Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.mft
File:                     0CA968287B9271A9974F582D45CD23848B33CFFD.mft (raw, json)
Hash identifier:          fT02Fel2V1bH6FCNRxcfGkXuad4NRgF+R0Hx23zUiy4=
Subject key identifier:   72:65:FD:20:6A:A2:EF:73:91:94:F5:37:4B:CA:39:82:20:B3:4C:4A
Authority key identifier: 0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
Certificate issuer:       /CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Certificate serial:       6E6D1C8EF4A76D4A11F9E818589232150A288B94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.mft
Manifest number:          18
Signing time:             Sat 28 Jun 2025 06:50:40 +0000
Manifest this update:     Sat 28 Jun 2025 06:45:40 +0000
Manifest next update:     Sun 29 Jun 2025 09:33:40 +0000
Files and hashes:         1: 0CA968287B9271A9974F582D45CD23848B33CFFD.crl (hash: FrwoQEGY/q21iuDDloFqzgOl2hASjNvoC4P28T6n3ho=)
                          2: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: x+J4OJo3G7gX36SOxQln0AJFsLkk/yt7mczoV40hBTk=)
                          3: 3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (hash: CYCNSeuSyUPu927b10ESwfbZNr1Bk/3fDdTgG5n0ALQ=)
                          4: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: 7LfVD4pyw7rLNrpgExgDYUomnDg8DdU3Pa/CPW1I6XA=)
                          5: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: KN+1exuV68kee37uXAVi+CtAjodej2VypVoHlmKCKHY=)
                          6: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: WIxKVCnMoWa59PbxBlQPL482Kv22PvIWGjxZpStkj6M=)
                          7: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: zuPAlgozA3y/dOq2n4YhKhvhkfwyZU5kYSvhmgGa9Nk=)
                          8: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: 07RvHju/Zrd2EPsSp7/QErBzxKvGC+OQzNho01XD5J8=)
                          9: 323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (hash: F0KhNJIeUyYC7RwuASJwDCy4T2F18NcZavMHXlC81C4=)
                          10: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: bv75j3vuTzz73t+RatPWKeQH/FM7vCQzPpvBPhTNbDY=)
                          11: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: 8JEbBp/4k/zUURyh1o6yVz5UfXeLQPTet9D3JNYt+zk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6d:1c:8e:f4:a7:6d:4a:11:f9:e8:18:58:92:32:15:0a:28:8b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA968287B9271A9974F582D45CD23848B33CFFD
        Validity
            Not Before: Jun 28 06:45:40 2025 GMT
            Not After : Jun 29 09:33:40 2025 GMT
        Subject: CN=7265FD206AA2EF739194F5374BCA398220B34C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:dc:8f:e5:11:d7:36:aa:14:9f:68:bb:85:
                    64:73:87:73:29:ef:db:d0:de:e8:67:76:77:ee:57:
                    d1:3f:77:c0:14:c4:0e:eb:85:e4:d5:82:cd:88:6f:
                    ae:97:61:92:2d:dd:e9:09:72:fc:ca:ba:9f:48:14:
                    f6:e6:e5:22:78:4f:ca:d4:bc:06:5e:41:d6:1a:f0:
                    f5:ec:27:f5:e0:03:68:82:76:8a:a5:95:c7:13:7b:
                    5e:66:71:48:e3:bb:d0:1e:5c:52:4d:9c:81:9f:50:
                    eb:ad:5b:ac:c5:29:ff:7b:f3:93:34:f0:1b:6f:32:
                    ae:18:fb:29:f5:43:9d:12:db:bb:41:1d:64:c6:85:
                    34:86:60:63:e5:0d:11:8b:b4:73:e2:95:5c:20:ca:
                    e5:98:b8:2b:69:6b:68:c8:c2:93:51:31:4a:75:11:
                    23:63:75:90:fd:8e:14:97:7a:41:47:fa:16:cd:b8:
                    a5:09:72:4b:6f:39:dc:eb:95:ba:53:d8:b4:8f:fe:
                    cd:e1:f5:35:53:13:5e:e2:b2:3c:0b:da:d5:25:5f:
                    2e:d3:47:64:e0:31:61:c2:37:70:bd:96:68:73:30:
                    2b:73:3f:a7:72:15:f8:97:45:5a:01:eb:b7:b5:79:
                    dd:19:1e:d3:55:63:e7:b3:83:ce:ae:e3:3c:d3:8b:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:FD:20:6A:A2:EF:73:91:94:F5:37:4B:CA:39:82:20:B3:4C:4A
            X509v3 Authority Key Identifier:
                keyid:0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:59:15:f8:41:bb:e4:48:cf:9d:3c:2d:f4:04:35:b0:70:ee:
         91:44:7b:78:5b:4d:87:08:19:6c:54:23:18:c9:10:51:c3:98:
         aa:78:b4:02:4d:de:8d:a0:75:52:a6:36:c6:52:24:e1:5e:9e:
         5f:3b:71:47:f5:e7:54:e2:8c:66:d7:6d:79:40:3d:a7:eb:33:
         d8:7d:8e:ff:49:26:2c:ca:7e:9c:d1:07:77:8b:58:e9:54:f2:
         4b:09:be:19:3e:d6:b7:3c:05:dd:2d:d1:57:ff:da:58:c0:80:
         a0:c1:5e:b2:0e:78:cb:3c:49:7c:0e:74:35:45:b3:f8:ce:72:
         04:bb:54:84:22:69:d4:5f:c0:e0:d0:e3:25:3a:e1:4c:90:2c:
         22:c2:ad:52:7d:1d:1e:e6:bb:fe:86:ad:f4:9b:38:d7:57:31:
         47:76:e3:5e:82:b2:e0:8d:22:79:24:56:57:db:a7:b1:ec:60:
         b3:05:18:5c:9d:23:3b:5f:14:e5:df:c1:14:7e:4a:c4:70:48:
         d7:6e:1c:83:8b:98:41:47:95:a3:35:23:ec:bd:82:68:d4:cb:
         ed:e0:48:21:3a:02:07:1e:b9:3e:dd:a6:fb:53:58:ac:ea:c4:
         f8:7e:30:f2:3f:63:dc:17:5a:e0:83:82:b5:3e:7e:a1:71:f2:
         7c:9f:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:58:26 2025 by rpki-client