Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft
File:                     8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft (raw, json)
Hash identifier:          GG9a6UOIuq/EnprNAQDSXFwbIE1THwzLd+bsDDsLpqc=
Subject key identifier:   F6:8B:B1:02:74:8F:6D:7E:6A:F0:24:BC:1F:3D:D6:14:FB:A6:9E:8E
Authority key identifier: 82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79
Certificate issuer:       /CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979
Certificate serial:       6E2E5D7C0D77F0B17B3DBE21F5E1F590671EE4D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft
Manifest number:          0154
Signing time:             Fri 12 Jun 2026 10:00:28 +0000
Manifest this update:     Fri 12 Jun 2026 09:55:28 +0000
Manifest next update:     Sat 13 Jun 2026 13:38:28 +0000
Files and hashes:         1: 323830343a323531343a3a2f33322d313238203d3e20323634323539.roa (hash: fUn/l07CRsywaYrCwb4RVxAOCaDF+ZRnC3DlcyedirY=)
                          2: 3133382e3131382e34302e302f32322d3332203d3e20323634323539.roa (hash: CGMYCuwpCuvrB1zGBmuoqGdhnBezP8PhYrcw93PKOrM=)
                          3: 8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl (hash: L5iAhXwWBMc31SXaDwjmJNndJLyTBt+n+CWqLIaqBs0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2e:5d:7c:0d:77:f0:b1:7b:3d:be:21:f5:e1:f5:90:67:1e:e4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8238EB7EFD442CD17FEB767C5F74049E1AC52979
        Validity
            Not Before: Jun 12 09:55:28 2026 GMT
            Not After : Jun 13 13:38:28 2026 GMT
        Subject: CN=F68BB102748F6D7E6AF024BC1F3DD614FBA69E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:27:d9:3a:a1:8d:a0:08:3b:11:d0:20:99:
                    56:2e:f4:dc:82:48:22:ca:b2:57:26:26:81:b5:c2:
                    bd:4e:12:95:a8:c0:69:a4:34:4c:16:53:93:f2:62:
                    35:47:0a:39:9a:fa:5d:72:15:b1:3e:c8:54:44:2f:
                    41:03:6d:88:5a:ad:cd:f8:b2:03:c5:0c:45:16:1c:
                    0a:0b:ef:b0:5a:5f:76:79:1c:f4:fd:4a:e3:7f:0c:
                    6e:72:68:bc:f2:0d:4d:ab:54:c6:34:e5:f7:e3:54:
                    d8:d0:31:6d:a5:27:71:2a:5f:fe:a7:ec:46:f8:a5:
                    03:6a:fb:24:18:a2:d4:f2:bb:b4:a5:4c:37:ee:58:
                    40:13:6a:f6:90:28:06:03:79:50:3a:96:12:15:eb:
                    1f:72:32:cf:d3:a2:f7:4f:cc:e5:d6:1f:0e:92:37:
                    24:c8:f7:35:1e:b4:b0:d5:a4:62:72:5a:87:ab:88:
                    5a:15:9d:58:cc:1d:10:cd:9d:ab:b9:d6:96:10:21:
                    b8:9a:8a:7f:40:05:66:80:49:ed:2c:8e:36:b9:59:
                    2b:4d:00:4b:5d:80:d2:94:05:c2:9e:ed:45:c6:ae:
                    25:fc:5e:cd:1c:d8:83:56:06:dd:32:e1:cb:58:15:
                    c6:da:bf:c9:cf:d6:1a:ce:2a:51:69:ad:80:93:d3:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:B1:02:74:8F:6D:7E:6A:F0:24:BC:1F:3D:D6:14:FB:A6:9E:8E
            X509v3 Authority Key Identifier:
                keyid:82:38:EB:7E:FD:44:2C:D1:7F:EB:76:7C:5F:74:04:9E:1A:C5:29:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238EB7EFD442CD17FEB767C5F74049E1AC52979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/8238EB7EFD442CD17FEB767C5F74049E1AC52979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:f3:de:63:a9:02:bf:c6:a5:de:2d:73:40:13:8e:96:ca:
         63:29:55:53:4e:73:14:2d:60:aa:a7:32:75:9c:2d:e4:c2:91:
         55:d0:ce:dd:34:9e:4b:8f:e8:b2:c3:24:38:2f:68:7a:eb:9a:
         ae:d1:07:fc:2e:df:7f:e8:3c:18:6d:06:92:60:30:89:57:c1:
         e8:81:15:eb:c2:c1:87:4b:d2:7e:0f:d5:a0:f4:56:9e:23:3a:
         65:7c:7b:cc:19:87:9e:bf:ea:59:94:75:f4:6f:f5:b2:06:f1:
         6c:f5:98:3b:78:a7:fa:2e:b5:e2:98:2c:9b:69:8a:63:b7:36:
         7e:8e:af:f2:f4:f5:f7:7f:94:70:1d:17:cb:15:2b:b6:69:59:
         6f:30:c5:67:b5:f3:f0:1a:70:33:cd:d9:87:75:5d:45:c2:a8:
         8c:bf:de:da:de:0f:e7:10:92:72:97:9b:f9:39:b2:e9:e4:dc:
         19:4c:b5:fe:4d:32:e5:23:54:95:ba:77:a6:87:6c:94:a3:8c:
         8e:e5:d7:27:69:70:f4:b1:65:c8:2d:90:1f:93:fe:91:98:ef:
         8b:ad:75:d4:9f:4e:57:77:b6:fc:f6:3d:07:ad:d6:5e:86:08:
         8f:62:88:0a:e2:9b:43:1d:44:aa:b1:f2:82:eb:15:63:1c:fd:
         83:4a:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:51 2026 by rpki-client