Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.mft
File:                     121D0F950B1047AFE8B6D6DAE8356086D8187EBE.mft (raw, json)
Hash identifier:          IDkkXCStxbwNwYnHeT+/x0np4GgDmiM6DgVvjw0Vse8=
Subject key identifier:   6E:01:E4:D7:59:EC:AC:9C:B8:58:72:CB:EC:5D:37:85:3C:62:EE:74
Authority key identifier: 12:1D:0F:95:0B:10:47:AF:E8:B6:D6:DA:E8:35:60:86:D8:18:7E:BE
Certificate issuer:       /CN=121D0F950B1047AFE8B6D6DAE8356086D8187EBE
Certificate serial:       7B2617889BF015B12B796CC2AD557DABB06E661B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.mft
Manifest number:          1B
Signing time:             Wed 22 Jul 2026 19:08:07 +0000
Manifest this update:     Wed 22 Jul 2026 19:03:07 +0000
Manifest next update:     Thu 23 Jul 2026 21:32:07 +0000
Files and hashes:         1: 323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (hash: VpcRIOQEw0lLjTQ9G2dYOlItLH9j8Iw6TWGiln/vAd0=)
                          2: 34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (hash: GXDRkN2Epg+Hcu2VZAygBAekqkWhpMrnqLcny8RKBSs=)
                          3: 121D0F950B1047AFE8B6D6DAE8356086D8187EBE.crl (hash: DRsFCc7QrJXyvvXUVUiYcumam/Hg4zKg9xVwfpqdkfE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:17:88:9b:f0:15:b1:2b:79:6c:c2:ad:55:7d:ab:b0:6e:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121D0F950B1047AFE8B6D6DAE8356086D8187EBE
        Validity
            Not Before: Jul 22 19:03:07 2026 GMT
            Not After : Jul 23 21:32:07 2026 GMT
        Subject: CN=6E01E4D759ECAC9CB85872CBEC5D37853C62EE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:56:cc:5b:df:0e:b3:85:3e:3c:04:e2:c7:
                    8b:ca:1c:b4:8d:46:1e:f2:57:c2:5e:d1:ad:23:40:
                    97:f5:eb:20:71:f3:3e:7b:cd:67:eb:d8:bb:66:54:
                    ac:b4:11:e9:a8:7f:f9:7a:98:f8:50:22:9f:91:33:
                    d7:f7:fe:ac:68:bf:92:92:66:d2:9a:78:34:4a:7a:
                    d1:40:87:e4:6f:2f:d6:ef:66:1a:58:2d:12:70:2a:
                    01:19:84:fa:74:7a:7b:42:88:d4:29:68:66:d7:f7:
                    89:79:54:3b:ad:f1:7a:30:f3:75:10:7b:a6:4b:3b:
                    df:dc:7a:db:d5:65:7f:6e:f9:ca:61:5e:d7:a8:02:
                    1b:ee:01:da:67:76:d6:bd:95:10:b8:e4:3a:b5:33:
                    06:ad:7e:08:24:48:54:e2:09:19:82:fe:7b:e0:5d:
                    55:ad:8e:c0:d9:49:e2:ad:9f:ff:ad:06:9a:5b:c8:
                    a4:e0:8e:0f:4b:20:50:5d:f3:23:b8:24:8f:b2:00:
                    e2:d8:51:c9:1a:63:7d:5c:b8:0d:e2:13:c3:ed:f7:
                    4a:12:87:42:c9:74:7e:08:38:64:7c:5a:52:e8:c4:
                    f3:7a:80:76:cd:81:a9:bd:da:99:97:ac:63:28:76:
                    83:63:53:83:9a:a2:86:e5:90:f4:86:87:22:56:36:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:01:E4:D7:59:EC:AC:9C:B8:58:72:CB:EC:5D:37:85:3C:62:EE:74
            X509v3 Authority Key Identifier:
                keyid:12:1D:0F:95:0B:10:47:AF:E8:B6:D6:DA:E8:35:60:86:D8:18:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:9f:a7:d7:12:0f:30:7a:25:60:42:ba:9d:cf:53:eb:ca:
         a6:96:ef:4f:05:02:ac:7e:45:e8:ed:c3:93:54:d9:9b:ae:f4:
         16:2f:e2:4a:03:14:a2:a5:61:38:99:dc:e4:1f:d7:dd:72:53:
         e2:3f:09:fd:d7:83:f4:47:82:00:ac:ca:88:a9:69:e3:a0:ed:
         9c:ba:bb:73:68:77:38:f5:52:1f:27:ac:c2:46:71:19:11:fb:
         c1:c3:35:ce:39:77:e4:ed:ca:88:66:d2:84:df:ef:63:03:28:
         87:03:e7:13:54:77:50:d4:70:ce:45:a4:05:2b:65:67:a9:ca:
         15:1d:bc:92:d9:6b:6a:06:f0:75:c5:7d:a1:55:a5:3b:59:49:
         48:e2:21:00:68:57:18:5c:8b:6b:44:cd:03:c0:81:27:74:37:
         36:fc:e1:ed:67:0a:a4:6c:eb:e5:27:19:e0:cb:a6:55:8e:d5:
         42:07:d0:c9:86:7c:36:2a:ae:81:71:3c:5d:f1:d8:b8:44:d4:
         db:8b:2f:0f:a3:60:3c:53:06:72:90:65:d9:e6:50:9a:1f:0f:
         35:fa:52:65:9a:c9:2d:4d:a4:ea:4e:28:5c:a1:34:28:b3:d7:
         88:04:62:f7:a2:5f:cb:b5:a6:be:4c:c6:be:9d:f0:21:c0:d6:
         73:30:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----