Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
File:                     0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft (raw, json)
Hash identifier:          vI7tJNAqgeWlzUlPf18w004FdFrcA+0j7XKKVhmUdAI=
Subject key identifier:   61:CF:56:AE:CF:C3:DE:E8:CD:14:FC:2D:1E:DD:DE:45:F4:C2:2F:5B
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Certificate issuer:       /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial:       31D8FC1674BEBFA593296E736EF712EEDDFFA3F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
Manifest number:          0410
Signing time:             Wed 22 Jul 2026 00:39:35 +0000
Manifest this update:     Wed 22 Jul 2026 00:34:35 +0000
Manifest next update:     Thu 23 Jul 2026 00:53:35 +0000
Files and hashes:         1: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (hash: m/CLB44LJRAq/Oz0l5MCen5Lt61UcnSQDV4dCfw/NQU=)
                          2: 0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl (hash: ETZgAcX4dHtMYCNlmGh5qntd87lTHdH+bbSZNI/rDdc=)
                          3: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (hash: XgBlpZ2YWGl10rtXvXfEPslvjzYnNUY6N7Y1fE4i87A=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d8:fc:16:74:be:bf:a5:93:29:6e:73:6e:f7:12:ee:dd:ff:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
        Validity
            Not Before: Jul 22 00:34:35 2026 GMT
            Not After : Jul 23 00:53:35 2026 GMT
        Subject: CN=61CF56AECFC3DEE8CD14FC2D1EDDDE45F4C22F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:55:a0:23:a9:66:8a:69:87:c2:f2:ac:4a:
                    a9:7d:4f:62:e1:4d:cd:9d:b4:aa:b3:55:9c:b1:fa:
                    d5:6e:c5:77:94:28:cb:5c:14:cf:d8:ea:5e:bf:c6:
                    36:e7:d1:86:94:bf:d2:e2:cd:20:26:37:23:f7:1b:
                    fa:4b:68:e3:91:d4:52:3e:75:4c:28:2e:39:9c:0f:
                    6a:f0:65:32:15:18:e5:43:35:1c:45:a2:da:b9:3c:
                    3a:cd:09:87:9d:cf:2d:e4:16:4a:73:3d:01:b6:62:
                    78:e4:ee:72:9d:77:9d:b2:6a:0f:65:2a:fe:68:7c:
                    af:31:23:0a:19:ad:18:04:80:a9:9f:91:d1:84:9d:
                    48:fe:d5:11:18:5d:e0:08:3f:e7:5f:20:81:ab:0c:
                    92:e5:02:5e:c0:3d:2a:56:69:75:c8:2c:15:a1:28:
                    71:b1:c9:f8:af:fc:45:49:88:75:7c:e4:56:60:82:
                    43:db:c7:fd:fb:be:f0:80:1e:b3:e0:8c:3c:53:f4:
                    9f:da:12:a1:6c:2d:59:ea:37:87:bb:31:f1:a2:dd:
                    57:5f:17:2e:ab:a9:3f:69:e9:03:86:91:85:10:aa:
                    15:a3:1a:a1:b2:77:85:93:5c:58:62:b9:92:5b:bc:
                    06:3b:c5:28:ad:7a:be:9e:04:43:e3:e9:b8:9d:10:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CF:56:AE:CF:C3:DE:E8:CD:14:FC:2D:1E:DD:DE:45:F4:C2:2F:5B
            X509v3 Authority Key Identifier:
                keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:71:d3:17:d3:65:cc:d5:e0:f3:d5:1d:2d:bb:de:f9:39:
         69:1b:03:92:f1:83:a2:34:45:91:8b:f6:54:30:8e:f5:05:cf:
         df:03:4a:b4:9f:f1:36:a9:a7:bb:86:49:3f:a1:b8:60:92:e7:
         8b:57:42:00:e2:2a:04:1e:bb:2f:f1:d2:bb:ba:19:75:a1:fb:
         61:ae:09:d4:37:a5:3b:b8:50:9b:cd:7e:be:bc:78:27:4e:3f:
         84:6c:78:b2:08:bc:e2:a9:d1:93:4e:54:61:94:8d:22:8f:be:
         3d:bf:5f:39:f3:9a:20:67:8e:96:f1:53:a8:38:cb:1a:44:e5:
         f9:bb:90:e0:29:74:b0:c6:b0:67:f6:4f:4f:af:ec:42:3a:12:
         5a:f4:55:bc:f7:81:2f:72:51:04:9f:50:8c:85:b0:6e:85:52:
         68:08:74:4f:64:d5:5b:f8:84:0c:aa:ac:51:e9:9a:5d:2a:5a:
         c3:67:4f:4c:68:34:ae:10:50:4a:9a:0b:63:b8:8f:0a:a8:37:
         90:a9:26:ca:08:5a:01:f8:05:47:c5:bf:d9:86:31:4a:bc:5f:
         8a:5e:8c:87:94:6c:83:79:38:59:c5:95:b4:50:e5:16:ba:fd:
         2a:20:2f:13:ff:9e:d7:d5:a7:8c:26:42:d6:16:ef:ff:4a:03:
         dd:73:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 19:06:02 2026 by rpki-client