Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
File:                     573658E4241F21CAB22CB9FC150BF6FB898271EA.mft (raw, json)
Hash identifier:          Lo8erME4D8HHZjOCa+at+BNVCz/+I0+qRuJYOpuGrKw=
Subject key identifier:   59:FD:F9:9D:5D:FD:53:AD:FC:D5:25:85:80:77:7A:AC:47:D6:52:EF
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       7F77A4CE2794AE43D03B7967231625B91251A0D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
Manifest number:          019D
Signing time:             Fri 17 Oct 2025 03:31:10 +0000
Manifest this update:     Fri 17 Oct 2025 03:26:10 +0000
Manifest next update:     Sat 18 Oct 2025 06:07:10 +0000
Files and hashes:         1: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (hash: P0RfTJJBKMCwHlQNY6B4YysuDWbqgRP+uMy8I3GdAMI=)
                          2: 3133312e302e3139322e302f32332d3233203d3e203631373139.roa (hash: w97n07X0zqExDN8gzf3cZjKH+F//QEYk2SLdLpiVsaw=)
                          3: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (hash: 5dZsfjdOTFkdmFH4OyyvTTGdmlo5vCRzMFWBh4lWRXE=)
                          4: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (hash: fU1Q8QvvtL0h2YV8u9C9o9TI9d4T2xpRqPo2OnTtEVU=)
                          5: 573658E4241F21CAB22CB9FC150BF6FB898271EA.crl (hash: KqJSmZOLSQ2Q9O41RYpbcS1AqCiFB+LLFlA/Fr++K2k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:a4:ce:27:94:ae:43:d0:3b:79:67:23:16:25:b9:12:51:a0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Oct 17 03:26:10 2025 GMT
            Not After : Oct 18 06:07:10 2025 GMT
        Subject: CN=59FDF99D5DFD53ADFCD5258580777AAC47D652EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:1e:42:75:6b:50:29:93:8a:76:f2:e3:81:
                    28:f2:56:38:d0:fe:8e:b6:b9:ff:bd:f0:b2:7b:f5:
                    f6:de:82:ce:a6:e2:ef:f6:ec:65:6d:0e:a5:a8:96:
                    bd:86:22:1d:64:a5:d8:e3:42:93:84:7b:5a:4c:67:
                    db:d1:3b:85:ac:47:dc:44:fb:00:f7:e1:ce:e5:0d:
                    cb:0b:76:e4:e8:6f:32:5c:38:2d:18:ac:5f:46:46:
                    77:5a:38:d1:05:09:54:93:01:55:a2:d5:87:7e:68:
                    f6:8c:26:15:56:35:18:91:f7:63:55:d9:c8:c4:ca:
                    a2:73:fb:a7:98:9a:7c:9f:50:b3:0f:52:c1:73:2f:
                    f3:1d:4d:7a:1f:82:0a:15:16:67:01:e2:10:5b:7c:
                    25:0b:86:54:cc:55:a6:7e:a0:93:10:75:3f:5f:1f:
                    d8:85:3e:50:b7:eb:fa:4b:31:12:9d:cf:19:b7:d9:
                    d6:c1:8e:5a:62:ba:01:d4:d1:e0:eb:01:31:62:ca:
                    b0:f9:81:b5:b5:e0:e5:6d:a5:ab:de:1a:fc:2a:c2:
                    ac:9e:fd:1b:c5:7e:f0:57:1c:98:8a:9d:b4:9c:8a:
                    e4:61:79:5f:f3:d9:df:5e:14:c1:60:8a:ee:2c:2c:
                    38:f9:26:35:a2:b5:59:20:c1:5b:dd:12:fd:b6:8d:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:F9:9D:5D:FD:53:AD:FC:D5:25:85:80:77:7A:AC:47:D6:52:EF
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9b:b4:a6:c5:73:90:90:6a:65:15:a4:2b:c4:bb:1a:ff:d2:
         c7:78:a5:44:be:04:c1:a0:97:1d:15:3b:21:09:d7:3f:10:63:
         02:88:bf:20:b6:f5:ac:a4:a1:fe:db:b6:b6:d1:18:83:85:a6:
         26:d2:95:1d:fc:39:74:f8:0c:1a:d2:1e:7c:45:5f:75:59:67:
         3d:58:0b:44:24:5f:78:dc:93:e0:cb:29:d0:c0:86:d1:26:8e:
         51:e2:82:75:b6:4a:e7:d1:7c:db:e1:92:c9:24:63:bc:71:e6:
         25:f7:fe:ed:f7:ee:8e:b9:0f:db:4d:4d:7b:ff:e0:37:93:07:
         6b:60:b5:b5:63:1c:86:b4:3d:aa:07:ba:99:26:a8:5b:96:fa:
         07:1e:ed:ae:58:bc:d9:30:1d:43:7b:fb:a3:4f:55:70:7e:c1:
         48:f2:50:e1:9d:12:0a:7f:08:4e:77:84:25:12:a3:71:8c:66:
         a1:59:8a:5d:0e:41:8e:57:b9:b4:7c:ed:62:5a:94:01:5e:c8:
         e9:2f:6c:09:a0:c9:68:7f:9d:8f:0a:ba:11:57:2e:50:f1:c8:
         8d:b9:1d:3a:ad:df:31:bb:ad:6c:8d:9d:21:8b:99:7e:35:2e:
         51:a2:64:10:75:22:5c:02:14:34:ff:e7:6f:42:7f:25:14:de:
         20:33:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:33 2025 by rpki-client