Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft
File:                     98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft (raw, json)
Hash identifier:          VtxGLCcWzDMJjS7EpraQAI9IDIo9PrzDtU0DE0IzI2k=
Subject key identifier:   E9:3B:A0:B4:77:93:1D:F2:59:E5:F2:22:09:5F:E3:48:8A:FE:D4:BE
Authority key identifier: 98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
Certificate issuer:       /CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Certificate serial:       7B7D6C0047A423C1FDF6D5EA5A19928038958168
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft
Manifest number:          84
Signing time:             Thu 08 May 2025 01:15:06 +0000
Manifest this update:     Thu 08 May 2025 01:10:06 +0000
Manifest next update:     Fri 09 May 2025 02:51:06 +0000
Files and hashes:         1: 98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl (hash: p/c6/yDkjHvilqSgfCZPxxp+tVmN6XYnxbwmY6aN5DA=)
                          2: 34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa (hash: 8QKvVA6aLf4KKxbu5W+qK8uzB5+fEEmuM12CHUif00Y=)
                          3: 323830343a353037343a3a2f33332d3333203d3e20323638333930.roa (hash: a1f9Nt7NrYkhAYYwm5mB/YgYJIyZrHfHDcX0IdrHzlg=)
                          4: 34352e3233392e3233392e302f32342d3234203d3e20323638333930.roa (hash: YDwSsNcpb0SwGyfXoINQ6HeL6yOJsN3+oE25NwIXkvg=)
                          5: 34352e3233392e3233382e302f32342d3234203d3e20323638333930.roa (hash: QqVdXiJuR5FVnGWGIfO4e4GhfIJcXWWPu1P4U64D/jg=)
                          6: 323830343a353037343a383030303a3a2f33342d3334203d3e20323638333930.roa (hash: 5pMZkamq2f1XqMXPLQNYqSxpDfQzzhSTpo0c0Pr6yPI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:6c:00:47:a4:23:c1:fd:f6:d5:ea:5a:19:92:80:38:95:81:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
        Validity
            Not Before: May  8 01:10:06 2025 GMT
            Not After : May  9 02:51:06 2025 GMT
        Subject: CN=E93BA0B477931DF259E5F222095FE3488AFED4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:eb:33:cf:ff:69:ce:60:32:6f:a7:53:1e:
                    5c:36:de:8d:54:2c:3c:b9:a8:38:5b:5e:6c:72:e9:
                    fb:2d:32:0c:44:f9:01:0e:77:9b:9f:5e:2b:55:5d:
                    7a:44:0f:52:b3:0d:eb:33:2b:46:e0:d4:97:2f:2c:
                    5a:f2:e4:45:de:e7:dd:fb:f5:a5:6e:91:70:f4:ad:
                    ec:0c:f6:22:33:9b:40:fa:1b:d2:09:e2:fe:3c:3d:
                    c8:d7:52:15:0f:f5:18:51:5a:0e:be:1c:27:a6:16:
                    5d:f7:a1:2d:77:8a:4b:d1:f7:44:45:ca:ac:6d:d2:
                    74:eb:ce:a1:7a:dc:9b:e1:e4:89:16:e6:71:38:b4:
                    74:f0:d3:dd:4f:ab:1a:48:57:31:2c:d4:4c:e1:43:
                    21:ff:05:de:4b:a1:6d:06:bf:43:70:3b:87:c7:19:
                    64:c7:d5:0f:eb:59:59:ef:0d:cc:78:2c:ba:f5:18:
                    5d:2d:d1:f7:8c:15:6d:e5:3a:8a:76:9f:ec:26:b9:
                    06:06:ab:c3:68:ad:5b:b7:c4:8b:45:1b:9d:e4:c6:
                    e1:55:1b:38:43:c5:ab:bc:c7:43:fd:2d:88:a5:fe:
