Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
File:                     DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft (raw, json)
Hash identifier:          QISnSzRU6DA5a/Krmi4K/sOwxoZdPtIT5tg/O322Yt4=
Subject key identifier:   F2:CE:66:67:D4:34:AD:69:5A:B5:FF:C6:57:BC:68:2C:BE:5E:48:33
Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1
Certificate issuer:       /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
Certificate serial:       2E2CA89BC0E47D3BA641CC9502800A3C911221AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
Manifest number:          02F1
Signing time:             Fri 17 Oct 2025 03:14:48 +0000
Manifest this update:     Fri 17 Oct 2025 03:09:48 +0000
Manifest next update:     Sat 18 Oct 2025 03:56:48 +0000
Files and hashes:         1: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: Ca0ATQBtu2wwlGdbVP249fdllMV78XDACR45JyepW1s=)
                          2: DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl (hash: SKSByFfTUxS4DCpwUJOc4jmAy3YmZD/6qjXXfMY7RA8=)
                          3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: UrUr7rbe9wkQziBoOWgeil4dIzI7nybGvMG7GrySm0s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2c:a8:9b:c0:e4:7d:3b:a6:41:cc:95:02:80:0a:3c:91:12:21:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
        Validity
            Not Before: Oct 17 03:09:48 2025 GMT
            Not After : Oct 18 03:56:48 2025 GMT
        Subject: CN=F2CE6667D434AD695AB5FFC657BC682CBE5E4833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:e9:97:0c:cc:f2:17:5c:26:0f:d7:29:9c:
                    ae:ed:87:9c:e5:f4:7d:b1:fe:20:74:ae:41:36:ab:
                    5a:cd:cb:e3:7d:a4:64:f1:7a:ce:07:52:84:b8:af:
                    80:21:1d:c3:e1:5e:c3:1b:69:1c:e3:04:1f:09:d0:
                    93:93:66:1f:58:85:8e:86:54:a8:ee:50:fb:cc:ab:
                    9e:a9:5e:28:99:68:a6:7c:3c:4e:8c:b4:6f:8a:83:
                    9a:22:69:0c:d7:43:0c:4b:0e:a7:99:81:3c:cb:d3:
                    25:f9:97:aa:82:9d:08:be:da:e4:68:36:ff:4b:18:
                    46:cc:b3:cf:bf:c0:a2:c0:a9:f6:90:4b:d1:2d:84:
                    6e:3b:6c:c1:5c:76:b0:6f:28:5a:53:03:36:2e:8e:
                    ef:22:19:68:6f:6d:94:7b:2b:e4:83:f4:7c:4f:22:
                    5f:79:10:59:c0:00:ee:a0:5e:47:49:7a:a2:20:b8:
                    77:c6:f7:2d:6b:f8:0a:71:9b:73:e8:49:b6:c8:1f:
                    d5:d5:42:8f:e3:f3:8a:cf:48:35:23:9e:38:09:f8:
                    01:7f:6e:b6:b8:a4:ca:4e:dd:2f:5d:91:e9:11:db:
                    79:3b:06:28:db:99:bf:74:61:e8:98:cf:c2:c4:7b:
                    01:2e:2e:80:84:c3:dd:27:c6:76:61:7d:09:ac:78:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:66:67:D4:34:AD:69:5A:B5:FF:C6:57:BC:68:2C:BE:5E:48:33
            X509v3 Authority Key Identifier:
                keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a9:fa:2e:64:7d:53:8b:9e:60:22:6f:b0:c7:b3:9a:43:b4:
         bf:35:96:6d:91:73:45:ca:dd:5b:94:1a:14:eb:bd:4d:e6:2b:
         09:5f:d0:42:16:cb:82:3c:c4:7f:0a:7d:66:b2:37:be:b5:bf:
         a6:08:87:1f:1b:ff:6f:9c:93:58:9e:59:c4:1a:4f:b6:c5:3d:
         12:28:b9:12:95:2c:99:1f:b8:0c:dd:8e:d2:70:c5:c0:74:b8:
         ac:b9:da:b6:c0:63:36:8d:7d:a9:61:4e:ff:33:0a:2a:d6:39:
         29:7b:47:a2:f1:e2:68:9b:06:6d:fc:bb:bb:d7:7f:c6:50:3b:
         eb:70:f2:d5:38:7d:03:d4:aa:a0:be:84:03:08:cd:9f:1e:fb:
         1c:16:10:68:a4:b2:49:d3:d8:f6:d4:63:55:d4:c6:3b:28:85:
         5c:0f:c0:c9:4b:3c:9d:4b:fb:82:27:a8:86:ae:55:90:c5:e7:
         41:71:8c:c3:b9:b6:88:33:57:7d:5a:bb:b7:8b:d5:09:b1:67:
         b7:71:d7:00:d3:97:3d:b5:ed:3e:96:f1:7c:d1:13:a4:e1:7d:
         36:d5:94:eb:ea:e2:45:d9:fc:a6:0c:dc:29:00:cf:f2:a2:2d:
         62:02:b0:63:f5:d4:7b:66:63:01:dd:2e:ad:26:0a:0b:80:5b:
         37:9f:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:58 2025 by rpki-client