Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft
File:                     49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft (raw, json)
Hash identifier:          Mme/Y7LlUs0+dPP0K5al56M22oV+lSIumFVgWrbzNHs=
Subject key identifier:   9B:B5:DE:79:CA:20:2D:59:E2:7E:00:78:00:EC:FA:A1:16:E4:79:97
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       470CD01FC1F50C52FEC6FDDCD343FEC4C4849BA3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft
Manifest number:          011B
Signing time:             Mon 30 Jun 2025 05:33:58 +0000
Manifest this update:     Mon 30 Jun 2025 05:28:58 +0000
Manifest next update:     Tue 01 Jul 2025 06:30:58 +0000
Files and hashes:         1: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: shimHszmX8wAqnKG/mu/0W8YOr2/P9Pbi7fYgYBfA4A=)
                          2: 323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa (hash: /NN1OZjlSbA13xFdR4rBanoIwRyJ+BGNfkTNM5H5okY=)
                          3: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: stN81AxZa8//7/oKbk5lTLVktBa+kLGfELWhA5Sv6Gw=)
                          4: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: 5yzRF6TKPIS+8KNl3uLxO2Iojug6wP8naATovtEqnIY=)
                          5: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: 8UFS9D9wziXD4BGbF8UDjt7wt0POa25kp2/IA6sPzgE=)
                          6: 49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl (hash: p83+AEEPbM3/KBfSY1Rv9dsW7ekODYVYBzjwVJEoHCI=)
                          7: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: 8RSZM5HyymJdv+uJZD31edAh3j1mf0toz1rtXvEg5Y8=)
                          8: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: A0EJlmgc1m3XxuziEekkOgPhIFiEfzOfDSP+f6QQ00Q=)
                          9: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: aV8GA+f6MKAgQWcS04i7fdgVJAmfd1XaKe2Jl39ablk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0c:d0:1f:c1:f5:0c:52:fe:c6:fd:dc:d3:43:fe:c4:c4:84:9b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Jun 30 05:28:58 2025 GMT
            Not After : Jul  1 06:30:58 2025 GMT
        Subject: CN=9BB5DE79CA202D59E27E007800ECFAA116E47997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:79:50:8b:e9:38:d8:1a:3a:69:04:1d:a4:
                    f8:43:76:65:fc:79:40:f1:6c:9d:8e:18:8d:95:4b:
                    2c:f8:8a:61:d2:30:b0:56:33:4d:00:e4:46:b0:87:
                    fc:63:74:60:d9:15:57:51:60:6e:3a:8c:92:12:a7:
                    ce:6c:73:50:9e:11:06:23:87:8d:f0:ca:b5:ff:70:
                    77:1b:1c:69:32:f3:a6:b0:c7:a5:30:af:9a:e4:2c:
                    f9:fe:e3:d7:27:8d:9f:0f:eb:32:94:b3:71:5a:b3:
                    4d:d9:6a:3f:d8:45:2d:50:c5:57:09:e2:6c:16:ee:
                    cd:b7:4f:24:2f:e6:66:94:bb:bc:df:e3:7a:20:7f:
                    66:4f:bf:ab:e7:85:8b:15:fd:4a:a4:07:b7:98:10:
                    df:c6:5a:42:67:8d:58:e4:a4:f2:40:1f:61:9d:a5:
                    f2:67:c2:51:4e:4a:5d:28:5a:02:5f:1d:2b:5a:46:
                    51:1f:ac:9d:08:1d:56:11:73:bf:e1:dc:a1:bd:5b:
                    4e:9c:2b:da:37:d1:f0:bc:9f:75:f9:bd:a9:47:11:
                    a3:ae:00:10:7d:09:70:95:99:80:ec:57:8c:b6:e6:
                    09:b0:9a:b7:81:a5:e4:44:3c:fa:da:1e:bb:4a:14:
                    71:43:34:4e:ad:3a:d9:2c:06:ba:e9:59:53:92:d3:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:DE:79:CA:20:2D:59:E2:7E:00:78:00:EC:FA:A1:16:E4:79:97
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:4c:d9:17:08:a8:9e:ce:28:f0:4a:8d:53:35:d8:4f:12:
         8a:eb:34:a3:d8:5a:66:36:72:00:c1:68:5a:96:f2:8d:2d:ea:
         75:a3:f3:e9:4f:a2:b1:fc:4f:eb:9a:f4:97:8d:dc:96:f6:d0:
         3a:d6:10:60:6c:57:60:a5:ae:1c:19:9f:70:c9:70:31:c2:0a:
         bb:d6:97:77:c3:a4:d3:01:a6:d8:28:66:06:12:33:05:02:27:
         bd:88:7a:eb:c1:39:b4:71:47:44:7d:d8:5c:1f:f2:17:79:43:
         1b:d8:e6:55:e8:16:03:d6:b6:14:af:da:ba:86:9f:6c:2e:e1:
         a8:83:ff:98:17:bb:33:4d:e1:2f:ce:03:7d:0f:40:83:37:ef:
         4c:bd:5a:0d:a3:2b:66:d1:75:90:31:a9:b7:f2:50:14:11:74:
         bb:33:3b:6b:a2:fc:8f:c0:fc:5f:39:5c:6c:9d:c5:5b:70:ad:
         a4:89:72:a3:37:20:58:e9:ce:57:52:a5:b6:6c:3c:6f:04:84:
         0b:69:f2:f2:f8:fd:99:66:2b:b9:ea:d5:30:4d:4a:87:6e:b5:
         1a:fa:df:ac:b2:65:53:12:1d:c1:3a:1d:1e:39:2c:9b:50:4e:
         b5:83:40:03:da:af:54:5a:9c:0c:ec:b3:8d:82:14:8b:32:19:
         13:ef:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:11:05 2025 by rpki-client