Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
File:                     D7277992174B249B4D551A37C49F2DD4D7AA9968.mft (raw, json)
Hash identifier:          p19/PGyuUk5i071y8fdEdQ+SyIdyWwJuNSdxCHZPg+k=
Subject key identifier:   83:35:81:DA:1A:5B:3C:87:2A:91:37:42:34:9D:AB:D3:49:57:89:28
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Certificate issuer:       /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial:       4E50D720CFC1F09A29A64C152AC6C9E5ECA36CC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft
Manifest number:          02EA
Signing time:             Fri 17 Oct 2025 12:45:57 +0000
Manifest this update:     Fri 17 Oct 2025 12:40:57 +0000
Manifest next update:     Sat 18 Oct 2025 14:29:57 +0000
Files and hashes:         1: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: 1hrs42C0NuKTCWdl4nZ4z8ciWthP80ssGiTzWscpAs4=)
                          2: D7277992174B249B4D551A37C49F2DD4D7AA9968.crl (hash: GYvOQoDUt1iaK0yxvc3yw2pS9o/Whv7XlkPyfoaQPFU=)
                          3: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: 09sR2qJ2E3J6NBU1Y0LN9kES2Egk7tW274Ui813vwu4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:50:d7:20:cf:c1:f0:9a:29:a6:4c:15:2a:c6:c9:e5:ec:a3:6c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
        Validity
            Not Before: Oct 17 12:40:57 2025 GMT
            Not After : Oct 18 14:29:57 2025 GMT
        Subject: CN=833581DA1A5B3C872A913742349DABD349578928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:18:6d:94:9a:79:f5:8a:3f:8f:af:25:4f:
                    2f:0e:19:93:71:3a:05:95:57:bc:a3:27:2d:7f:68:
                    52:99:3e:19:00:1b:19:bf:0b:ed:c9:d8:ef:93:c4:
                    63:c3:90:48:73:ff:2f:5c:7d:a0:6a:12:bc:be:94:
                    72:71:ab:91:85:4a:a9:c3:bf:ca:c8:b2:3d:61:e0:
                    4c:fb:3f:a9:e2:f2:10:32:8f:04:07:f3:5c:70:a6:
                    a4:91:64:a5:25:66:7f:38:d3:c5:04:dd:c1:a2:24:
                    7c:73:e3:09:ae:1b:6a:3b:7b:15:5a:d1:bc:d7:ef:
                    3d:01:cb:6c:00:b8:b6:34:2e:cb:40:56:f1:75:fe:
                    aa:a7:12:c6:a2:0b:7c:bc:3d:93:fc:44:eb:48:2b:
                    a1:cd:28:c9:67:dc:72:16:c6:b3:f2:8c:69:5b:a7:
                    7d:5a:a5:94:f5:92:a5:66:85:5a:69:4b:8d:35:05:
                    ec:f6:56:99:07:1f:3c:8a:df:2a:bd:e9:60:46:d0:
                    42:6d:0b:a5:b6:da:bc:77:a4:6a:cd:5c:e7:80:c5:
                    6c:e9:71:58:b5:48:8b:50:ed:f4:3e:b3:d1:0b:59:
                    c6:a3:4b:2f:4f:82:db:b3:0e:d4:a8:a9:77:3d:ca:
                    7c:8c:45:e8:70:a7:a7:45:72:dc:47:e3:fd:74:3b:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:81:DA:1A:5B:3C:87:2A:91:37:42:34:9D:AB:D3:49:57:89:28
            X509v3 Authority Key Identifier:
                keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:04:f8:5e:6e:4c:40:78:e7:b5:c2:1b:fb:1a:4a:ed:ff:
         72:7a:dd:a2:b5:24:1d:c4:0c:c5:57:8d:54:88:a8:dc:71:eb:
         f6:b8:43:84:04:11:46:1d:3b:99:1d:c9:b3:6b:f9:60:74:32:
         0a:79:15:d9:2f:65:eb:93:d7:f0:8a:47:df:ef:e4:1d:f8:5c:
         aa:48:a6:b0:22:39:e1:b7:09:e7:bf:84:6e:25:a9:df:0e:48:
         61:da:d7:86:8d:b5:0c:65:fb:50:f2:3b:4d:7b:58:13:ff:11:
         50:ff:bb:7c:ea:ef:70:95:9d:80:e4:7d:91:ec:34:d5:dc:f6:
         71:fe:ad:9f:0f:0a:92:b6:29:23:b0:98:9e:a1:90:52:d2:b0:
         d9:60:d9:eb:10:1a:cc:ff:33:f9:0e:d3:6f:13:84:03:5d:45:
         e7:cf:89:24:93:d9:d7:a5:d5:86:35:4b:17:fe:56:52:e3:67:
         8b:1b:38:dc:34:29:82:01:df:6e:ce:fa:d2:12:7e:b1:46:4c:
         14:e6:50:78:63:15:a9:55:3a:f2:bd:a5:ff:02:06:15:e5:78:
         7f:0b:82:3f:be:d9:7b:86:3e:a5:cf:d7:3a:3c:0d:55:f7:97:
         56:31:bb:a4:9b:68:ff:0e:20:af:a7:37:2a:00:27:9b:ab:d4:
         92:e4:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:07 2025 by rpki-client