Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
File:                     813D65FBA309A9EA091B5CF0F748FC498935778B.mft (raw, json)
Hash identifier:          2uzDTFHu9/2L6uGVLShtNoFzyg60vF1o6JLinvH2fak=
Subject key identifier:   71:D3:EC:3D:25:BD:1C:3C:68:0D:30:33:69:3D:41:D9:FA:B8:96:E6
Authority key identifier: 81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B
Certificate issuer:       /CN=813D65FBA309A9EA091B5CF0F748FC498935778B
Certificate serial:       3E8844E2F2A4FCEBE81FF3E37F9EDC59E78928B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft
Manifest number:          0386
Signing time:             Tue 24 Mar 2026 22:41:40 +0000
Manifest this update:     Tue 24 Mar 2026 22:36:40 +0000
Manifest next update:     Wed 25 Mar 2026 22:46:40 +0000
Files and hashes:         1: 34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (hash: Gp2B6Sm5E8QH4lb91CHk+nWT5hdy589nOvNEKQeOUDY=)
                          2: 323830343a356463343a3a2f33322d313238203d3e20323638393931.roa (hash: RMAEq78x7MQGVpWSYSvwTYbjvJK8MWfaxDGS1nBvaGk=)
                          3: 813D65FBA309A9EA091B5CF0F748FC498935778B.crl (hash: rIdW7LFv5wXJXUP8t6+RLpuTll/QGv8LIbT9JpIHITc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:88:44:e2:f2:a4:fc:eb:e8:1f:f3:e3:7f:9e:dc:59:e7:89:28:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813D65FBA309A9EA091B5CF0F748FC498935778B
        Validity
            Not Before: Mar 24 22:36:40 2026 GMT
            Not After : Mar 25 22:46:40 2026 GMT
        Subject: CN=71D3EC3D25BD1C3C680D3033693D41D9FAB896E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:c1:43:0c:a6:0e:63:5e:55:36:bd:64:b8:
                    d7:db:1d:4a:20:ae:85:f2:3a:40:84:5d:f9:0d:ad:
                    36:cf:db:07:05:cc:75:b6:fa:08:00:89:00:23:4c:
                    31:93:3b:55:fe:d1:7c:6a:08:f4:05:2f:6b:c7:76:
                    b9:ba:40:c1:d9:85:3d:00:b2:55:fa:fc:d7:98:f0:
                    29:66:9a:ca:84:1c:6e:cc:b5:20:63:0c:6f:8c:57:
                    a7:32:6b:f3:e3:26:1d:e2:ec:67:74:26:b8:30:e9:
                    cf:bf:fe:a0:d2:05:f9:56:ad:0d:1a:3f:fc:d4:69:
                    c9:a8:a6:36:2d:95:88:4c:24:bd:aa:e6:fb:ae:80:
                    0b:67:a0:e6:25:4f:68:1f:b3:73:f2:a6:cb:5c:df:
                    82:18:e1:08:6a:fa:b2:04:e7:cc:d8:73:9c:dc:ad:
                    4a:77:19:69:5a:c5:e5:ee:33:82:3c:98:99:e1:c7:
                    7b:71:3d:c1:9f:a2:19:ef:93:12:79:5d:84:4c:ca:
                    8a:92:11:78:7c:22:d3:02:08:6c:89:0d:e7:6b:55:
                    f9:b9:f4:9c:f4:9a:83:95:b0:1e:b6:1c:96:7e:05:
                    5b:4c:cc:60:60:01:5d:6d:ff:ca:22:a6:98:f9:f1:
                    2d:8e:1b:41:1e:56:d9:5d:7d:4b:f6:3a:4c:4a:1a:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:EC:3D:25:BD:1C:3C:68:0D:30:33:69:3D:41:D9:FA:B8:96:E6
