e8:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:FE:52:50:80:D9:66:76:89:2E:7B:B5:D0:2B:5B:16:BD:0C:F0
            X509v3 Authority Key Identifier:
                keyid:32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:72:18:a8:ff:7c:b7:81:d8:95:af:41:3c:3f:81:1d:8a:c2:
         8c:6f:03:95:b9:a5:b0:d9:82:94:4f:4a:43:19:4c:f5:97:d0:
         6f:9d:55:26:31:99:a2:53:74:3b:40:db:ff:7c:19:4c:ea:80:
         69:0a:e9:f1:eb:06:29:bb:c5:42:88:04:1d:a5:fc:ef:83:34:
         51:40:0d:b0:ad:24:b3:b2:0d:10:3b:aa:40:f4:18:77:82:4b:
         53:43:12:af:1d:05:e9:db:c7:46:e3:e4:45:fa:a7:ee:6c:d2:
         fb:71:2f:ff:32:d2:1e:0a:03:d9:04:a8:09:5c:5b:94:ff:86:
         60:54:80:5f:dd:67:4d:07:0f:ae:33:10:b5:19:f4:3b:4e:9c:
         67:6a:21:91:54:f7:11:a6:4f:c8:04:e8:70:9a:34:fc:78:81:
         23:23:37:31:95:c3:e1:81:86:80:d1:ec:ca:f4:fa:3d:bd:6a:
         1b:93:27:62:b0:65:f7:46:5e:e9:86:d0:f3:6c:fb:3c:1e:fc:
         e2:92:1b:e6:97:2b:57:9d:ef:e9:4e:4f:99:f8:f6:1f:7e:f8:
         85:6a:a2:78:d2:f0:ed:d8:d7:bf:df:7b:93:c2:e0:c1:bd:b5:
         cc:69:72:66:f1:a5:7a:7f:af:2e:f1:35:ea:da:f1:dc:3c:6f:
         ef:e8:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:25 2025 by rpki-client