Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.mft
File:                     AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.mft (raw, json)
Hash identifier:          uXT9/b/7WPJMvqPErqcrlK5t4Kkzs1TlZehjBMBX5Yg=
Subject key identifier:   38:28:58:B5:B4:F3:3E:7A:80:01:08:88:FA:CE:09:60:82:E7:5B:10
Authority key identifier: AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48
Certificate issuer:       /CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
Certificate serial:       1310AC981CA2A33AB5F60F00011C16343C5F7C3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.mft
Manifest number:          0E
Signing time:             Fri 27 Jun 2025 17:01:03 +0000
Manifest this update:     Fri 27 Jun 2025 16:56:03 +0000
Manifest next update:     Sat 28 Jun 2025 19:40:03 +0000
Files and hashes:         1: 3137372e382e36392e302f32342d3234203d3e20323733373739.roa (hash: jFzfORr2j/pqVKSgx54aXHSUhcBA+ajfB792H1BmQ+0=)
                          2: AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.crl (hash: /6RD6U6M15T6QIAO2Ss/IsnuceYkqZvqICrMIYIj7rk=)
                          3: 323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (hash: KMMkb5/dhVs00TPmDd1D0JqAPzOX/QzW4P3dRh6Delc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:10:ac:98:1c:a2:a3:3a:b5:f6:0f:00:01:1c:16:34:3c:5f:7c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
        Validity
            Not Before: Jun 27 16:56:03 2025 GMT
            Not After : Jun 28 19:40:03 2025 GMT
        Subject: CN=382858B5B4F33E7A80010888FACE096082E75B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:4a:93:39:e6:e3:e9:54:73:b0:38:e8:16:
                    c6:07:c4:07:30:7d:57:03:a7:2d:17:05:1f:d9:2e:
                    f6:d3:38:4a:8c:47:94:8f:5f:d4:c5:07:37:c9:8b:
                    63:22:7b:0e:b3:a1:86:ae:68:d0:ce:b2:8a:39:48:
                    45:e8:49:c7:94:8d:91:7f:b5:15:0d:59:3d:f4:92:
                    d5:d9:53:0b:0b:43:d3:5d:44:23:4c:c0:57:92:49:
                    a6:3a:de:99:0c:22:83:6b:fa:ab:d0:3f:e5:e6:97:
                    8c:4a:3a:47:bd:af:b9:54:ef:f5:32:75:2c:d2:f9:
                    fb:f7:36:39:e2:87:9a:56:8d:42:0d:3c:ca:b7:4e:
                    de:8d:e3:05:bb:e8:a7:15:40:4f:b7:3b:25:50:49:
                    42:da:d4:81:01:60:bd:70:8f:b9:7b:d8:58:0e:a5:
                    07:65:07:1c:d3:d9:8d:3c:9c:e4:93:9e:ba:a9:2a:
                    36:70:97:c1:c9:9d:f6:98:8c:70:1d:0b:f3:69:16:
                    6d:8c:25:a6:5d:e6:64:e2:95:ce:c2:67:6e:d2:a0:
                    ac:b6:19:76:d1:4d:cd:8d:5e:9f:97:9e:b9:c1:a4:
                    32:c6:17:e2:b7:5a:cd:e0:78:34:26:8b:91:60:f7:
                    84:c0:fb:20:2e:4c:94:40:8a:e0:fa:55:02:ad:5f:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:58:B5:B4:F3:3E:7A:80:01:08:88:FA:CE:09:60:82:E7:5B:10
            X509v3 Authority Key Identifier:
                keyid:AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:23:45:63:6f:a1:75:5c:30:b8:2a:6e:ca:6a:aa:4e:c0:
         ef:19:96:2e:72:f6:97:d6:d7:71:91:cf:d9:35:8c:db:e9:df:
         98:a8:49:4f:5c:0b:29:ae:a9:e1:04:ac:6d:fc:97:d2:9c:24:
         cc:be:69:2e:c8:cc:35:1e:81:f9:a5:4a:05:9b:f9:91:c2:78:
         31:6c:fe:c3:ad:35:5f:6d:3e:d1:98:85:71:34:a2:53:79:a0:
         d6:d0:a6:b4:c7:52:9b:91:9f:ec:27:8a:c5:be:72:29:7b:11:
         99:59:63:d6:13:b6:c4:37:c4:cd:0e:54:42:64:78:21:e4:24:
         0d:dc:4e:1d:a5:4b:1d:f1:cc:d4:33:ff:b4:6d:0c:a7:25:10:
         20:6b:9f:84:4e:23:59:c3:c1:e2:1a:76:ff:d3:84:87:79:0e:
         4e:1a:69:d2:67:2a:0d:25:40:d9:25:e2:45:0e:9a:47:0b:39:
         f7:33:8a:28:df:2b:de:cf:6e:69:6f:d9:73:4a:e7:df:51:1e:
         68:bf:e6:88:2d:37:7b:c5:12:1f:6b:bf:62:d9:3c:0d:b4:06:
         33:18:7c:35:c7:2e:e6:13:5d:74:e5:d0:1a:da:d0:e9:bf:7c:
         31:78:49:fa:75:0c:42:77:05:2d:02:5b:5d:84:e9:90:1c:00:
         52:9a:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----