Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.mft
File:                     95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.mft (raw, json)
Hash identifier:          jE+tqzb6M/m+3sYnhtq60ozTOWcTZ7jhniqPNwxjBiM=
Subject key identifier:   9F:85:FF:A7:73:89:50:BE:5E:38:28:24:98:0F:4C:C9:81:7C:FF:A3
Authority key identifier: 95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
Certificate issuer:       /CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Certificate serial:       57AC5030C394F6786E446BA5AD8FD65FE33F2C4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.mft
Manifest number:          0D
Signing time:             Tue 17 Jun 2025 22:45:41 +0000
Manifest this update:     Tue 17 Jun 2025 22:40:41 +0000
Manifest next update:     Wed 18 Jun 2025 23:43:41 +0000
Files and hashes:         1: 95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl (hash: XU0PJRS5yom/3RC2DXFAnG2kTBN7gDOG2EQM8kmZmGg=)
                          2: 34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (hash: Bjx1OB32eiZW91+jSNX6Bd+5WqWfezM1nKcrfRMxFHQ=)
                          3: 323830343a356164633a3a2f33322d3332203d3e20323638383031.roa (hash: L+rvjy6Y8RN/V4ImhDNk3tiH2XTHkc33HOGkng05Fp8=)
                          4: 34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (hash: l3VO4u9zsEROKnJ4wCBj/PlgR09DEk2jSBg4+Q7j1LQ=)
                          5: 34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (hash: cbXB2pJsrhx4UtfCraAa9t1ceZVwiVFdfNBOyAt//S0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:50:30:c3:94:f6:78:6e:44:6b:a5:ad:8f:d6:5f:e3:3f:2c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
        Validity
            Not Before: Jun 17 22:40:41 2025 GMT
            Not After : Jun 18 23:43:41 2025 GMT
        Subject: CN=9F85FFA7738950BE5E382824980F4CC9817CFFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:3a:d3:ba:1d:ca:c5:6b:09:94:6f:ec:43:
                    16:18:81:49:e3:1a:b8:ef:41:d5:13:53:18:f0:d6:
                    8d:0a:5e:fa:bc:df:67:be:35:41:d8:ad:57:24:3b:
                    6f:da:af:59:08:88:1e:93:54:ef:a5:c2:19:a7:0c:
                    c4:71:6e:b9:48:88:6f:d4:ad:6f:ed:0e:40:17:53:
                    28:f4:c0:ef:0e:ef:3c:38:a6:15:e2:7a:01:3b:23:
                    ef:3e:19:cd:c5:06:4b:25:10:45:31:ef:ac:b1:aa:
                    77:84:29:6f:b3:82:0b:e2:45:bd:30:13:cc:4a:67:
                    e5:4d:bb:c8:9e:70:f1:37:d6:45:0d:3e:f4:d3:a9:
                    57:96:e6:a8:8c:3f:3a:50:03:28:f2:34:9a:51:cc:
                    38:a9:fc:c2:9d:63:b2:a4:11:5c:b8:fe:3e:eb:77:
                    79:0c:2e:cd:bd:8f:fd:0e:ab:18:9f:b2:8d:13:cf:
                    42:77:ac:70:12:03:38:b4:0c:0f:3f:54:fd:36:87:
                    af:9c:a4:1b:27:78:96:e9:2f:38:88:e0:80:58:be:
                    d6:26:87:7e:6b:47:8e:6d:96:af:ab:f8:dc:83:30:
                    7f:67:e6:b0:18:08:3a:5c:75:51:fa:3c:4f:88:56:
