Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.mft
File:                     87D07CAAFE73106D66C0E11F789B0243A67141F9.mft (raw, json)
Hash identifier:          WkzbJ+Snkjze5Ney1Rs7QJw+O99ZaUs5oZsl/iZFOyA=
Subject key identifier:   EB:D0:28:8F:63:32:ED:DB:A4:2A:B8:99:14:2A:A0:81:20:C1:F6:45
Authority key identifier: 87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9
Certificate issuer:       /CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
Certificate serial:       5577E1D677F8B0C5A99528C9BD667ACCCBD97B23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.mft
Manifest number:          03
Signing time:             Tue 24 Mar 2026 20:22:44 +0000
Manifest this update:     Tue 24 Mar 2026 20:17:44 +0000
Manifest next update:     Thu 26 Mar 2026 00:04:44 +0000
Files and hashes:         1: 87D07CAAFE73106D66C0E11F789B0243A67141F9.crl (hash: qzM8nKqZ5hgRR4p4gZSgmlC0MPX0HnZy4meyYwrXgyQ=)
                          2: 323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (hash: OO3rdQ3t08oiaDYkiHCU5npWf2ewudW07if2ukXgOoY=)
                          3: 3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (hash: 300O96F5VOrO8yN3/tDcthRHiIiiy7ZmuWjX/KC0fGM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:77:e1:d6:77:f8:b0:c5:a9:95:28:c9:bd:66:7a:cc:cb:d9:7b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
        Validity
            Not Before: Mar 24 20:17:44 2026 GMT
            Not After : Mar 26 00:04:44 2026 GMT
        Subject: CN=EBD0288F6332EDDBA42AB899142AA08120C1F645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:dc:e1:2b:42:d7:65:68:1e:12:ce:ed:45:
                    5b:32:30:46:9c:dc:9b:42:2d:a6:7e:b9:ea:d5:ae:
                    be:38:0b:b8:de:87:1d:eb:7b:b1:5b:91:a3:dc:4c:
                    a6:04:eb:a5:fc:a2:33:71:1f:b8:89:68:2f:1e:42:
                    ab:6e:6d:bf:d1:14:60:7e:d1:0f:9d:b3:84:e2:0e:
                    cc:42:42:d4:ba:98:af:29:87:a9:36:ec:64:0f:81:
                    cf:c5:48:9c:5f:56:7a:3c:1e:2b:4b:be:11:48:15:
                    4e:54:ca:bd:81:a8:c5:41:8b:7d:7c:9b:4e:b4:f8:
                    c5:f8:2d:b9:c3:6e:22:de:d4:96:73:da:a3:01:97:
                    48:70:f4:17:d1:33:79:04:79:a4:e8:99:26:64:9b:
                    b7:3f:c9:e0:ca:3d:ba:c4:cb:14:78:1e:63:ba:d7:
                    12:80:57:f2:f2:e7:69:57:a3:f1:4a:06:22:67:c6:
                    06:68:41:62:6c:c7:97:a9:3d:98:cf:83:6e:21:ad:
                    3a:9e:72:7d:78:5e:92:35:69:a8:1c:c8:e3:30:f9:
                    30:a4:02:c7:1c:5f:e6:c4:fe:e1:f4:fb:88:b1:ec:
                    7c:b3:f8:d6:b2:6b:fa:1e:6e:ae:1c:c0:aa:b9:0b:
                    cb:6a:e6:ea:43:24:98:12:4a:a5:97:33:1a:54:16:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D0:28:8F:63:32:ED:DB:A4:2A:B8:99:14:2A:A0:81:20:C1:F6:45
