Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
File:                     642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft (raw, json)
Hash identifier:          Wuz/9O8zJt6UBCnI0i79HvZwU79TZ4RAC6pfNCJLQ+g=
Subject key identifier:   C9:6F:F7:83:4C:5F:F5:17:FA:2C:51:07:59:BB:27:34:79:90:DE:0B
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       4A8370868E536970EA22BD63EF1F692A5C67CF36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
Manifest number:          F3
Signing time:             Sat 10 May 2025 00:38:37 +0000
Manifest this update:     Sat 10 May 2025 00:33:37 +0000
Manifest next update:     Sun 11 May 2025 01:25:37 +0000
Files and hashes:         1: 323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (hash: WEnoKN8Q2d5UmUIkM/SpEBblmOrv6HpXC417B/GS2hI=)
                          2: 642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl (hash: ZDzxT74k4sfmLUyESOwUsXPhO6zivfnqU1iMzbIdfRw=)
                          3: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: vfhK6uXnkz0BfEyzPSuUuB609t1rPfOECYXZf3FTzac=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:83:70:86:8e:53:69:70:ea:22:bd:63:ef:1f:69:2a:5c:67:cf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: May 10 00:33:37 2025 GMT
            Not After : May 11 01:25:37 2025 GMT
        Subject: CN=C96FF7834C5FF517FA2C510759BB27347990DE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:f1:9a:ed:7a:de:49:8a:07:5a:1f:be:3e:
                    11:af:2d:3d:95:07:54:e4:e7:2e:f5:f9:25:26:52:
                    ab:aa:c2:27:81:b9:fc:68:2f:bc:0f:07:66:6b:96:
                    d1:d7:21:30:cd:15:d3:56:e8:ad:65:f1:2a:ed:d9:
                    dd:65:f3:fc:c6:1d:be:df:e2:1a:e4:5b:92:c2:e8:
                    62:6c:8a:7b:d3:0c:56:2a:a3:8f:92:74:ff:ca:f1:
                    26:06:87:41:4b:4e:7b:51:ab:77:44:d6:3a:c2:c3:
                    e6:e8:fb:24:02:75:17:86:19:05:37:8e:5d:dc:a5:
                    82:6a:24:33:e9:6a:55:cb:ae:e6:35:28:07:d8:4d:
                    4d:2a:2c:30:f8:35:7a:e0:1f:c2:7c:a2:a2:09:d1:
                    36:a9:06:56:9a:c8:27:41:6c:d0:8f:2d:71:5f:94:
                    6a:55:95:e1:8b:9a:2c:b7:02:ea:7d:b7:48:d5:a9:
                    60:1e:41:39:3e:a3:93:7d:c0:d4:fb:de:99:be:d9:
                    72:c0:4d:31:14:ed:fd:e3:d1:17:f0:28:d1:8c:38:
                    46:fd:30:8d:30:23:c0:06:8b:f5:9a:81:c9:e0:8c:
                    a1:de:1b:ee:65:e7:3b:89:83:8d:6f:d9:ea:a9:f6:
                    bb:54:59:b3:bf:5a:80:d6:a4:e8:bf:f4:8b:86:67:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6F:F7:83:4C:5F:F5:17:FA:2C:51:07:59:BB:27:34:79:90:DE:0B
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:59:cd:b7:88:af:b6:bc:eb:1a:2d:94:94:f6:d6:10:28:
         89:67:b9:21:2b:e1:70:a4:38:1e:e9:ae:55:d7:b9:e2:b9:69:
         a7:61:ce:52:a9:db:da:6a:b6:d1:6a:08:5a:c6:47:21:22:42:
         20:a9:dd:8e:cb:ee:6f:5b:a0:5b:eb:06:c9:67:62:7d:bc:a3:
         78:f4:ee:cd:11:3a:e2:c2:84:98:83:28:93:ad:aa:e6:76:f1:
         b6:27:13:ff:76:82:ca:63:0b:b9:ed:98:7c:af:fc:f1:12:71:
         a5:06:ad:dc:26:8d:31:48:84:2f:f2:de:24:3c:1a:0c:8a:be:
         f3:f4:28:98:cc:64:54:70:eb:f4:1c:6c:9d:eb:cf:c0:29:b8:
         e6:0d:e9:54:33:bc:19:00:cc:7f:ea:41:da:24:18:98:1f:2c:
         f1:bf:a5:55:55:5e:86:a3:d1:7a:3a:4a:d0:d8:99:7a:74:cf:
         e4:c1:6f:ca:a1:94:cc:07:a6:8e:b3:8d:56:7b:68:ae:ee:72:
         b3:5b:2c:0e:98:96:2c:6b:ac:2a:00:5d:04:7b:0c:59:25:ee:
         6f:ba:34:76:9f:58:65:63:33:95:70:fe:5a:bc:7e:67:c1:51:
         bf:0f:dc:eb:7a:0a:ec:07:89:92:a4:c9:f2:26:7f:d6:fc:06:
         24:01:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:38:16 2025 by rpki-client