                    84:a0:dc:25:d9:ae:64:b1:3d:7c:14:e7:8c:0c:7e:
                    d1:40:f2:7d:f5:97:19:c8:9e:db:ba:d5:17:2d:af:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:A0:B4:77:93:1D:F2:59:E5:F2:22:09:5F:E3:48:8A:FE:D4:BE
            X509v3 Authority Key Identifier:
                keyid:98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:1f:26:f3:d7:8b:19:a1:52:4a:88:10:7f:83:b3:78:7a:
         21:a6:58:93:bc:0b:80:e3:82:68:72:9a:d3:b5:71:d8:3d:37:
         a5:11:f1:26:2f:30:bd:e6:5b:25:d8:a9:e0:ac:5d:98:0e:31:
         b8:a0:8a:46:37:18:dc:2d:58:c8:7c:e3:27:a9:42:96:e3:3b:
         c4:e6:ca:84:b3:4e:2f:b1:26:da:be:38:d0:fe:47:e8:69:22:
         f6:9a:76:dc:91:93:e5:49:3f:9d:44:03:9c:4c:3e:db:e9:73:
         6a:82:e2:a3:91:6f:a4:75:b3:70:56:6f:12:64:e5:bc:b1:e7:
         8b:fc:ef:63:4f:45:0d:62:e9:7a:c3:73:bc:f4:04:00:07:f0:
         1d:5c:8a:41:b5:51:d9:d7:6b:ae:96:be:62:d4:86:b3:20:ea:
         72:b8:a7:5b:15:25:10:7e:d0:7d:95:5a:68:65:91:2b:63:e2:
         ed:2f:72:a8:3a:6f:a7:d7:ef:68:05:16:12:53:7a:90:57:6e:
         1a:e5:95:1d:68:f6:7e:35:62:26:65:7a:4d:97:ff:ab:bb:c8:
         0a:e4:c9:e6:9f:82:b2:ee:4d:59:c9:c5:1e:48:44:c5:9d:28:
         00:80:90:89:00:92:6d:33:35:cf:df:cf:97:fe:5a:e1:8d:2f:
         a0:44:a0:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe31sAEekI8H99tXqWhmSgDiVgWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThDMjUzNjQ4MUY4ODI5MEM3NDlDN0E0MEZGNUMyM0M2
QTRCMkIyOTAeFw0yNTA1MDgwMTEwMDZaFw0yNTA1MDkwMjUxMDZaMDMxMTAvBgNV
BAMTKEU5M0JBMEI0Nzc5MzFERjI1OUU1RjIyMjA5NUZFMzQ4OEFGRUQ0QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2Oszz/9pzmAyb6dTHlw23o1U
LDy5qDhbXmxy6fstMgxE+QEOd5ufXitVXXpED1KzDeszK0bg1JcvLFry5EXe5937
9aVukXD0rewM9iIzm0D6G9IJ4v48PcjXUhUP9RhRWg6+HCemFl33oS13ikvR90RF
yqxt0nTrzqF63Jvh5IkW5nE4tHTw091PqxpIVzEs1EzhQyH/Bd5LoW0Gv0NwO4fH
GWTH1Q/rWVnvDcx4LLr1GF0t0feMFW3lOop2n+wmuQYGq8NorVu3xItFG53kxuFV
GzhDxau8x0P9LYil/oSg3CXZrmSxPXwU54wMftFA8n31lxnIntu61RctrzSXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6TugtHeTHfJZ5fIiCV/jSIr+1L4wHwYDVR0j
BBgwFoAUmMJTZIH4gpDHScekD/XCPGpLKykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFxM2VqbXBkalY4VnM0empHQlpIRWdxVkdpanZ5eTJrWGdIaXdYdW5m
V1EvMC85OEMyNTM2NDgxRjg4MjkwQzc0OUM3QTQwRkY1QzIzQzZBNEIyQjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4QzI1MzY0ODFGODgyOTBD
NzQ5QzdBNDBGRjVDMjNDNkE0QjJCMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnFxM2VqbXBkalY4VnM0empHQlpIRWdxVkdpanZ5eTJrWGdIaXdYdW5mV1EvMC85
OEMyNTM2NDgxRjg4MjkwQzc0OUM3QTQwRkY1QzIzQzZBNEIyQjI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAILIfJvPXixmhUkqIEH+Ds3h6IaZYk7wLgOOCaHKa07Vx2D03pRHxJi8wveZb
Jdip4KxdmA4xuKCKRjcY3C1YyHzjJ6lCluM7xObKhLNOL7Em2r440P5H6Gki9pp2
3JGT5Uk/nUQDnEw+2+lzaoLio5FvpHWzcFZvEmTlvLHni/zvY09FDWLpesNzvPQE
AAfwHVyKQbVR2ddrrpa+YtSGsyDqcrinWxUlEH7QfZVaaGWRK2Pi7S9yqDpvp9fv
aAUWElN6kFduGuWVHWj2fjViJmV6TZf/q7vICuTJ5p+Csu5NWcnFHkhExZ0oAICQ
iQCSbTM1z9/Pl/5a4Y0voESgJg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:34:50 2025 by rpki-client