Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft
File:                     7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft (raw, json)
Hash identifier:          o5zz/rm+uxvNqyvukDZl08CrI2mhP8HiOvRX2xrkI0s=
Subject key identifier:   23:90:16:51:E6:79:31:DD:2F:3C:04:31:81:29:D7:63:EA:7B:FC:B9
Authority key identifier: 72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70
Certificate issuer:       /CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
Certificate serial:       345CCA6E3642EC1C461AAA5EEC3DA73488865817
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft
Manifest number:          0248
Signing time:             Mon 30 Jun 2025 11:52:51 +0000
Manifest this update:     Mon 30 Jun 2025 11:47:51 +0000
Manifest next update:     Tue 01 Jul 2025 13:38:51 +0000
Files and hashes:         1: 3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa (hash: XQLqD8SgcARthGOPcaPnyjKs4J/EMKTTQ4rWnmGrnOE=)
                          2: 7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl (hash: V5VFeTD6R+fUpS4zM1yZRgaf2HdsYM7zdEIeyws1L1w=)
                          3: 323830343a346436303a3a2f33322d3334203d3e20323633303936.roa (hash: bJ6htjowpfyUSh7JKB2xLMIA8oPEZ+iVaicgVU4Te7k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:ca:6e:36:42:ec:1c:46:1a:aa:5e:ec:3d:a7:34:88:86:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
        Validity
            Not Before: Jun 30 11:47:51 2025 GMT
            Not After : Jul  1 13:38:51 2025 GMT
        Subject: CN=23901651E67931DD2F3C04318129D763EA7BFCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:19:9f:2c:32:0c:cb:6b:8e:67:34:be:38:
                    54:c7:97:1b:d2:48:81:a6:db:ec:0e:da:0a:bb:57:
                    82:57:7f:2a:40:a5:95:df:e6:ea:f0:55:fa:a7:34:
                    ed:7d:e3:7e:ac:20:d6:25:98:66:cd:39:2b:8f:7c:
                    d5:4b:1f:b9:37:1e:8f:2c:8a:91:cc:09:50:b1:dc:
                    7a:f4:62:9d:09:d0:a3:03:99:0a:d9:9f:24:aa:c1:
                    eb:fd:42:25:aa:c7:83:a7:4b:97:4f:f4:ed:d8:dc:
                    b6:6b:2d:13:6a:5b:c7:5e:44:c6:c4:0d:d6:e8:0c:
                    12:85:5d:0d:27:97:88:46:d6:ec:44:85:95:3a:fa:
                    c3:35:0f:38:f8:b9:99:4a:69:10:79:f8:93:64:1e:
                    33:29:ab:39:13:b2:63:84:0b:9a:56:54:39:73:2c:
                    e9:31:ba:70:af:ed:89:40:2a:7d:08:98:f7:d0:3b:
                    fc:39:c8:e6:f1:0e:0c:78:a6:d3:9c:e7:dc:5b:12:
                    51:ae:d9:be:89:24:82:d3:12:d5:2e:67:ab:b5:b8:
                    d5:5c:f4:3d:bd:e6:6b:e3:81:15:16:b4:35:48:23:
                    0e:91:a7:d4:61:25:60:79:b9:f8:90:b0:17:5d:70:
                    fd:c2:1d:71:c4:11:0c:d2:1b:be:25:3c:d7:f7:7d:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:90:16:51:E6:79:31:DD:2F:3C:04:31:81:29:D7:63:EA:7B:FC:B9
            X509v3 Authority Key Identifier:
                keyid:72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:14:8a:79:f4:07:49:71:53:ea:11:12:c3:72:c6:0b:18:e8:
         db:a1:34:4d:d1:3d:61:94:2b:98:e9:75:27:53:6a:87:b1:91:
         d5:bd:c6:8a:1b:c4:5d:e7:d2:0b:1b:0f:c0:13:54:8b:6a:4a:
         fe:a7:ff:96:4b:df:2b:86:c0:a6:34:2f:85:9d:db:40:58:f8:
         71:81:d5:a8:3b:df:b0:e6:01:23:87:ce:2b:bb:d6:07:b5:bc:
         51:32:15:ce:2a:3d:ca:15:50:51:dd:01:06:d4:fc:0d:23:68:
         b3:4f:e2:df:1a:3b:85:0f:88:74:c6:fb:4b:9f:ce:5c:95:ef:
         ed:3e:90:34:19:0c:25:6e:ba:75:7d:9d:4b:77:4b:88:f3:52:
         a2:b2:a0:c3:ae:a6:84:05:91:8e:9b:12:6e:c4:5a:01:7b:d8:
         47:3f:75:30:61:56:34:03:27:fa:f1:45:51:29:94:fd:55:c3:
         00:0f:0b:cf:35:64:e4:ee:0b:eb:b1:da:bc:6d:14:09:4f:dc:
         1f:c7:db:86:7e:1e:40:62:11:59:51:ae:42:72:21:08:cb:fb:
         31:81:3d:08:04:66:2c:e1:f4:47:f8:c0:53:c8:7b:2e:bd:b3:
         ed:04:d4:ea:f2:a5:14:7a:12:15:b7:e0:e6:2a:59:63:ef:60:
         03:a9:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:08:45 2025 by rpki-client