Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.mft
File:                     2B0321C6A5143815C9761040AF0A13D38375F6E5.mft (raw, json)
Hash identifier:          7aZ98c6C1Fe4AynI4KfJizmIhyyTetm9cjzp8dRqJfc=
Subject key identifier:   67:13:1F:FA:09:47:1C:52:AF:B5:4F:8A:13:1E:1B:CD:C4:A3:FB:48
Authority key identifier: 2B:03:21:C6:A5:14:38:15:C9:76:10:40:AF:0A:13:D3:83:75:F6:E5
Certificate issuer:       /CN=2B0321C6A5143815C9761040AF0A13D38375F6E5
Certificate serial:       7F15B1F6A5AFE5C516E50A3D19BEBB6869D1E914
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0321C6A5143815C9761040AF0A13D38375F6E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.mft
Manifest number:          74
Signing time:             Tue 14 Apr 2026 23:34:49 +0000
Manifest this update:     Tue 14 Apr 2026 23:29:49 +0000
Manifest next update:     Thu 16 Apr 2026 01:30:49 +0000
Files and hashes:         1: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: 0rNS8jTqWBXnfzUZI9V2sIZi2eJ+Zm+cYEE8AIlMsJg=)
                          2: 2B0321C6A5143815C9761040AF0A13D38375F6E5.crl (hash: rtFvrZSWFhWnlhKldGtPAOofyepcz6t+tXHnD5AeT8M=)
                          3: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: ymiDC6e5hKz5QObw7Tfr3tr4j8MWiTw7VDxpwlaAu+0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:15:b1:f6:a5:af:e5:c5:16:e5:0a:3d:19:be:bb:68:69:d1:e9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0321C6A5143815C9761040AF0A13D38375F6E5
        Validity
            Not Before: Apr 14 23:29:49 2026 GMT
            Not After : Apr 16 01:30:49 2026 GMT
        Subject: CN=67131FFA09471C52AFB54F8A131E1BCDC4A3FB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:bc:e6:80:94:ff:23:1a:e3:40:85:8a:41:
                    5b:7d:f0:06:45:88:7f:ec:e3:a6:1f:ef:1c:ae:b8:
                    38:23:c8:5d:4e:7b:23:4c:e5:88:12:3b:4d:ee:9d:
                    f8:aa:9d:ab:07:04:b9:12:5e:a3:09:20:96:46:fc:
                    75:ec:3a:ce:11:48:9a:5c:f1:0d:b6:66:cb:8d:19:
                    8c:75:92:2d:aa:cd:e7:6a:0a:c3:84:3d:25:a9:de:
                    0a:32:2a:00:f4:3a:3c:85:c4:1b:93:ce:05:b9:40:
                    3c:60:1c:36:7c:15:bc:0e:c0:f7:48:d4:83:c5:84:
                    55:50:06:37:8a:cd:5b:cb:73:c6:81:c2:38:e4:91:
                    8e:3d:6d:fe:ac:84:fa:c3:86:91:5a:d3:eb:55:73:
                    15:49:3b:e1:b1:09:33:23:d6:ea:81:9e:6e:a1:ea:
                    3a:2c:e1:8b:a8:c1:7c:3c:da:20:c1:2d:87:ce:36:
                    fb:1a:57:64:e3:d4:65:36:e4:36:0e:a2:2d:5a:13:
                    43:35:72:c6:44:fc:3c:ba:14:9c:4d:96:a9:63:88:
                    bf:58:02:2f:98:1f:d6:2b:4c:c9:e7:08:66:b5:c6:
                    80:d3:e2:3d:0d:b2:7c:be:0d:ff:76:21:eb:a3:a7:
                    30:74:ab:3b:9c:ac:d5:fe:90:6b:b2:8c:d9:83:3d:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:13:1F:FA:09:47:1C:52:AF:B5:4F:8A:13:1E:1B:CD:C4:A3:FB:48
            X509v3 Authority Key Identifier:
                keyid:2B:03:21:C6:A5:14:38:15:C9:76:10:40:AF:0A:13:D3:83:75:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0321C6A5143815C9761040AF0A13D38375F6E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:b0:9b:fd:81:1c:5c:5c:d6:c1:3e:ba:a1:36:f6:10:41:
         b1:2f:ad:40:16:98:46:ce:0d:2d:c6:79:57:47:bb:ad:dd:7f:
         15:b3:25:88:01:83:ac:bc:18:85:43:ef:60:bb:ea:2f:07:17:
         ef:49:dc:49:80:37:d8:a4:ac:8e:9d:a7:b7:6d:10:ea:b5:c4:
         0d:46:67:ce:d2:85:f3:d9:53:50:cc:92:28:d6:b7:19:81:5b:
         04:af:4d:89:d5:55:72:fd:b1:62:29:eb:6b:9c:8a:4a:d4:87:
         b8:d0:2a:e4:a2:75:a4:ea:b6:09:50:49:6c:28:50:9e:41:d0:
         c4:a4:1f:bf:e5:96:e5:85:b3:d4:26:2e:c7:44:e8:50:bd:35:
         5b:05:d3:a5:c1:d6:e2:46:3f:c2:87:ec:b9:83:cf:7a:04:16:
         3a:c5:5e:32:12:7a:fa:e8:88:cb:7d:0f:a9:44:f0:83:93:df:
         f4:07:36:4a:c9:59:45:44:f8:ab:dd:44:61:9e:a0:a0:a3:f4:
         04:23:95:8c:a5:b9:a7:99:18:d1:33:e1:ce:61:5a:93:a6:c8:
         f8:4b:40:67:cb:66:2e:c8:73:6d:bd:ea:8d:c6:37:8d:94:a3:
         85:78:e4:46:0c:16:0e:33:32:fd:b2:26:57:ad:18:52:28:04:
         5d:04:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----