Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
File:                     2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft (raw, json)
Hash identifier:          j9gYcZnML4sP1ZvSu0iaSaXpDRSASHxkLDt+S6U3hIY=
Subject key identifier:   B2:E7:6F:90:48:A7:BA:48:B0:41:05:79:7F:60:F0:29:C4:76:09:D4
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Certificate issuer:       /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial:       0FBAC30334856D38280D93E6EA81BD6000CCF425
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
Manifest number:          0108
Signing time:             Fri 17 Oct 2025 06:52:55 +0000
Manifest this update:     Fri 17 Oct 2025 06:47:55 +0000
Manifest next update:     Sat 18 Oct 2025 09:15:55 +0000
Files and hashes:         1: 2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl (hash: rGDs1KbPEO02G/UMcwtTfvJ7hbOGGRrZJrHOxwpKflo=)
                          2: 323830343a336436343a3a2f33322d313238203d3e20323636353238.roa (hash: u70dof0Nv3t/o40vZO6sJ5daT4W/hUj7ameCydawIcU=)
                          3: 34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (hash: PaAf6dbPKpSc1oNUTLWDquOzA8hHyoSm8cfYfORzNgQ=)
                          4: 34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (hash: H3h45nprQy9gOWNY0tht2Ha1WTkBtxPzW4uwro7AW6I=)
                          5: 34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (hash: kckAr7b9SV3SYv935Wl6Du3jL7ZexxGpWjOhh9UcIPA=)
                          6: 34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (hash: Y5K1r5CF+tQf/1gLx3G7GXhfmEu4UGA0sI9DzjM2ZSw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:c3:03:34:85:6d:38:28:0d:93:e6:ea:81:bd:60:00:cc:f4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
        Validity
            Not Before: Oct 17 06:47:55 2025 GMT
            Not After : Oct 18 09:15:55 2025 GMT
        Subject: CN=B2E76F9048A7BA48B04105797F60F029C47609D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:26:5d:db:1c:c9:83:44:97:af:f9:46:7c:
                    13:3f:85:19:b4:bc:80:11:79:6f:cd:6a:c2:8c:51:
                    a3:71:74:fb:c9:57:26:eb:8e:0f:43:80:b3:33:84:
                    50:a8:47:5b:0b:a1:f4:f3:01:8b:6c:bd:2f:a0:e8:
                    7a:9c:c6:f1:77:b3:ee:77:4a:38:61:1c:ce:c7:fc:
                    0f:e0:4d:52:b7:ad:8d:5b:bc:05:28:53:ca:fd:3f:
                    b4:43:34:0b:73:f4:37:01:d6:ba:f0:5b:7a:c5:eb:
                    7b:03:0b:9a:c8:71:98:01:a4:bc:14:0b:34:b2:42:
                    d1:f1:13:39:0a:20:f0:60:44:86:96:a7:3b:15:84:
                    06:5b:3b:9d:5c:7f:0e:09:59:1b:3d:34:60:9f:bd:
                    97:f8:0c:24:c9:2f:d5:76:74:9e:d1:cc:ce:34:fc:
                    3d:e1:20:05:ed:0f:ea:2d:0d:b5:94:30:d8:37:67:
                    66:09:43:19:2e:47:3d:d0:de:de:67:a1:52:43:89:
                    93:4d:31:9b:77:ca:9d:88:c3:b1:f6:fe:d7:b5:18:
                    d2:75:73:3f:3b:ac:c5:d8:b5:2e:53:c3:19:31:09:
                    fa:3f:b5:67:3c:5c:c4:4f:96:1c:ca:03:f3:26:02:
                    f7:48:db:3e:57:69:9b:24:77:91:28:ab:ad:65:20:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:6F:90:48:A7:BA:48:B0:41:05:79:7F:60:F0:29:C4:76:09:D4
            X509v3 Authority Key Identifier:
                keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:ea:f4:3f:45:69:7f:ed:57:9a:34:51:52:37:8f:44:a6:
         dd:16:b5:ef:40:ab:9a:49:d6:f3:db:f1:73:50:1e:39:17:db:
         d7:0e:70:18:c8:33:69:ab:2f:b5:7a:fe:05:51:3c:05:71:51:
         1e:a6:6b:5e:40:ae:24:83:b5:76:e3:1b:a3:4a:7d:5a:99:fe:
         36:2a:5d:f3:f4:56:b4:67:0a:0e:ef:1b:77:ef:d2:35:16:ec:
         59:c4:53:fd:21:27:64:ab:50:2b:88:ec:84:31:20:88:ac:89:
         a4:9d:b8:f5:92:31:2d:df:cc:85:12:cc:d8:2c:78:40:55:e3:
         ae:82:e8:5e:79:5d:be:1c:3d:db:37:b7:11:4b:73:e5:9d:0b:
         fb:28:1b:d7:44:ba:a3:58:90:7b:ba:ae:27:94:6e:05:34:21:
         9d:77:2c:1f:49:fc:32:77:d9:20:33:c8:cc:40:f0:99:20:a6:
         ff:3f:de:e5:32:ee:9a:3d:8d:db:e2:2f:45:a1:ab:2a:9c:4f:
         99:92:e2:36:14:88:f1:b0:08:2f:d4:2d:4c:c8:59:d2:f1:dc:
         b8:6a:83:1c:b3:53:01:b3:f0:78:60:a8:b9:a0:a8:73:f4:49:
         f8:e8:05:05:e8:3b:b1:a5:76:a9:30:07:e5:c2:f0:3b:c4:27:
         fa:14:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:41 2025 by rpki-client