Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
File:                     61B932CD849CE672D7ADF5C35F76FC83A060268C.mft (raw, json)
Hash identifier:          7zHJVdgv2LrqfDXwnktIUJ8Q03iwgcImzuIf8L0Hg4g=
Subject key identifier:   2E:A0:2E:3B:40:66:18:80:F8:9E:49:D1:4C:69:F3:EB:3C:2F:EB:44
Authority key identifier: 61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C
Certificate issuer:       /CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
Certificate serial:       656B01DC9D1E1F4835B993CCC4BDF303862CB07B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft
Manifest number:          6D
Signing time:             Fri 22 Aug 2025 15:37:20 +0000
Manifest this update:     Fri 22 Aug 2025 15:32:20 +0000
Manifest next update:     Sat 23 Aug 2025 19:11:20 +0000
Files and hashes:         1: 34352e36352e3137352e302f32342d3234203d3e20323636323635.roa (hash: xTjdgrsSf7eS6QiZ/DFFtpt8x8SSY409UyO0ptsXCyE=)
                          2: 34352e36352e3137332e302f32342d3234203d3e20323636323635.roa (hash: Pwlhwn3z5AEcR4b+hFG8jqGhnjgT7XzkXEtYQtgZF/o=)
                          3: 34352e36352e3137322e302f32322d3234203d3e20323636323635.roa (hash: EQ7LocUtdz7FIdw6ws3boyOYO2ZxmIMlzocmAToq4sw=)
                          4: 34352e36352e3137342e302f32342d3234203d3e20323636323635.roa (hash: wxXy4vFGwrKcA2iJqYX+fV+v8EA1zGD4f1yXRJwsOfY=)
                          5: 34352e36352e3137322e302f32342d3234203d3e20323636323635.roa (hash: p1FwCHD99PSomGKEJmOwJzBd93Z4cWePJqTpQsGPtFw=)
                          6: 61B932CD849CE672D7ADF5C35F76FC83A060268C.crl (hash: eXcmNO6Vkr6Z6yhueWBgWFek0MQ+248sFnMN61xt7Yw=)
                          7: 323830343a336434383a3a2f33322d3438203d3e20323636323635.roa (hash: 7pe9zgviJUqtOa6vxaSjX4/wyaVKMC9jtGBCJeotchY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:01:dc:9d:1e:1f:48:35:b9:93:cc:c4:bd:f3:03:86:2c:b0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B932CD849CE672D7ADF5C35F76FC83A060268C
        Validity
            Not Before: Aug 22 15:32:20 2025 GMT
            Not After : Aug 23 19:11:20 2025 GMT
        Subject: CN=2EA02E3B40661880F89E49D14C69F3EB3C2FEB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:ac:e3:69:8e:34:f1:a5:5a:a2:c4:f9:b7:
                    9a:fb:0f:da:17:87:8e:60:2b:8b:fc:ef:5a:c8:7f:
                    c5:aa:db:d8:2e:a7:65:aa:d7:81:28:08:d8:73:0e:
                    f6:90:12:3b:7d:e6:e6:1f:3b:30:b1:61:98:70:9a:
                    16:94:71:ae:21:54:ad:7a:03:d3:6e:f4:22:08:3a:
                    9a:78:b2:f7:f5:6f:4f:12:44:94:bd:df:98:ec:32:
                    a3:29:15:b1:5b:3d:44:89:b3:ca:46:f7:71:57:e4:
                    aa:53:cf:65:1b:8b:0b:5b:3a:23:0b:2b:ce:99:6e:
                    46:53:f3:c8:13:0e:ce:a6:65:d1:3d:96:65:a9:84:
                    2c:43:28:3d:a9:40:fe:86:93:4c:ad:d3:f4:35:a6:
                    54:f0:bc:b2:e0:4c:c6:2a:8a:01:39:bb:82:28:38:
                    8a:24:6b:93:e2:a5:16:d8:f1:70:c1:43:3e:22:15:
                    cf:f0:18:b1:22:d9:f2:37:cd:7d:b6:74:fd:75:ed:
                    58:12:fe:e9:ea:58:18:9f:82:4b:2a:98:db:1f:a7:
                    7b:22:dc:da:10:39:7a:35:17:e4:17:94:40:6b:03:
                    53:96:e3:8f:91:91:3d:62:38:95:73:9b:73:8d:63:
                    c3:11:fa:8a:c0:cb:b5:75:bc:13:80:53:b6:da:36:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:2E:3B:40:66:18:80:F8:9E:49:D1:4C:69:F3:EB:3C:2F:EB:44
            X509v3 Authority Key Identifier:
                keyid:61:B9:32:CD:84:9C:E6:72:D7:AD:F5:C3:5F:76:FC:83:A0:60:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B932CD849CE672D7ADF5C35F76FC83A060268C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7o5gN66MRzSJonr1QxuqRemjBeAnmkBfSQ87PrnzavA/0/61B932CD849CE672D7ADF5C35F76FC83A060268C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:e6:ec:98:8d:db:20:37:8f:b5:b1:fc:50:ac:cf:c0:65:
         81:24:7a:11:1e:96:94:59:e1:48:34:6f:6a:26:30:cd:20:5a:
         e3:ac:9d:f4:38:65:8f:00:74:a6:2e:0b:b3:e2:42:88:96:20:
         cb:a7:68:64:2d:d8:a2:aa:a9:36:cb:95:a2:66:30:0b:21:de:
         ab:aa:e2:0e:d3:79:cc:f9:24:0e:0c:db:3c:fa:b9:ca:1e:32:
         c6:c6:74:89:5e:37:80:fb:cc:b2:25:20:60:0e:e8:b4:8c:00:
         0c:06:5d:fa:e7:08:7f:9d:bc:ac:3c:43:c2:1b:41:e9:ce:08:
         02:89:50:29:63:a8:c9:48:34:90:85:c3:02:d1:37:5d:49:a0:
         ca:86:cf:97:f0:62:fd:c8:63:ec:8d:c3:2b:18:58:34:15:d8:
         ed:11:a7:9d:80:43:d7:59:a4:de:a7:05:f9:7c:64:74:18:14:
         a2:27:a3:85:c8:1d:d1:05:cb:b6:5f:6b:f0:1d:54:b2:81:36:
         f0:05:67:ca:ba:8b:09:b9:bd:fb:47:fb:4f:c6:d0:5e:0d:1c:
         55:ea:06:7f:be:f3:0b:ea:3b:77:62:8a:e9:45:f6:e2:c3:33:
         c0:c7:41:d8:48:d5:d4:e1:e8:56:98:24:06:40:18:8d:ff:70:
         05:78:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:30 2025 by rpki-client