Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/D1C3B274660223153971D48E765C06EA57606BAC.mft
File:                     D1C3B274660223153971D48E765C06EA57606BAC.mft (raw, json)
Hash identifier:          HGue47BmFfwiqRuP8G3nk7j/cEOZUKEHvGfLrA8TXh4=
Subject key identifier:   D8:2A:86:1C:D1:1A:7D:A9:20:F3:AE:1E:3C:CA:C5:97:63:5B:EA:00
Authority key identifier: D1:C3:B2:74:66:02:23:15:39:71:D4:8E:76:5C:06:EA:57:60:6B:AC
Certificate issuer:       /CN=D1C3B274660223153971D48E765C06EA57606BAC
Certificate serial:       034407CB46A3A57FD4588216E89F802CEC9D8850
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1C3B274660223153971D48E765C06EA57606BAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/D1C3B274660223153971D48E765C06EA57606BAC.mft
Manifest number:          0B
Signing time:             Sat 28 Jun 2025 15:35:12 +0000
Manifest this update:     Sat 28 Jun 2025 15:30:12 +0000
Manifest next update:     Sun 29 Jun 2025 18:47:12 +0000
Files and hashes:         1: 323830343a373630303a3a2f33322d313238203d3e20323731303833.roa (hash: fapTevtdV9ehimpdsaCXyDAWpNldLI5hB4mlOkBOr5o=)
                          2: D1C3B274660223153971D48E765C06EA57606BAC.crl (hash: B7iRCeeyk8IxxynnJ/MBeOOpao9kDZRxpgs23cYh2oo=)
                          3: 3137392e34382e3234342e302f32322d3332203d3e20323731303833.roa (hash: ai8MNk2ThpwA4ScMH72O/PUm2M827YkXzkOrT2px7Jo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:44:07:cb:46:a3:a5:7f:d4:58:82:16:e8:9f:80:2c:ec:9d:88:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1C3B274660223153971D48E765C06EA57606BAC
        Validity
            Not Before: Jun 28 15:30:12 2025 GMT
            Not After : Jun 29 18:47:12 2025 GMT
        Subject: CN=D82A861CD11A7DA920F3AE1E3CCAC597635BEA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:85:e4:cf:81:23:67:a7:1a:7a:a2:1e:9b:
                    f1:fb:06:fd:03:5d:7c:89:3c:88:a9:5d:da:bd:07:
                    2d:cf:28:9a:5a:e4:30:6a:a1:87:16:89:16:ad:f8:
                    15:a5:7c:b2:6d:f3:51:ae:8c:ac:d3:78:bd:c5:59:
                    3e:12:dd:20:b1:75:14:4a:5e:51:23:de:0f:3c:28:
                    98:d9:2b:04:01:b7:43:1f:9e:61:b8:3d:53:85:e3:
                    19:4f:14:70:ea:d6:60:bd:0d:a1:7d:1c:f5:1f:19:
                    44:e9:a6:78:03:16:d8:04:b9:ae:18:06:76:d1:7b:
                    62:fb:48:d7:36:c5:2a:a5:d6:9a:e6:0b:91:bb:14:
                    50:d9:ef:f1:70:d8:d3:d5:79:e3:e7:83:eb:62:ad:
                    30:49:af:dc:53:7f:2b:fc:db:e2:0e:ed:ba:f3:cb:
                    46:5c:76:19:b3:c2:3c:ae:38:f5:b2:b2:2f:28:50:
                    0e:ba:df:84:42:3c:ca:ce:a7:09:54:72:0d:6a:28:
                    a8:85:01:87:d8:2b:28:69:75:b4:df:7e:b8:4e:84:
                    a8:ea:81:41:54:87:95:97:ca:52:27:95:2f:35:1a:
                    0c:80:55:e0:05:9f:52:f9:3a:f8:14:34:30:83:14:
                    27:b7:6e:65:74:38:10:3c:e0:b1:49:d5:f6:e9:f9:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:86:1C:D1:1A:7D:A9:20:F3:AE:1E:3C:CA:C5:97:63:5B:EA:00
            X509v3 Authority Key Identifier:
                keyid:D1:C3:B2:74:66:02:23:15:39:71:D4:8E:76:5C:06:EA:57:60:6B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/D1C3B274660223153971D48E765C06EA57606BAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1C3B274660223153971D48E765C06EA57606BAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/D1C3B274660223153971D48E765C06EA57606BAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:61:49:bf:1e:13:60:cc:48:05:5d:ec:06:3b:2d:9b:ca:
         00:45:d9:c0:85:ae:d1:3f:b0:8d:86:23:14:fc:e8:1f:40:69:
         b7:c9:81:a7:89:d1:d9:b4:bb:88:2d:04:f9:ea:19:2b:96:bd:
         4a:bc:07:e0:2e:b0:87:a5:0a:e1:cb:51:25:c8:57:ce:37:21:
         5b:fc:2f:41:f0:2e:4b:e9:4d:1e:2b:df:39:3f:e2:a1:bd:3a:
         5d:ce:68:7c:ed:3e:e3:60:f8:7a:dd:38:30:7d:b6:00:43:91:
         21:cb:1b:1f:fc:74:7f:d2:39:d4:5b:27:db:9f:5b:7f:2f:7b:
         84:dc:2a:ff:e8:76:2b:95:40:2a:76:c8:11:76:ad:67:1a:61:
         eb:ca:44:ba:a8:1a:6c:d9:99:b7:80:ed:65:fc:70:8a:8f:09:
         b8:8f:f1:11:64:bc:fa:e6:a4:58:e5:83:ff:17:da:2d:4f:3c:
         69:6b:34:db:84:43:99:86:44:d7:9b:05:85:6d:c5:93:a8:81:
         fe:88:47:f0:b5:a3:77:ac:8a:89:2d:06:39:94:94:94:52:0e:
         31:da:2c:70:aa:14:7d:e5:b7:54:e5:d1:d5:05:48:90:d2:09:
         23:66:0b:62:26:2d:65:05:0f:bc:7a:5f:22:25:8f:bf:a6:56:
         30:5d:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----