Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
File:                     3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft (raw, json)
Hash identifier:          ur8CpZTvsZ9CKa/XTGfEIkeH0mK6/cwknAcaHlmUtSU=
Subject key identifier:   CC:90:E0:15:FD:93:80:DF:C9:78:2E:67:D4:89:7F:CC:41:4D:6C:64
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       21FCCBC3BE0CEFE071BA3BB37743FFDD24D7B9C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
Manifest number:          15
Signing time:             Tue 17 Jun 2025 08:09:27 +0000
Manifest this update:     Tue 17 Jun 2025 08:04:27 +0000
Manifest next update:     Wed 18 Jun 2025 08:16:27 +0000
Files and hashes:         1: 3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (hash: NBPbxPnHN4E9eb0mtFjEp5tkbH3cR5vE7pnSJ/2+DQM=)
                          2: 323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (hash: 0qgpnSQRUIKijg6N/JYyex6klY+xX61jWe+PdLjlSLw=)
                          3: 3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (hash: bAA1l36/VefyP/TBtKD2gZgMBM2EiH89h2qiaBvjOTc=)
                          4: 3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (hash: nANj/iZaLTUZkSJxcZG/KQ5YOh7gFhXZHewwVNg53ps=)
                          5: 323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (hash: pFM8YCTx47DOY4cmA5RdGs/cV+iW2FG1cK3zhijjBlQ=)
                          6: 3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl (hash: dEqYhJa08VKcAmU+lwClazh52buEh1q5RxAMxodI1Hc=)
                          7: 3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (hash: WxSishwt+ZdYPObbRdIiUrtFwmbq1km8g2doMEomEFw=)
                          8: 3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa (hash: XX5qrjzHm+mQbV7K49sB6nvBHaGzO5XymNKAoktvfRI=)
                          9: 323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (hash: kW5fO+mqB9sA29s0o1Vv/fXmgESb3tIbpSVg0Eoemh4=)
                          10: 323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa (hash: bgl6g1KptSAPpt8GNqaiZknQ0BsdfiZw5DD67RDYZX8=)
                          11: 323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (hash: xZs/v/7e03FU4eiP2D5FsiAR5Jju7reoXsFdW5tpiZQ=)
                          12: 3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa (hash: sUPDegn1vgvpa7Jkx7uj/E5DCfkhOmAJzokLacTi+sw=)
                          13: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (hash: jNRlE2sbLp0JxGKhI1nfC4O8jA6jGd1U7y1oOENnOEI=)
                          14: 323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (hash: gjYp3MdmOWUdto2Lr/aHpIAjqbcKHmwVVvZghoft8y0=)
                          15: 323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (hash: dWjlQ0gigidwSk+OEgmIxEXeDw8e+7MdTKyZWhVJfNw=)
                          16: 323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (hash: 9kb5P/7Svr261540hjLdxQy1LB4IaD5oh9bIRuw1EsQ=)
                          17: 323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (hash: BisUjC/s9KkkhmKG5KEDFNxiLfQEi0kQoETAqTm9Gug=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:cb:c3:be:0c:ef:e0:71:ba:3b:b3:77:43:ff:dd:24:d7:b9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun 17 08:04:27 2025 GMT
            Not After : Jun 18 08:16:27 2025 GMT
        Subject: CN=CC90E015FD9380DFC9782E67D4897FCC414D6C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:e9:4e:c7:a9:d0:ff:98:98:25:01:88:b7:
                    82:d7:50:2b:2f:83:23:0d:c6:89:20:45:0c:ad:59:
                    d5:70:b2:0a:69:e2:6b:a9:8c:19:0c:41:05:d4:61:
                    4c:1d:2e:9c:ab:a8:2d:98:52:8f:66:c7:6c:8a:cc:
                    6d:89:0f:ac:41:a9:6e:88:21:5a:81:30:63:21:55:
                    60:a7:3d:64:da:97:0a:6a:58:75:25:8f:3e:03:62:
                    51:a0:d3:29:d2:f6:56:4d:07:d1:53:74:c0:aa:61:
                    4a:5f:de:09:e5:8e:a9:f7:87:22:4d:1b:b3:bd:3c:
                    8b:45:40:ad:db:ab:04:e9:96:13:49:0a:aa:f6:cb:
                    4d:e4:5d:2c:e0:1d:8c:e6:05:a9:3e:b9:ec:a6:9d:
                    f2:95:2d:6e:c0:8f:2c:a1:f0:08:b2:53:1c:2b:f6:
                    fd:25:6f:dc:e7:31:29:83:91:79:48:69:f1:12:f8:
                    dc:82:d7:4b:0d:33:31:15:34:e8:64:1f:72:26:8b:
                    58:30:87:11:ad:ff:0a:8c:be:ed:29:9f:db:9a:58:
                    19:93:4f:fe:a8:66:05:8f:9f:0a:10:13:72:ac:51:
                    ae:d0:67:fa:df:f1:b8:22:92:71:3a:10:86:b0:a4:
                    8d:d7:56:cd:ce:73:66:c7:aa:eb:35:7a:c8:75:7a:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:E0:15:FD:93:80:DF:C9:78:2E:67:D4:89:7F:CC:41:4D:6C:64
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:81:14:de:ab:11:6b:81:e0:7e:73:68:8e:dc:27:7c:f6:
         4a:af:90:b2:54:2c:dc:db:79:a3:92:d8:03:ca:2b:14:c2:85:
         cd:fb:83:7b:a9:d6:bd:7d:c0:67:4e:5f:bd:e5:c3:27:56:fd:
         9d:19:24:fc:99:e7:4c:1c:f1:89:e5:ae:5d:5f:e1:0e:6f:df:
         fb:32:bd:6d:89:ee:95:b1:04:db:34:b9:df:54:f4:59:1e:c7:
         53:82:ba:70:39:59:23:d2:d5:ef:ed:28:b3:a0:19:73:c7:97:
         42:20:38:be:bd:fb:c7:15:c4:52:22:37:20:f6:ae:81:84:6c:
         8a:1a:b2:98:81:66:3d:ce:51:40:0a:e6:91:26:3e:bb:6d:52:
         36:42:8d:94:47:52:5e:18:f1:85:bc:88:82:ef:6d:92:24:db:
         25:27:9e:f5:71:ce:b3:28:e0:74:28:30:a9:51:94:82:58:c7:
         90:a3:00:59:f9:5c:3f:dd:4e:29:3a:b2:0f:fe:53:a6:3c:d1:
         44:65:3f:81:a8:33:3e:55:4b:b5:25:f6:5a:8b:5d:f0:6a:29:
         90:5c:62:8c:0b:1d:30:db:25:0a:1a:06:c7:06:e7:da:c6:6f:
         cc:d9:0b:47:f9:13:e0:5b:34:fc:f1:fe:fb:f3:61:bc:f4:09:
         13:c4:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:15:39 2025 by rpki-client