Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
File:                     DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft (raw, json)
Hash identifier:          l12dFiYhOR3IWun8XhvRq1zD4WOWyyP2FPBJxUa3gKA=
Subject key identifier:   7F:A8:AA:6E:9F:FC:0E:B2:3E:62:67:AF:9B:F1:8A:C6:C0:B4:E1:19
Authority key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Certificate issuer:       /CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Certificate serial:       36421470F57FB09D23B556CBD10E60B7E7EBE3C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
Manifest number:          019C
Signing time:             Mon 23 Mar 2026 21:52:04 +0000
Manifest this update:     Mon 23 Mar 2026 21:47:04 +0000
Manifest next update:     Tue 24 Mar 2026 23:37:04 +0000
Files and hashes:         1: DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl (hash: DHbDzR2/DNXKphXIlYe+Tq16laljSg5A0aiBgXUd2b8=)
                          2: 323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (hash: Hf5yARcahJxd2qwBIlcKhy0tIV/SIDbTzFn9LXhXI0Y=)
                          3: 3137302e3135302e3230302e302f32322d3234203d3e20323635303338.roa (hash: +2p9wnelJvyIdVwZ5qUKRl86p9f5kfdKUAcjXUn447w=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:42:14:70:f5:7f:b0:9d:23:b5:56:cb:d1:0e:60:b7:e7:eb:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Validity
            Not Before: Mar 23 21:47:04 2026 GMT
            Not After : Mar 24 23:37:04 2026 GMT
        Subject: CN=7FA8AA6E9FFC0EB23E6267AF9BF18AC6C0B4E119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7e:5c:53:2a:4a:27:76:3c:7c:d8:e7:a6:ae:
                    8a:36:99:f5:cb:07:3f:f9:34:04:4e:59:d4:b5:52:
                    20:4a:8b:e7:dd:f5:f0:df:31:88:b9:1e:45:3a:82:
                    f8:cb:58:c3:80:fe:b1:c3:cb:9c:9f:34:c1:2e:a9:
                    f3:1d:f9:62:fb:ea:25:ba:ad:53:3f:69:9f:1c:5d:
                    54:d1:9d:84:07:9a:bb:ce:83:6f:61:c8:e9:6e:d5:
                    b3:a0:2a:f2:1e:2b:e5:02:c8:be:ca:59:62:cc:da:
                    1d:a4:75:d0:b5:c8:9c:7f:01:0b:32:f2:35:31:8e:
                    83:27:7f:13:6f:08:68:8f:0b:4f:3e:db:7f:65:73:
                    b5:75:7a:cf:e3:8f:98:fe:34:40:c0:81:d6:2c:ed:
                    91:01:9e:86:ad:5e:65:d3:a9:80:20:83:49:f8:a9:
                    ca:99:df:a7:6a:b9:90:aa:5b:3b:a4:e9:82:85:7a:
                    aa:03:7d:07:0c:55:73:e2:cd:b2:a1:71:55:f8:f5:
                    81:6c:b2:a7:a2:b3:a8:a8:62:3a:4e:69:48:81:be:
                    f5:ce:3d:e2:1c:8e:68:fd:21:e6:64:e9:0d:22:93:
                    1a:de:9a:b8:e9:96:a4:5c:2d:05:a1:52:f6:bf:e9:
                    37:6e:60:3f:48:3b:3e:25:5d:29:53:87:7d:6d:ef:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:AA:6E:9F:FC:0E:B2:3E:62:67:AF:9B:F1:8A:C6:C0:B4:E1:19
            X509v3 Authority Key Identifier:
                keyid:DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:14:ac:98:8c:83:3d:10:60:de:88:3d:bc:a8:93:e7:7b:
         be:4d:2f:7a:b5:be:8c:c8:39:1c:ef:cd:10:b8:ad:09:29:75:
         07:1c:2c:78:f4:da:d8:3c:fe:2f:4f:17:a2:bc:0c:3f:d9:2f:
         98:1c:0b:63:e8:bc:01:6c:6d:98:35:07:6f:26:98:f0:e5:fd:
         e4:47:74:9d:12:d3:9f:d0:16:84:64:e1:b3:9d:ed:f8:ca:86:
         81:03:93:f1:4c:f7:65:90:ca:08:02:30:ad:be:11:36:cb:d4:
         c3:9a:9b:21:a6:57:9a:2f:44:d2:c3:57:bf:36:ad:4c:fb:b8:
         1f:54:c7:d0:d1:ae:fd:c6:e7:ed:ae:4e:42:56:ae:2d:71:43:
         9d:d2:b0:ea:4d:bf:2c:69:d4:d0:c3:c4:09:b1:46:0c:b1:50:
         16:2b:47:2e:9f:f0:6e:a1:ac:d3:6d:f8:b1:5e:da:09:7b:34:
         90:33:06:40:d1:2f:15:83:e3:55:c5:70:ea:5e:4b:2d:c2:67:
         bc:1b:ea:ed:ab:bb:11:94:81:07:b3:45:eb:8f:02:80:5c:4d:
         cf:98:51:50:54:84:63:af:82:fe:00:4b:23:ce:f8:a8:ef:6c:
         a9:e7:ac:01:77:a5:86:2c:9d:95:20:3d:75:dd:9f:e8:f0:1f:
         24:42:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:32:48 2026 by rpki-client