Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft
File:                     A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft (raw, json)
Hash identifier:          CFanapfvp6Q8Ckeb7ed/DqRy3U4gVW+tndLg78aA/K4=
Subject key identifier:   D0:AF:BC:D6:1B:9B:B7:73:F8:31:9E:48:F2:34:F5:D0:14:7C:99:C2
Authority key identifier: A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12
Certificate issuer:       /CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
Certificate serial:       484160EEAC22D6070A41DF07251BCDDC093BAAB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft
Manifest number:          027D
Signing time:             Sat 21 Mar 2026 11:42:03 +0000
Manifest this update:     Sat 21 Mar 2026 11:37:03 +0000
Manifest next update:     Sun 22 Mar 2026 15:37:03 +0000
Files and hashes:         1: 3133382e35392e34382e302f32322d3234203d3e20323634353937.roa (hash: 1QmmrH5TgQ93FpvXKYJZ3bR4TIDap9Z/phmBA883j9I=)
                          2: A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl (hash: AIu69uXc+g1CIN1hcmGrlcQlVoTejQgPZG7tJFludpE=)
                          3: 323830343a323233343a3a2f33322d3334203d3e20323634353937.roa (hash: EC7fdzIID8rZyPtPy9R1cmWe7aUfBJR7NOY1aLcoL5k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:41:60:ee:ac:22:d6:07:0a:41:df:07:25:1b:cd:dc:09:3b:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15548E56C7EDE5C824C54387439E16BEA8D7F12
        Validity
            Not Before: Mar 21 11:37:03 2026 GMT
            Not After : Mar 22 15:37:03 2026 GMT
        Subject: CN=D0AFBCD61B9BB773F8319E48F234F5D0147C99C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:33:b4:0a:37:2d:4a:d3:d2:e4:9d:d7:64:
                    98:3e:5a:f7:81:93:52:90:e6:5d:23:6a:4e:85:ac:
                    f8:58:ed:56:cb:2c:29:4e:74:dd:5f:31:da:59:9e:
                    06:e6:68:2f:c6:0b:f8:2d:37:e6:42:05:0b:ee:10:
                    20:93:4b:78:33:ab:03:31:9a:5f:ea:28:24:b5:1c:
                    9e:cf:18:b6:90:b7:ef:18:4e:7f:25:a0:2d:9b:63:
                    ff:84:2f:14:fb:5e:97:72:f2:8e:33:19:c4:bf:50:
                    0e:72:eb:58:40:44:41:44:e9:5f:3a:52:7c:f9:38:
                    6f:fc:67:db:51:f0:95:56:4a:3e:36:15:01:89:b7:
                    fb:9e:2c:b4:da:03:c3:de:10:a7:56:f7:ed:5c:76:
                    d9:95:a6:59:a7:9e:67:2a:79:60:f7:d6:0e:4a:a4:
                    f8:a6:f1:9d:be:9b:a1:6a:69:c2:00:3d:d3:00:cc:
                    72:f2:13:c3:59:44:42:8b:ab:a9:c9:5b:08:c9:4f:
                    1a:56:68:94:ef:ff:c6:3e:0e:98:91:63:3d:b0:43:
                    ab:89:d2:7c:d7:7b:4f:c9:d1:40:8b:26:24:cc:b7:
                    85:85:0b:5b:78:4d:29:c7:c6:df:11:18:36:00:09:
                    52:ba:be:7a:d0:96:4d:05:ac:e4:53:df:61:c7:3c:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:BC:D6:1B:9B:B7:73:F8:31:9E:48:F2:34:F5:D0:14:7C:99:C2
            X509v3 Authority Key Identifier:
