Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
File:                     D95EAB9296B47F53E06E1370749CCDB5566F072F.mft (raw, json)
Hash identifier:          peOoPUGN53ToPZqFhcJmejxFYiMvFQwitBcSFNmBGIk=
Subject key identifier:   F2:8C:6E:16:C2:F7:89:C8:7A:41:07:A5:8E:8D:11:DB:D1:A4:3A:DF
Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F
Certificate issuer:       /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
Certificate serial:       5BEBB0577CB5A67B2385780071E44C7530F31F62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
Manifest number:          0220
Signing time:             Fri 08 May 2026 11:40:41 +0000
Manifest this update:     Fri 08 May 2026 11:35:41 +0000
Manifest next update:     Sat 09 May 2026 14:35:41 +0000
Files and hashes:         1: 3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (hash: CXd1o7mhapKzS3/kufqApABlJcEynXV+O6whBUELAGU=)
                          2: 323830343a333465633a3a2f33322d3336203d3e20323635343838.roa (hash: Jq2RSor6JMiuvs6RQbUWKzlo/9/BPlMSl61Euv+65ik=)
                          3: D95EAB9296B47F53E06E1370749CCDB5566F072F.crl (hash: BP+ftuJxuP0GlfPD9lnmlZIwpvVR4amuOmX5BTkdMb4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:eb:b0:57:7c:b5:a6:7b:23:85:78:00:71:e4:4c:75:30:f3:1f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
        Validity
            Not Before: May  8 11:35:41 2026 GMT
            Not After : May  9 14:35:41 2026 GMT
        Subject: CN=F28C6E16C2F789C87A4107A58E8D11DBD1A43ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:be:43:cd:9c:dc:06:6d:a4:8e:fc:01:7b:
                    a6:b5:89:63:06:88:3a:3e:bc:b6:4c:d3:4b:9d:10:
                    45:c1:b3:18:a5:49:16:e0:48:16:40:87:d8:bf:c5:
                    c4:b0:58:e7:cf:74:62:b8:a1:c6:7f:b5:85:3d:31:
                    45:a8:26:19:9e:c8:9e:9d:b9:37:d0:c0:c4:44:79:
                    de:29:bf:b7:ea:b9:f3:fe:df:6b:b3:da:e2:7d:45:
                    ba:0e:40:93:ed:e1:14:8c:b2:b4:a9:7e:99:91:71:
                    97:30:7f:a9:fc:5c:39:55:b5:f9:e1:de:90:c5:50:
                    ce:bf:9c:13:46:65:e1:db:dc:d7:53:06:8c:46:3d:
                    5e:24:c2:bd:08:42:b3:0f:de:55:e3:e2:00:0e:e1:
                    b8:7e:fb:ec:89:ac:ef:b2:bb:1d:16:47:87:2f:5e:
                    9d:56:4a:f6:21:f8:e2:64:32:7b:fc:95:c6:66:f8:
                    f2:93:7e:4a:f7:ae:e7:1b:f5:cc:b4:e3:47:bc:4b:
                    c4:50:5e:e7:6d:b0:a8:3a:d9:36:82:eb:ec:33:18:
                    f7:17:3c:da:60:42:56:ae:e9:2f:2c:11:40:44:7a:
                    48:ac:ed:7d:da:a7:5d:49:01:e6:5f:bd:12:9e:31:
                    e4:d1:df:2b:00:98:71:c1:2d:dc:e9:42:f5:10:07:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:6E:16:C2:F7:89:C8:7A:41:07:A5:8E:8D:11:DB:D1:A4:3A:DF
            X509v3 Authority Key Identifier:
                keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:79:bf:97:ac:8c:92:35:04:4d:4d:53:4d:ab:70:06:8b:79:
         78:67:65:4d:27:0e:2c:9f:00:7e:2b:43:45:6f:4a:78:e5:57:
         bd:fa:81:a9:89:91:cf:89:dc:37:ed:4e:b8:2c:d2:48:1f:e7:
         a6:06:cf:1b:39:01:4d:17:63:9f:35:5a:1b:48:35:e7:48:04:
         22:2e:66:65:84:20:5c:4f:29:9f:b7:d5:16:ca:5f:ad:f0:22:
         38:4c:e4:0c:d9:f3:76:40:19:ca:8f:f5:98:cc:0c:f1:af:4b:
         33:13:99:57:4e:fa:ef:ae:38:a3:78:7e:52:4f:45:9b:36:5f:
         8a:2f:6a:3a:30:50:a7:47:fa:38:c6:89:fa:a2:90:37:a8:d2:
         f0:ce:88:56:e9:c4:dc:ef:f5:e2:c6:b9:26:e6:37:da:8d:80:
         1a:93:f5:19:1e:7a:1e:d6:65:bb:b2:36:8f:94:24:e0:a9:50:
         fd:dd:eb:df:eb:f3:1e:86:a4:f0:20:2b:35:c7:8c:95:9b:62:
         2f:d7:20:a3:c9:e2:18:95:23:be:f1:fb:c7:d2:5b:4b:fb:ee:
         d8:11:60:31:42:c9:07:23:59:13:dc:35:4a:c6:25:be:bd:d7:
         ff:a1:cc:00:be:ad:f1:ab:7b:af:4a:ef:9b:2d:2f:8e:d3:3e:
         94:68:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:01 2026 by rpki-client