Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/BAFC2DAFE27C3B67929A4ADECC027D492907278D.mft
File:                     BAFC2DAFE27C3B67929A4ADECC027D492907278D.mft (raw, json)
Hash identifier:          52rBLv2UULFcfJVnNgrjcaka0SbVPc/edGXlPJpsFwA=
Subject key identifier:   A5:3D:77:A9:F8:4C:7F:63:7D:D0:E3:09:BF:67:B6:45:47:02:FE:35
Authority key identifier: BA:FC:2D:AF:E2:7C:3B:67:92:9A:4A:DE:CC:02:7D:49:29:07:27:8D
Certificate issuer:       /CN=BAFC2DAFE27C3B67929A4ADECC027D492907278D
Certificate serial:       042ECEDA9FDF70F90453C618CA48A172E1FBC2DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAFC2DAFE27C3B67929A4ADECC027D492907278D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/BAFC2DAFE27C3B67929A4ADECC027D492907278D.mft
Manifest number:          05
Signing time:             Fri 12 Jun 2026 18:49:01 +0000
Manifest this update:     Fri 12 Jun 2026 18:44:01 +0000
Manifest next update:     Sat 13 Jun 2026 21:45:01 +0000
Files and hashes:         1: AS266467.asa (hash: Hkg/AERXaFSQ6KPG4q8PK/ZMAQgBVUJmkhkJQSn65l0=)
                          2: 323830343a333834383a3a2f33322d3438203d3e20323636343637.roa (hash: 0CJLo9WSOU3Jo2di1THMiz4jEehcZckGEur+fFM1A2E=)
                          3: 3137302e38332e3131322e302f32322d3234203d3e20323636343637.roa (hash: zzrtMeJ/ISl0P9WNROzoGdk2ViL4+bLIG08ZKEcF3a4=)
                          4: BAFC2DAFE27C3B67929A4ADECC027D492907278D.crl (hash: FRqCh9ycT88RH8wzKkcuL5foz3MuGhlfVqFXpITlsf4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2e:ce:da:9f:df:70:f9:04:53:c6:18:ca:48:a1:72:e1:fb:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFC2DAFE27C3B67929A4ADECC027D492907278D
        Validity
            Not Before: Jun 12 18:44:01 2026 GMT
            Not After : Jun 13 21:45:01 2026 GMT
        Subject: CN=A53D77A9F84C7F637DD0E309BF67B6454702FE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:0f:1f:88:3a:50:14:56:b7:31:54:c6:55:
                    5c:5d:4d:f0:e6:c9:5c:07:bd:2c:71:86:15:8b:b4:
                    7e:50:d3:f1:1a:d6:90:a0:1d:b5:17:07:6e:96:ee:
                    74:3c:bf:a2:07:e7:a4:5a:12:69:ed:92:21:1a:98:
                    f7:df:11:7d:f0:dc:2d:c9:73:1a:4d:fb:bd:59:4a:
                    33:e4:42:53:59:de:c4:2f:43:ce:c0:02:63:2c:24:
                    8e:05:0c:c3:ae:6c:48:65:fa:54:93:f7:64:11:7d:
                    18:01:6b:aa:05:cd:4b:f8:e0:ce:6c:31:38:dc:4c:
                    27:b7:65:16:f3:76:f5:6f:a3:b0:c4:44:45:3b:49:
                    e0:1f:86:b3:d4:4d:c6:f5:22:ce:23:0b:ab:41:da:
                    67:fc:9b:d8:b8:d3:19:11:fd:01:52:c0:28:ec:f6:
                    64:d4:0b:94:b5:d4:6b:3c:00:c4:f9:ac:73:e4:2c:
                    77:87:cd:e6:bd:38:11:d9:68:ed:66:27:9a:81:84:
                    ca:b2:d6:b8:5d:13:f2:bc:50:88:56:f6:c9:79:34:
                    72:f6:9a:aa:15:17:48:d0:fc:d3:2d:3b:67:12:ea:
                    4b:32:b1:0d:80:8f:62:f1:3b:6b:60:56:71:77:ae:
                    9b:21:32:21:b7:5d:13:db:ba:3d:59:19:ad:3e:98:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:77:A9:F8:4C:7F:63:7D:D0:E3:09:BF:67:B6:45:47:02:FE:35
            X509v3 Authority Key Identifier:
                keyid:BA:FC:2D:AF:E2:7C:3B:67:92:9A:4A:DE:CC:02:7D:49:29:07:27:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/BAFC2DAFE27C3B67929A4ADECC027D492907278D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAFC2DAFE27C3B67929A4ADECC027D492907278D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/BAFC2DAFE27C3B67929A4ADECC027D492907278D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:d1:f3:64:31:2f:df:2b:5d:93:b1:ed:88:6f:fe:39:8b:
         ec:ed:94:00:3a:16:32:48:fb:02:1b:da:da:95:62:a1:78:1c:
         a3:3b:27:2f:74:8d:7e:78:96:a1:54:46:1d:d7:1a:9f:64:de:
         d1:cc:f4:7f:27:6c:56:b8:d7:57:be:6d:df:d0:ad:2f:67:db:
         29:72:a3:06:c9:92:e8:a0:d2:6b:a7:4d:49:26:0a:9c:17:3d:
         e5:c7:4e:01:1b:4d:b5:4f:e2:f6:bd:2a:ee:61:45:c3:7c:4f:
         5b:d7:46:c1:85:99:9a:cc:27:9c:04:fd:55:56:d0:26:26:9a:
         b7:a4:ce:8d:db:90:dc:14:37:9a:eb:98:0f:cc:97:29:c9:7d:
         c8:35:50:dc:7b:f8:e9:eb:68:7f:dc:15:10:0c:f8:a0:17:81:
         ba:db:99:80:81:53:a4:11:c2:27:67:31:7c:46:7d:61:fa:04:
         db:7d:32:5b:a0:f9:af:fc:83:0a:cb:77:9e:80:0b:27:03:13:
         9f:5d:3e:b7:64:db:9c:33:ae:0b:c7:19:38:06:36:00:61:02:
         e5:37:b3:3d:da:e4:31:2c:72:a6:73:71:c8:1c:f6:45:e7:9b:
         28:07:ee:2f:a3:f7:98:bf:15:f5:74:40:48:00:3c:58:74:85:
         98:55:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:42 2026 by rpki-client