            X509v3 Authority Key Identifier:
                keyid:81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4b:71:32:0b:6c:79:c7:64:ec:e8:b8:41:9f:ea:9c:60:a7:
         39:1a:69:54:b4:c7:04:2f:ff:e2:91:31:4c:8a:c2:fc:ce:69:
         d0:c8:4c:a5:86:12:08:7a:04:cc:07:dd:de:77:4d:23:08:06:
         c0:fa:50:dd:77:22:37:9a:84:b5:06:67:81:da:f9:cb:d2:dd:
         ba:16:ab:a1:32:cb:d4:8c:a1:11:de:d9:c4:7a:ee:a0:fc:94:
         05:fd:0c:a8:36:61:04:da:a3:68:80:39:77:8b:03:89:1d:23:
         ba:ea:2a:b6:1d:e8:a6:7d:8d:16:68:12:46:49:d2:e1:73:58:
         14:44:25:1f:e4:1f:c6:04:b8:49:b4:b6:20:c4:48:a3:8a:e1:
         f3:3e:09:2a:41:f8:af:7a:50:5f:9e:57:b9:63:eb:16:a3:b9:
         d6:c2:ad:a5:73:c6:77:90:13:aa:66:29:e8:34:f6:a4:18:e3:
         40:cb:6c:b9:18:82:a9:69:48:90:dc:ac:6f:0f:3b:9e:3d:bc:
         c1:13:24:3f:c9:96:3c:ed:c7:3b:4d:b6:a2:6f:6f:31:06:3c:
         e3:de:5d:bc:bc:cb:92:81:c4:a7:1d:aa:a9:cb:41:8d:05:d9:
         a9:34:1f:dd:3b:7b:22:99:73:e5:9e:cd:5d:96:02:f1:7a:35:
         47:47:65:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPohE4vKk/OvoH/Pjf57cWeeJKLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEzRDY1RkJBMzA5QTlFQTA5MUI1Q0YwRjc0OEZDNDk4
OTM1Nzc4QjAeFw0yNjAzMjQyMjM2NDBaFw0yNjAzMjUyMjQ2NDBaMDMxMTAvBgNV
BAMTKDcxRDNFQzNEMjVCRDFDM0M2ODBEMzAzMzY5M0Q0MUQ5RkFCODk2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWG8FDDKYOY15VNr1kuNfbHUog
roXyOkCEXfkNrTbP2wcFzHW2+ggAiQAjTDGTO1X+0XxqCPQFL2vHdrm6QMHZhT0A
slX6/NeY8ClmmsqEHG7MtSBjDG+MV6cya/PjJh3i7Gd0Jrgw6c+//qDSBflWrQ0a
P/zUacmopjYtlYhMJL2q5vuugAtnoOYlT2gfs3Pypstc34IY4Qhq+rIE58zYc5zc
rUp3GWlaxeXuM4I8mJnhx3txPcGfohnvkxJ5XYRMyoqSEXh8ItMCCGyJDedrVfm5
9Jz0moOVsB62HJZ+BVtMzGBgAV1t/8oippj58S2OG0EeVtldfUv2OkxKGs7fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcdPsPSW9HDxoDTAzaT1B2fq4luYwHwYDVR0j
BBgwFoAUgT1l+6MJqeoJG1zw90j8SYk1d4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3
bXIvMC84MTNENjVGQkEzMDlBOUVBMDkxQjVDRjBGNzQ4RkM0OTg5MzU3NzhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxM0Q2NUZCQTMwOUE5RUEw
OTFCNUNGMEY3NDhGQzQ5ODkzNTc3OEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRtc0xuSE5uTmVxTkJtUUd2d05ZR2t6NlJrb3VOb1lBWldGZVpRZWo3bXIvMC84
MTNENjVGQkEzMDlBOUVBMDkxQjVDRjBGNzQ4RkM0OTg5MzU3NzhCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxktxMgtsecdk7Oi4QZ/qnGCnORppVLTHBC//4pExTIrC/M5p0MhMpYYSCHoE
zAfd3ndNIwgGwPpQ3XciN5qEtQZngdr5y9LduharoTLL1IyhEd7ZxHruoPyUBf0M
qDZhBNqjaIA5d4sDiR0juuoqth3opn2NFmgSRknS4XNYFEQlH+QfxgS4SbS2IMRI
o4rh8z4JKkH4r3pQX55XuWPrFqO51sKtpXPGd5ATqmYp6DT2pBjjQMtsuRiCqWlI
kNysbw87nj28wRMkP8mWPO3HO022om9vMQY8495dvLzLkoHEpx2qqctBjQXZqTQf
3Tt7Iplz5Z7NXZYC8Xo1R0dlNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:17:01 2026 by rpki-client