Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.mft
File:                     B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.mft (raw, json)
Hash identifier:          7kUukaUQ7fDMY1a4LnUPxc9XWkrxP9CSDEK2U/9fV8s=
Subject key identifier:   DB:47:39:AE:4A:21:4A:98:32:D7:5E:50:20:8F:ED:88:09:00:79:9D
Authority key identifier: B8:3B:32:E1:BB:72:C1:AF:F2:17:58:A4:42:A3:C4:CF:6B:35:E2:A3
Certificate issuer:       /CN=B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3
Certificate serial:       0D4DADC00E7DCA1F900A13A7A428F2AF078F448F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.mft
Manifest number:          03
Signing time:             Tue 08 Jul 2025 18:45:55 +0000
Manifest this update:     Tue 08 Jul 2025 18:40:55 +0000
Manifest next update:     Wed 09 Jul 2025 19:47:55 +0000
Files and hashes:         1: 34352e362e3231362e302f32322d3234203d3e20323636323437.roa (hash: fu8bClGY/EXotl3d6O0QDQvrR5Jer2eZXGt4ssH4dw0=)
                          2: B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.crl (hash: OwGIXwRjTLV/Siub+hzrQ2foyw7TVYiSgl7Qu3MbLrM=)
                          3: 323830343a336430303a3a2f33322d3438203d3e20323636323437.roa (hash: Ccgyub7HknLRBbmOBU7k16DMMuWBT4u5yNsTVXHTKIM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4d:ad:c0:0e:7d:ca:1f:90:0a:13:a7:a4:28:f2:af:07:8f:44:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3
        Validity
            Not Before: Jul  8 18:40:55 2025 GMT
            Not After : Jul  9 19:47:55 2025 GMT
        Subject: CN=DB4739AE4A214A9832D75E50208FED880900799D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:06:6b:e6:d8:b4:02:0f:3a:85:69:5f:eb:
                    df:a8:ae:6f:67:c2:9e:66:ad:0e:82:b7:56:17:24:
                    04:86:69:1b:f6:10:82:cb:c8:44:e1:b6:53:6d:65:
                    4b:24:d2:8c:99:a9:0c:9a:ea:16:d0:00:e1:4b:39:
                    18:58:76:00:c2:88:9e:f6:9d:4e:71:71:95:eb:26:
                    83:3c:b5:73:30:4b:9a:75:9c:47:81:ec:aa:4d:df:
                    31:23:5a:8e:c2:60:81:3a:1a:35:5b:9c:06:87:c8:
                    8c:84:56:47:b3:67:67:68:67:ff:a8:1d:e2:b7:3b:
                    c5:3d:e6:14:2e:e6:a5:07:fa:2e:cf:d8:a0:94:2b:
                    ce:01:be:2b:dc:22:e8:0d:99:91:3f:fb:83:56:69:
                    c2:e1:88:54:83:7a:62:14:d2:23:68:7b:a7:b0:be:
                    8d:55:35:e4:8d:e0:ad:d5:8c:7b:8d:96:c7:98:f8:
                    20:fd:24:7a:08:76:92:63:cb:c1:86:13:14:d2:71:
                    83:2b:2e:7b:51:53:3d:c1:9a:7f:01:ac:bc:9a:2d:
                    a9:88:5c:d6:9f:91:5a:87:f1:f0:b5:30:06:f6:43:
                    b3:09:8b:a3:99:e9:35:43:8a:70:c4:cc:11:f0:f3:
                    d5:2f:19:b2:8b:82:16:c6:4b:b7:76:9d:a1:b0:56:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:39:AE:4A:21:4A:98:32:D7:5E:50:20:8F:ED:88:09:00:79:9D
            X509v3 Authority Key Identifier:
                keyid:B8:3B:32:E1:BB:72:C1:AF:F2:17:58:A4:42:A3:C4:CF:6B:35:E2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/B83B32E1BB72C1AFF21758A442A3C4CF6B35E2A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:3f:05:ab:90:c8:a1:a4:34:69:98:96:78:41:47:d5:b3:
         38:14:75:b2:96:a8:8d:40:de:f3:5b:2e:63:1c:71:d2:72:fc:
         e6:26:4c:0f:e1:bd:c5:32:4b:95:2c:ea:e3:1e:b7:37:30:9a:
         f0:ec:5b:8c:67:3c:27:80:4b:a8:ae:71:0a:fb:81:15:0b:d8:
         af:b0:28:5b:66:63:0b:7c:db:df:61:2d:68:3c:cc:3e:46:10:
         45:c4:cc:08:cb:7a:f5:7e:bb:6b:e2:87:a7:ec:c2:6d:00:85:
         0d:5e:1d:35:56:df:5a:13:ec:96:ba:48:ec:0f:d2:6b:20:f6:
         b3:2e:43:9a:33:f2:43:4e:22:e2:21:7a:f0:9e:92:c1:1c:dc:
         3d:af:77:24:f3:27:7e:96:42:43:f7:86:af:f5:28:b7:50:00:
         34:b4:ca:d6:a6:76:04:60:08:45:b7:e0:b9:ad:99:1a:4b:77:
         8c:7f:6a:9b:44:ab:5a:b3:e4:29:88:1c:20:74:79:f8:f8:78:
         a4:59:1b:ef:a5:1b:b5:6f:e4:8f:8f:ef:d5:76:a7:47:6e:36:
         10:04:bb:39:02:f5:68:c7:40:53:a1:93:cd:01:2d:b5:61:65:
         07:6a:70:b6:ac:1b:fe:38:fd:62:51:1e:31:a2:3b:6d:e3:21:
         5e:4b:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 11:33:35 2025 by rpki-client