            X509v3 Authority Key Identifier:
                keyid:87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:7f:44:63:b8:b9:cb:61:0c:99:e8:2e:d6:32:b6:76:bd:
         e9:b5:ff:a5:d1:7a:dc:6f:cb:58:4d:3a:d1:45:01:34:19:f1:
         25:ec:44:92:98:61:b9:c0:b1:56:27:af:90:3f:36:32:96:87:
         7d:13:0e:fe:00:8a:55:e6:67:b5:02:a0:b7:0c:c7:37:5c:cf:
         90:75:48:d6:90:70:4b:2b:53:cc:11:8b:40:1f:bc:85:0d:0a:
         5d:b2:b6:fa:96:ec:de:6f:ad:30:2a:ff:8f:17:b6:08:6c:88:
         e0:c3:29:f1:50:eb:e7:98:4b:a8:11:01:8e:80:69:a3:18:b6:
         81:bd:e5:9d:e6:aa:82:a8:70:1f:bf:75:b6:bf:94:9e:9a:6f:
         a9:46:cf:bc:17:b2:46:6c:8e:19:60:49:a5:7c:46:c5:32:50:
         70:0b:2a:c3:b0:7a:c1:0c:46:e9:6b:b3:58:2f:2f:14:16:d9:
         26:31:7d:a5:8f:e2:69:22:00:79:61:35:a2:97:46:e3:0b:0c:
         72:67:4e:e1:9a:84:57:7d:9e:60:03:80:c1:b4:ec:3d:0a:30:
         cf:5a:27:cd:dc:53:f9:46:93:af:23:74:25:24:4e:c4:43:93:
         e3:27:7d:c1:1d:38:9c:d2:d6:41:a4:f9:f9:7f:10:7b:95:c2:
         67:2a:49:16
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUVXfh1nf4sMWplSjJvWZ6zMvZeyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdEMDdDQUFGRTczMTA2RDY2QzBFMTFGNzg5QjAyNDNB
NjcxNDFGOTAeFw0yNjAzMjQyMDE3NDRaFw0yNjAzMjYwMDA0NDRaMDMxMTAvBgNV
BAMTKEVCRDAyODhGNjMzMkVEREJBNDJBQjg5OTE0MkFBMDgxMjBDMUY2NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/NzhK0LXZWgeEs7tRVsyMEac
3JtCLaZ+uerVrr44C7jehx3re7FbkaPcTKYE66X8ojNxH7iJaC8eQqtubb/RFGB+
0Q+ds4TiDsxCQtS6mK8ph6k27GQPgc/FSJxfVno8HitLvhFIFU5Uyr2BqMVBi318
m060+MX4LbnDbiLe1JZz2qMBl0hw9BfRM3kEeaTomSZkm7c/yeDKPbrEyxR4HmO6
1xKAV/Ly52lXo/FKBiJnxgZoQWJsx5epPZjPg24hrTqecn14XpI1aagcyOMw+TCk
AsccX+bE/uH0+4ix7Hyz+Naya/oebq4cwKq5C8tq5upDJJgSSqWXMxpUFq6pAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU69Aoj2My7dukKriZFCqggSDB9kUwHwYDVR0j
BBgwFoAUh9B8qv5zEG1mwOEfeJsCQ6ZxQfkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KWlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZn
LzAvODdEMDdDQUFGRTczMTA2RDY2QzBFMTFGNzg5QjAyNDNBNjcxNDFGOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84N0QwN0NBQUZFNzMxMDZENjZD
MEUxMUY3ODlCMDI0M0E2NzE0MUY5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pa
VmJwWXVZNGZ5dm96OEJBY0p0Wm42Yk5tZG05dFhlTmFZaFhKOGYyVmcvMC84N0Qw
N0NBQUZFNzMxMDZENjZDMEUxMUY3ODlCMDI0M0E2NzE0MUY5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
fSp/RGO4ucthDJnoLtYytna96bX/pdF63G/LWE060UUBNBnxJexEkphhucCxViev
kD82MpaHfRMO/gCKVeZntQKgtwzHN1zPkHVI1pBwSytTzBGLQB+8hQ0KXbK2+pbs
3m+tMCr/jxe2CGyI4MMp8VDr55hLqBEBjoBpoxi2gb3lneaqgqhwH791tr+Unppv
qUbPvBeyRmyOGWBJpXxGxTJQcAsqw7B6wQxG6WuzWC8vFBbZJjF9pY/iaSIAeWE1
opdG4wsMcmdO4ZqEV32eYAOAwbTsPQowz1onzdxT+UaTryN0JSROxEOT4yd9wR04
nNLWQaT5+X8Qe5XCZypJFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:05 2026 by rpki-client