                keyid:A1:55:48:E5:6C:7E:DE:5C:82:4C:54:38:74:39:E1:6B:EA:8D:7F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15548E56C7EDE5C824C54387439E16BEA8D7F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JNPieZYSkViezfdBQzBmFefBmrBVipYsa4FsLqowp7h/0/A15548E56C7EDE5C824C54387439E16BEA8D7F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:f4:b1:ce:42:2b:ca:93:a4:ed:5f:2c:08:fd:24:2d:27:
         b6:dc:df:d0:bd:91:f3:81:dd:d2:e9:40:d5:3e:96:ef:b4:be:
         fd:20:35:6c:6c:4c:92:ba:0f:70:e1:47:ef:bd:89:54:21:53:
         ea:e7:ab:ed:e3:b1:a7:c1:e7:41:34:12:7c:6f:ee:82:2f:db:
         3e:81:3f:bb:d2:75:64:9d:4b:a4:90:f0:25:ad:fb:d2:75:18:
         ed:d8:c1:1b:aa:a3:43:a9:f2:40:8a:19:90:2e:48:36:2c:fb:
         f2:1e:0a:d2:21:f6:40:45:1d:82:0e:f4:14:98:cb:63:4e:b6:
         2f:3b:c3:86:f3:68:84:7c:3d:9f:be:6d:32:e2:a3:e3:55:ba:
         b4:a5:6e:1e:2f:8e:69:1b:a2:fd:12:70:ea:7d:97:db:2e:ed:
         2d:b1:3f:36:73:96:03:f2:29:e4:9f:52:e2:da:55:7a:3c:88:
         cd:72:c0:5f:a3:a7:48:eb:aa:cf:ca:b0:f6:35:4c:b1:12:b3:
         e5:4e:d0:94:4f:44:26:8f:36:fb:fc:95:e4:c7:99:14:17:53:
         56:cd:22:87:3b:d7:53:06:75:32:b1:dd:4a:fc:b5:04:17:69:
         d8:3c:82:9d:0f:4f:3a:e1:b4:47:cf:99:34:d4:ab:01:5d:6d:
         ed:12:1f:26
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUSEFg7qwi1gcKQd8HJRvN3Ak7qrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJF
QThEN0YxMjAeFw0yNjAzMjExMTM3MDNaFw0yNjAzMjIxNTM3MDNaMDMxMTAvBgNV
BAMTKEQwQUZCQ0Q2MUI5QkI3NzNGODMxOUU0OEYyMzRGNUQwMTQ3Qzk5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiDO0CjctStPS5J3XZJg+WveB
k1KQ5l0jak6FrPhY7VbLLClOdN1fMdpZngbmaC/GC/gtN+ZCBQvuECCTS3gzqwMx
ml/qKCS1HJ7PGLaQt+8YTn8loC2bY/+ELxT7Xpdy8o4zGcS/UA5y61hAREFE6V86
Unz5OG/8Z9tR8JVWSj42FQGJt/ueLLTaA8PeEKdW9+1cdtmVplmnnmcqeWD31g5K
pPim8Z2+m6FqacIAPdMAzHLyE8NZREKLq6nJWwjJTxpWaJTv/8Y+DpiRYz2wQ6uJ
0nzXe0/J0UCLJiTMt4WFC1t4TSnHxt8RGDYACVK6vnrQlk0FrORT32HHPKMbAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU0K+81hubt3P4MZ5I8jT10BR8mcIwHwYDVR0j
BBgwFoAUoVVI5Wx+3lyCTFQ4dDnha+qNfxIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KTlBpZVpZU2tWaWV6ZmRCUXpCbUZlZkJtckJWaXBZc2E0RnNMcW93cDdo
LzAvQTE1NTQ4RTU2QzdFREU1QzgyNEM1NDM4NzQzOUUxNkJFQThEN0YxMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMTU1NDhFNTZDN0VERTVDODI0
QzU0Mzg3NDM5RTE2QkVBOEQ3RjEyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pO
UGllWllTa1ZpZXpmZEJRekJtRmVmQm1yQlZpcFlzYTRGc0xxb3dwN2gvMC9BMTU1
NDhFNTZDN0VERTVDODI0QzU0Mzg3NDM5RTE2QkVBOEQ3RjEyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
OnL0sc5CK8qTpO1fLAj9JC0nttzf0L2R84Hd0ulA1T6W77S+/SA1bGxMkroPcOFH
772JVCFT6uer7eOxp8HnQTQSfG/ugi/bPoE/u9J1ZJ1LpJDwJa370nUY7djBG6qj
Q6nyQIoZkC5INiz78h4K0iH2QEUdgg70FJjLY062LzvDhvNohHw9n75tMuKj41W6
tKVuHi+OaRui/RJw6n2X2y7tLbE/NnOWA/Ip5J9S4tpVejyIzXLAX6OnSOuqz8qw
9jVMsRKz5U7QlE9EJo82+/yV5MeZFBdTVs0ihzvXUwZ1MrHdSvy1BBdp2DyCnQ9P
OuG0R8+ZNNSrAV1t7RIfJg==
-----END CERTIFICATE-----