Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft
File:                     C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft (raw, json)
Hash identifier:          CbFZVUZKYIQkCC+Szq8wfAAS8Pc+4lX7d+7E+Zpah5E=
Subject key identifier:   E9:A0:4D:E8:41:25:37:40:DF:74:77:D8:09:B5:C1:7B:DD:E7:C8:05
Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
Certificate issuer:       /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Certificate serial:       7B206B6784FBF4A1B0429857F9B3956BA2D110F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft
Manifest number:          01BA
Signing time:             Sat 10 May 2025 09:33:38 +0000
Manifest this update:     Sat 10 May 2025 09:28:38 +0000
Manifest next update:     Sun 11 May 2025 12:48:38 +0000
Files and hashes:         1: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: Xh9t/warjYyg9POYqlk4f5pkH4i6auE3mleZ+Od7n+A=)
                          2: 323830343a353936343a3a2f33322d3334203d3e203631363133.roa (hash: IZIh9NCh8clcbcoyGzwcMlBi+us3JNCNDVceBdyNFhM=)
                          3: 3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa (hash: EhtmDDkzcmiX4JwPmKMWh6GnFFKp8HYt1ZcnQJgK7m8=)
                          4: 3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa (hash: HtDhyIfw3jNHYiZkcT8lwXkEYVkwLL93Y2AOhrtvGK4=)
                          5: 3230302e3139322e3135342e302f32342d3234203d3e203631363133.roa (hash: 9Bl5yncWAeOSm8N9QosZWr/902rNM2a3j5BLe82de+0=)
                          6: 3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa (hash: 9iiR35mEd65WRUH3Y31GcTvAfWWGmONClLM0IQV8hss=)
                          7: 3230302e3139322e3135322e302f32332d3233203d3e203631363133.roa (hash: yw8cT5GCfag/OZNIbxFXO9UcDzkNX0IWqUXeRidrr0Y=)
                          8: 3230302e3139322e3135322e302f32322d3232203d3e203631363133.roa (hash: SZb+s+INueINkL0Mw0isoCTOXFOPjes/9OmACLIGr0U=)
                          9: C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl (hash: TNfMLa53UU6cNBNJsHQvnnMJqG9rwGgIlnwNasyn1cY=)
                          10: 3230302e3139322e3135342e302f32332d3233203d3e203631363133.roa (hash: T7iTn9eS+b8oJWL1ueyFo5vdhPX/H7ZXAiAbrXccd8U=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:20:6b:67:84:fb:f4:a1:b0:42:98:57:f9:b3:95:6b:a2:d1:10:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
        Validity
            Not Before: May 10 09:28:38 2025 GMT
            Not After : May 11 12:48:38 2025 GMT
        Subject: CN=E9A04DE841253740DF7477D809B5C17BDDE7C805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:02:fe:1b:ad:51:68:c5:45:dd:a0:97:3d:
                    f1:2a:3c:e2:db:a4:ac:3a:1f:d2:e2:c9:5a:ca:75:
                    ce:5a:28:17:39:fe:f8:57:59:84:0d:37:57:9d:15:
                    27:d1:51:4e:f5:17:b3:09:8e:ec:f2:b1:55:5e:58:
                    ec:f5:88:4c:fb:11:2d:60:58:80:8e:64:d6:3e:bd:
                    63:93:d2:9f:14:9d:be:64:d3:fb:50:f0:c8:6e:d2:
                    6b:82:ad:db:c4:2a:8c:bd:12:5e:4f:bd:f1:25:e4:
                    77:58:a2:38:50:ce:e5:d5:1f:ec:ce:7f:f6:cc:9f:
                    99:9f:a8:0d:c4:62:ce:74:ad:ee:2a:c5:f3:72:4e:
                    98:6e:22:17:a5:c6:47:f6:72:dd:a4:f0:fa:c1:ee:
                    f9:3e:ba:a3:80:53:42:2d:b7:fc:aa:2f:ef:f4:13:
                    56:87:bc:f5:b2:87:10:4f:14:fb:59:29:1b:61:68:
                    e8:20:f7:73:b8:97:5e:6a:15:55:c9:3f:b2:6f:ed:
                    a7:07:e6:e9:17:7e:d3:06:a1:66:ef:04:50:84:c1:
                    33:53:90:43:d7:56:db:be:d8:13:e3:9d:6e:26:91:
                    3b:1a:dc:c7:53:a7:84:f9:2b:c7:e3:d7:74:15:cb:
                    00:05:e0:85:f9:35:ea:0a:0c:88:70:bd:1c:2a:30:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:4D:E8:41:25:37:40:DF:74:77:D8:09:B5:C1:7B:DD:E7:C8:05
            X509v3 Authority Key Identifier:
                keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:af:d2:ea:88:2e:1a:77:1a:af:95:c4:19:70:46:70:02:
         b5:13:06:9c:06:ba:30:ea:6a:df:cd:cb:d0:17:38:a4:ff:b8:
         3f:f3:17:b7:74:94:e7:22:c2:6d:dd:9c:fd:06:00:b9:25:f3:
         fa:be:44:b5:95:1a:ac:0f:54:c0:33:a2:f3:b8:95:9d:bb:ff:
         d1:5c:e1:7a:7b:32:65:15:b3:b3:15:03:a1:7a:ea:76:d4:bc:
         08:b0:83:a5:a8:a6:a2:0d:11:55:f7:78:fc:53:c6:c5:19:b1:
         8d:a4:a3:0b:62:c8:a3:df:49:69:32:3f:9f:cc:56:dc:ec:d4:
         4f:7e:e5:b7:b2:0a:7f:44:57:fd:0e:dd:31:3b:c0:42:36:90:
         37:b9:58:c8:6d:f2:18:a9:95:2a:63:7c:fb:f6:b2:e3:15:38:
         c7:d9:49:80:b7:bb:77:4d:7f:32:a6:c2:44:5e:a1:e7:38:e0:
         11:f1:11:75:47:38:8b:02:b5:55:99:53:5a:94:bb:b7:db:a7:
         7d:c3:0c:68:d1:a2:7d:13:53:bb:f1:2b:df:cc:3d:48:5e:f4:
         fd:0d:74:c1:7d:7e:e9:9c:a4:29:d9:d8:2a:58:5a:1b:58:d8:
         62:35:13:16:73:b3:dd:58:f0:db:6a:a3:ef:1c:a4:27:dd:09:
         57:03:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:25:24 2025 by rpki-client