Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.mft
File:                     F462BB2524D88C109A78F223DCBD42C0C97609EB.mft (raw, json)
Hash identifier:          obqHFLN07um5P9H1ThHzRTkRXCe/A0u9C+FldZcv5GU=
Subject key identifier:   23:C4:76:ED:6A:11:EB:4E:69:10:A1:3C:37:9A:8D:94:48:40:64:61
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Certificate issuer:       /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial:       37AF65B0F85F8E2B63C10437782D0E8D73883693
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.mft
Manifest number:          1E
Signing time:             Tue 17 Jun 2025 09:14:27 +0000
Manifest this update:     Tue 17 Jun 2025 09:09:27 +0000
Manifest next update:     Wed 18 Jun 2025 10:03:27 +0000
Files and hashes:         1: 323830343a366532383a3a2f33322d3332203d3e20323730353739.roa (hash: VLNm2mzW65b3jjilEnfK7dvN8/0vphbu26QNGfcOiGo=)
                          2: 3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (hash: Xg2zgw9DGQ3nyrTX/WGs4moe9Isb9PZpe0/q+ExAT/U=)
                          3: 3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (hash: x9wLWxvK9yy9/MjSAayN8EHhzIAII3Z30xpeH3ds6Ds=)
                          4: 3138392e3132362e38362e302f32342d3234203d3e20323730353739.roa (hash: PQIxrIr68PApwISnT6Q9oBEN3jNyJFF8peDSu52RvHs=)
                          5: 3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (hash: 01Vxm84ueO0k999Nl8NKLY7JydQuJJtAf4kfDGIYnUo=)
                          6: F462BB2524D88C109A78F223DCBD42C0C97609EB.crl (hash: VUlx1RdkWzAk4hKKvGxk+YpWM2HQg9Sb40gAOFgJqCI=)
                          7: 3138392e3132362e38352e302f32342d3234203d3e20323730353739.roa (hash: zi+VqknKmAdMJ6coG4nUB0j/aHIOHyq4lAhL+V//djY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:65:b0:f8:5f:8e:2b:63:c1:04:37:78:2d:0e:8d:73:88:36:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
        Validity
            Not Before: Jun 17 09:09:27 2025 GMT
            Not After : Jun 18 10:03:27 2025 GMT
        Subject: CN=23C476ED6A11EB4E6910A13C379A8D9448406461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:93:ec:bd:10:71:5d:28:3c:3d:3f:70:9a:
                    e4:a1:8d:24:e0:7e:88:bb:52:ba:6d:89:a5:4c:e3:
                    b2:90:29:26:59:a0:7d:a6:6a:54:be:76:0a:18:c4:
                    a6:23:ef:18:e8:a2:0c:f8:cb:10:47:47:98:cb:83:
                    28:03:68:87:50:10:d1:f7:b3:5a:2e:78:9f:d2:69:
                    6e:a0:1e:2d:0d:f7:13:9d:48:45:25:70:08:9d:de:
                    52:4e:6c:af:94:f8:19:81:4a:94:c0:80:e5:ee:e6:
                    e2:04:62:2f:9a:20:db:ca:b8:6c:e9:7d:36:47:c7:
                    26:42:cc:1c:d7:94:1b:3c:ae:fb:bf:7e:d6:8c:72:
                    45:e8:49:2a:0e:52:f4:83:af:1d:34:56:7e:5f:3a:
                    e5:7b:81:1f:16:4a:5c:97:ab:ad:4d:b8:b5:34:a8:
                    ce:4d:6d:84:a1:8d:ea:40:2f:10:8c:5f:a9:de:bd:
                    b8:7a:a7:69:02:87:39:62:e0:7a:37:77:d9:be:d6:
                    32:ad:c4:e0:29:4c:67:d4:c2:1a:ac:f7:ba:12:1c:
                    89:fb:42:fe:6a:19:e8:7d:e9:4e:ae:c8:5d:6a:03:
                    37:e1:ed:1c:11:e3:3f:8d:b2:3d:57:a0:bf:da:b4:
                    9e:09:75:98:e8:78:2c:b3:04:18:e3:46:50:08:c1:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:76:ED:6A:11:EB:4E:69:10:A1:3C:37:9A:8D:94:48:40:64:61
            X509v3 Authority Key Identifier:
                keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:ec:6b:72:56:82:07:65:fd:16:a2:3d:49:c1:b0:37:1d:
         63:e7:94:77:64:9e:e3:05:79:27:ee:05:e7:e2:26:9c:c9:15:
         35:12:a5:6a:81:71:f9:2d:a9:8d:d8:26:2f:7d:ca:1a:ae:63:
         f7:da:b4:0a:09:00:58:e6:67:7f:fe:fa:da:77:20:93:0f:02:
         2b:df:6e:34:dc:6d:7f:74:18:ba:b6:2e:57:0b:f8:4a:e1:ef:
         97:64:04:64:6f:61:f0:2c:01:38:09:ce:d8:89:df:2b:b9:2e:
         23:a4:3e:fe:dc:c8:5b:b1:3b:bd:e4:ee:72:64:7a:36:02:41:
         05:43:c4:51:e3:22:18:42:7d:a0:64:21:e7:39:d7:1e:19:d3:
         b9:77:1b:2b:54:c3:56:04:88:76:d0:77:34:9e:63:0c:6a:4e:
         97:34:09:8f:77:27:3a:b3:e7:36:30:d1:59:39:10:1e:84:91:
         80:61:a4:71:bd:34:26:5f:62:48:30:05:37:97:3c:aa:71:d7:
         10:0a:d3:19:68:c4:f7:8d:d1:3c:74:f9:83:35:5e:bf:cd:9d:
         df:84:bc:19:a2:b8:d1:45:7c:37:bd:fe:a1:47:1f:cf:db:82:
         70:27:90:52:1a:91:69:36:37:d8:86:1c:47:83:35:a8:df:4c:
         59:35:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:11:15 2025 by rpki-client