Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
File:                     F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft (raw, json)
Hash identifier:          8VbaYNgJTJd8nCkdK6BpdCcnWPApUpmFtbWpRMeaA6Q=
Subject key identifier:   FB:F7:FA:68:48:EE:28:BE:32:4E:8C:FE:08:0F:9B:AE:17:07:D6:1C
Authority key identifier: F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8
Certificate issuer:       /CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
Certificate serial:       5949FF952123ECDBCB3550F666713AB9B06FD67A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft
Manifest number:          96
Signing time:             Sun 01 Mar 2026 11:15:16 +0000
Manifest this update:     Sun 01 Mar 2026 11:10:16 +0000
Manifest next update:     Mon 02 Mar 2026 14:52:16 +0000
Files and hashes:         1: 323830343a323237383a3a2f33322d313238203d3e20323634313033.roa (hash: mse5/ebwV4Ch9nOZ3Ot47CcdAzdhJG8YwDfF9EXOMD4=)
                          2: 3133382e35392e3138382e302f32322d3332203d3e20323634313033.roa (hash: jBBZb3j6mzQ0vSxvLhtWMTEujFoXu9nq7NgVguhq+Eg=)
                          3: F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl (hash: u8AwRXQ4NYm9Ycn4KpN33n++dzygbHwmgfb2zDR1gko=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:ff:95:21:23:ec:db:cb:35:50:f6:66:71:3a:b9:b0:6f:d6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8
        Validity
            Not Before: Mar  1 11:10:16 2026 GMT
            Not After : Mar  2 14:52:16 2026 GMT
        Subject: CN=FBF7FA6848EE28BE324E8CFE080F9BAE1707D61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:aa:fb:ca:86:e1:d1:cc:fe:cd:be:a1:8b:
                    77:e6:63:2c:ca:06:a9:72:da:b7:12:0c:35:a0:b0:
                    77:77:34:21:07:d6:ed:75:76:c4:3f:e0:27:f1:11:
                    4a:57:0d:a6:4d:ba:0f:f9:3c:18:f6:78:28:a4:ed:
                    d6:88:c9:fc:7b:c0:e0:ad:8b:fe:11:34:be:f8:c1:
                    14:cf:e8:1b:97:6e:2d:ff:10:f6:58:bf:c1:59:9a:
                    9f:f9:e9:7e:82:d4:94:54:47:70:1b:97:13:c0:ef:
                    5e:b2:c9:d4:e1:cd:47:a3:0e:7a:7c:44:40:87:35:
                    17:6b:e4:5b:bc:66:25:32:90:4b:9e:8c:9d:c9:e9:
                    8c:b9:eb:65:8c:56:72:5e:7c:75:6f:e9:53:45:58:
                    1f:66:11:06:4e:97:b2:08:bb:1a:f2:d1:41:61:d4:
                    00:d1:e2:5d:97:96:42:96:b0:c5:64:3e:0f:aa:63:
                    97:73:fc:57:12:8e:e3:85:cc:50:14:a4:7a:8a:f0:
                    36:56:1a:ac:a7:b5:c9:35:c9:e9:d7:2c:22:03:c2:
                    15:d8:f2:eb:52:f5:3d:d2:84:f0:a8:8b:64:3d:a4:
                    30:ca:1d:70:fe:3c:f4:c2:77:8f:7b:e4:ab:19:55:
                    30:be:ce:98:f1:60:bd:91:dc:0f:6e:d7:8b:2b:60:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:FA:68:48:EE:28:BE:32:4E:8C:FE:08:0F:9B:AE:17:07:D6:1C
            X509v3 Authority Key Identifier:
