Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
File:                     A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft (raw, json)
Hash identifier:          Q94JbSUBXDr4hjL+DBZe5Guc20L1z2BDl+6ShRI+0aY=
Subject key identifier:   33:65:45:D6:F6:51:8B:F7:45:32:3F:50:8A:3D:BA:74:39:FA:AB:5A
Authority key identifier: A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3
Certificate issuer:       /CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
Certificate serial:       30A74476E97E5AA4BC47BB59C4522E2BB3004102
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
Manifest number:          016F
Signing time:             Tue 13 Oct 2026 02:47:32 +0000
Manifest this update:     Tue 13 Oct 2026 02:42:32 +0000
Manifest next update:     Wed 14 Oct 2026 06:00:32 +0000
Files and hashes:         1: A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl (hash: aFp3ggADIYwIOCl0s4wJyPChPbwK10ycEGR5tL38Aq0=)
                          2: 323830343a376536383a3a2f33322d3438203d3e20323731363232.roa (hash: 0C6zL5dvXuoRT2KYwnmBDXh3IKJHOwn16hYb6+SZER8=)
                          3: 34352e3136332e34382e302f32322d3234203d3e20323731363232.roa (hash: 8+JGd4jKVqHbdrLFhlY1sVMskhm2pXMVUyRs3xinkYo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a7:44:76:e9:7e:5a:a4:bc:47:bb:59:c4:52:2e:2b:b3:00:41:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
        Validity
            Not Before: Oct 13 02:42:32 2026 GMT
            Not After : Oct 14 06:00:32 2026 GMT
        Subject: CN=336545D6F6518BF745323F508A3DBA7439FAAB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:80:f9:b7:02:b4:60:fe:75:8b:c4:51:80:
                    0d:19:44:4a:2b:b9:ac:4e:29:2e:34:c1:0c:06:dd:
                    ed:6f:99:32:78:a9:c3:33:e9:18:e3:2b:8f:2e:b9:
                    08:2b:7c:99:56:69:5e:00:85:19:64:4a:7d:8d:af:
                    62:3b:0c:8f:66:de:b7:d1:0c:19:35:2e:b4:73:71:
                    ee:b7:1f:bf:e7:c1:fd:f7:76:1d:84:58:71:43:b7:
                    65:0c:d8:d2:a8:cd:bb:ed:33:c6:ef:fa:95:d7:be:
                    e7:d4:2d:c4:72:45:cf:b1:42:14:63:d0:69:ce:20:
                    af:c9:d7:03:9f:79:21:ff:b2:4e:b2:f7:68:9f:01:
                    fa:51:fa:34:f9:f5:14:2c:41:e5:d4:5c:58:ea:91:
                    4c:87:39:4a:01:5c:9a:fd:16:05:07:12:d4:9a:ca:
                    f9:13:50:d1:5d:d0:99:e0:52:6a:71:45:62:d4:2e:
                    f7:6c:a8:45:53:75:1d:c6:ac:15:37:ae:c6:f0:92:
                    87:18:d7:69:e9:79:2e:fd:8c:19:3c:ab:12:9a:d0:
                    13:ce:77:1f:ab:70:01:4a:32:4b:ad:f6:d7:62:54:
                    47:34:12:70:c5:57:f8:a1:28:e2:45:76:a6:81:91:
                    4b:34:ab:64:85:93:f3:2e:87:0a:37:2e:0a:a7:35:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:65:45:D6:F6:51:8B:F7:45:32:3F:50:8A:3D:BA:74:39:FA:AB:5A
            X509v3 Authority Key Identifier:
                keyid:A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:45:ce:23:92:a8:10:11:6d:f6:39:85:41:e7:ca:93:1b:
         cd:58:89:ee:4c:d1:ad:70:0e:c9:5e:30:66:68:6f:44:45:af:
         cd:cf:82:9d:8b:32:6a:31:f0:6b:30:bf:cc:75:8c:ef:a5:97:
         c9:dc:a9:6e:70:9d:0d:e1:ab:1b:36:d8:e9:be:55:12:f1:cc:
         58:01:87:51:16:be:19:01:4a:f9:d7:40:39:9c:d1:dd:12:ed:
         e6:8a:a9:41:18:54:a1:d9:fa:76:89:76:49:08:8e:69:39:d1:
         0f:da:80:86:18:2f:4c:7d:f8:3f:d4:37:5a:91:b4:d5:04:68:
         95:e8:db:a5:49:32:5a:79:ab:63:34:aa:3a:60:0c:8c:2a:2e:
         0d:d0:ee:b4:a7:ec:63:ee:07:5d:04:ee:e9:ef:98:83:8e:74:
         03:2b:f9:07:78:00:71:6f:7b:5d:da:c3:71:1d:a2:c4:15:19:
         77:b6:82:da:9f:ec:0e:64:c8:a0:6f:08:38:a5:20:95:55:91:
         1a:38:f6:ed:72:e5:5b:ae:63:43:c9:b7:ff:da:4d:8a:12:5f:
         4c:ec:5a:03:79:4f:43:c9:01:b5:09:10:aa:20:7e:4c:5b:9b:
         24:77:5b:37:64:08:ce:0e:27:78:19:45:d6:b6:f7:82:6f:88:
         e1:0e:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:27:36 2026 by rpki-client