                    e4:0c:76:98:e6:14:38:44:bd:b7:fb:6b:8c:a8:a3:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:FF:A7:73:89:50:BE:5E:38:28:24:98:0F:4C:C9:81:7C:FF:A3
            X509v3 Authority Key Identifier:
                keyid:95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:4b:5c:04:a7:e2:e9:98:12:89:b6:6b:32:4f:b5:c1:7c:
         82:8b:31:bd:8d:a4:4f:c4:49:70:c5:81:b6:bb:42:c1:0a:55:
         5f:b4:32:82:f0:78:ea:0f:90:1e:ef:e5:5b:3d:3e:19:83:f1:
         0e:65:43:ca:8c:0b:af:78:89:6b:61:e7:b9:8e:f4:d1:4d:15:
         a8:0a:7c:89:48:6a:86:88:9b:fd:7c:6f:ea:fb:86:74:3c:5e:
         f9:0a:5d:ad:d2:64:1f:3e:d3:71:72:94:78:c2:66:63:00:84:
         ef:64:21:3b:8e:da:83:8f:4c:48:7c:22:cd:31:e0:37:7d:5a:
         59:e2:d7:ee:3a:f9:5f:3b:81:24:99:7b:c0:92:c5:6a:64:6b:
         01:ff:bb:0a:38:57:06:d5:3f:24:36:fd:d7:95:4a:b8:e7:af:
         1a:92:bb:e7:9f:3e:6e:0c:42:e1:6e:a2:2b:11:7c:90:12:3f:
         5a:8f:46:b1:f5:7d:09:90:db:7a:e3:a4:ba:c4:97:59:a1:dd:
         f3:f0:8f:f2:a9:62:f5:f7:67:a3:9d:3b:a4:23:57:f9:ea:23:
         91:fe:53:08:39:0b:15:cc:07:9a:3b:f9:27:b2:29:22:35:0c:
         47:ce:31:e0:22:17:94:10:7c:04:69:c0:a7:2d:4c:88:4f:36:
         94:47:68:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV6xQMMOU9nhuRGulrY/WX+M/LE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyNzU5NjRDRDlDNEY5OTk0QUM0REIzQjI3NTZDMTMw
QUFFMENEQTAeFw0yNTA2MTcyMjQwNDFaFw0yNTA2MTgyMzQzNDFaMDMxMTAvBgNV
BAMTKDlGODVGRkE3NzM4OTUwQkU1RTM4MjgyNDk4MEY0Q0M5ODE3Q0ZGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tDrTuh3KxWsJlG/sQxYYgUnj
GrjvQdUTUxjw1o0KXvq832e+NUHYrVckO2/ar1kIiB6TVO+lwhmnDMRxbrlIiG/U
rW/tDkAXUyj0wO8O7zw4phXiegE7I+8+Gc3FBkslEEUx76yxqneEKW+zggviRb0w
E8xKZ+VNu8iecPE31kUNPvTTqVeW5qiMPzpQAyjyNJpRzDip/MKdY7KkEVy4/j7r
d3kMLs29j/0Oqxifso0Tz0J3rHASAzi0DA8/VP02h6+cpBsneJbpLziI4IBYvtYm
h35rR45tlq+r+NyDMH9n5rAYCDpcdVH6PE+IVuQMdpjmFDhEvbf7a4yoo7ZdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn4X/p3OJUL5eOCgkmA9MyYF8/6MwHwYDVR0j
BBgwFoAUlSdZZM2cT5mUrE2zsnVsEwquDNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGdjR2hzaXg2OXdVNDFRdk1zQldLblpGOFlZb0VXWnFDV1VORWZSRW5N
ck0vMC85NTI3NTk2NENEOUM0Rjk5OTRBQzREQjNCMjc1NkMxMzBBQUUwQ0RBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1Mjc1OTY0Q0Q5QzRGOTk5
NEFDNERCM0IyNzU2QzEzMEFBRTBDREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGdjR2hzaXg2OXdVNDFRdk1zQldLblpGOFlZb0VXWnFDV1VORWZSRW5Nck0vMC85
NTI3NTk2NENEOUM0Rjk5OTRBQzREQjNCMjc1NkMxMzBBQUUwQ0RBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaW5LXASn4umYEom2azJPtcF8gosxvY2kT8RJcMWBtrtCwQpVX7QygvB46g+Q
Hu/lWz0+GYPxDmVDyowLr3iJa2HnuY700U0VqAp8iUhqhoib/Xxv6vuGdDxe+Qpd
rdJkHz7TcXKUeMJmYwCE72QhO47ag49MSHwizTHgN31aWeLX7jr5XzuBJJl7wJLF
amRrAf+7CjhXBtU/JDb915VKuOevGpK7558+bgxC4W6iKxF8kBI/Wo9GsfV9CZDb
euOkusSXWaHd8/CP8qli9fdno507pCNX+eojkf5TCDkLFcwHmjv5J7IpIjUMR84x
4CIXlBB8BGnApy1MiE82lEdoUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:31:14 2025 by rpki-client