                keyid:F1:1B:FF:96:E5:44:9E:E8:D9:FD:98:A0:FA:4C:B9:33:AB:AB:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DUnNdVqr3j2fPyiVxd9WdoX6hFNNDXJFhoCvXRHgdJb/0/F11BFF96E5449EE8D9FD98A0FA4CB933ABAB78D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:b3:31:bf:0a:d5:ae:55:07:2a:56:a6:32:9d:aa:82:f8:
         f8:54:a6:c5:e8:77:94:c5:2e:dc:9a:33:4b:84:99:6e:a8:96:
         0f:9e:88:73:d6:a7:39:ab:b7:22:68:9c:04:b8:50:b2:59:b1:
         7d:96:55:00:ca:3c:3b:ce:1b:bc:1b:9f:6f:b5:90:32:68:ed:
         18:6f:58:13:c7:3e:d2:ca:59:a6:94:69:33:ad:39:9a:69:c9:
         ae:88:5f:27:a6:19:44:2d:44:ca:9e:8a:d1:44:fa:56:33:74:
         7c:69:f4:b5:19:e4:da:30:62:32:3c:73:e4:8e:13:cc:aa:d9:
         c2:d1:0f:83:ea:ca:15:8f:4f:14:34:5b:1c:97:76:0b:0f:fe:
         82:10:f4:5c:b9:5b:9d:58:e5:0a:ff:c9:dc:c1:29:07:19:03:
         ea:28:bf:d7:42:60:70:c8:7c:c4:98:e6:65:d9:49:02:3d:3a:
         f8:fc:b2:c5:aa:60:87:0d:3a:7f:60:a0:7a:6e:be:37:c4:6c:
         5f:17:c4:4e:ff:5b:7e:5b:5b:ad:91:03:1d:dc:4d:00:d3:d4:
         3d:2f:77:84:3f:55:42:29:b3:92:1e:1d:ec:f8:45:1f:ea:7b:
         88:f3:55:76:d8:76:37:47:4b:ab:7b:fc:a5:54:5a:78:56:9f:
         1c:b9:03:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWUn/lSEj7NvLNVD2ZnE6ubBv1nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExQkZGOTZFNTQ0OUVFOEQ5RkQ5OEEwRkE0Q0I5MzNB
QkFCNzhEODAeFw0yNjAzMDExMTEwMTZaFw0yNjAzMDIxNDUyMTZaMDMxMTAvBgNV
BAMTKEZCRjdGQTY4NDhFRTI4QkUzMjRFOENGRTA4MEY5QkFFMTcwN0Q2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ6r7yobh0cz+zb6hi3fmYyzK
Bqly2rcSDDWgsHd3NCEH1u11dsQ/4CfxEUpXDaZNug/5PBj2eCik7daIyfx7wOCt
i/4RNL74wRTP6BuXbi3/EPZYv8FZmp/56X6C1JRUR3AblxPA716yydThzUejDnp8
RECHNRdr5Fu8ZiUykEuejJ3J6Yy562WMVnJefHVv6VNFWB9mEQZOl7IIuxry0UFh
1ADR4l2XlkKWsMVkPg+qY5dz/FcSjuOFzFAUpHqK8DZWGqyntck1yenXLCIDwhXY
8utS9T3ShPCoi2Q9pDDKHXD+PPTCd4975KsZVTC+zpjxYL2R3A9u14srYHb9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+/f6aEjuKL4yToz+CA+brhcH1hwwHwYDVR0j
BBgwFoAU8Rv/luVEnujZ/Zig+ky5M6ureNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRVbk5kVnFyM2oyZlB5aVZ4ZDlXZG9YNmhGTk5EWEpGaG9DdlhSSGdk
SmIvMC9GMTFCRkY5NkU1NDQ5RUU4RDlGRDk4QTBGQTRDQjkzM0FCQUI3OEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMUJGRjk2RTU0NDlFRThE
OUZEOThBMEZBNENCOTMzQUJBQjc4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRVbk5kVnFyM2oyZlB5aVZ4ZDlXZG9YNmhGTk5EWEpGaG9DdlhSSGdkSmIvMC9G
MTFCRkY5NkU1NDQ5RUU4RDlGRDk4QTBGQTRDQjkzM0FCQUI3OEQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq1yzMb8K1a5VBypWpjKdqoL4+FSmxeh3lMUu3JozS4SZbqiWD56Ic9anOau3
ImicBLhQslmxfZZVAMo8O84bvBufb7WQMmjtGG9YE8c+0spZppRpM605mmnJrohf
J6YZRC1Eyp6K0UT6VjN0fGn0tRnk2jBiMjxz5I4TzKrZwtEPg+rKFY9PFDRbHJd2
Cw/+ghD0XLlbnVjlCv/J3MEpBxkD6ii/10JgcMh8xJjmZdlJAj06+Pyyxapghw06
f2Cgem6+N8RsXxfETv9bfltbrZEDHdxNANPUPS93hD9VQimzkh4d7PhFH+p7iPNV
dth2N0dLq3v8pVRaeFafHLkDRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:07 2026 by rpki-client