Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft
File:                     7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft (raw, json)
Hash identifier:          lMRLpGeL5kolNLNnrY5lmjMrIN7/Rw8a9+17PRKn0Yw=
Subject key identifier:   E8:77:9C:9C:56:17:6F:32:1E:2C:32:A4:B8:48:2A:BC:7C:50:0B:2C
Authority key identifier: 7F:97:F3:9A:AB:31:41:A6:4A:DA:E0:C3:85:3F:B9:19:DA:5A:C6:00
Certificate issuer:       /CN=7F97F39AAB3141A64ADAE0C3853FB919DA5AC600
Certificate serial:       3E80DB6AB08E6C061A8A2FCC39C462F8EC9A83F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft
Manifest number:          0171
Signing time:             Tue 14 Apr 2026 00:21:14 +0000
Manifest this update:     Tue 14 Apr 2026 00:16:14 +0000
Manifest next update:     Wed 15 Apr 2026 01:58:14 +0000
Files and hashes:         1: 323830343a316163303a3a2f33322d3438203d3e203631383833.roa (hash: W6I1V4320MGRumXSRGJ7GmBOAiRLcsTafH/rYE6CRx8=)
                          2: 7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.crl (hash: XT+OSxW8KwJowz38GpU91CCjEU4K/WBHM+HcU8fw85Y=)
                          3: 3133312e302e3130302e302f32322d3234203d3e203631383833.roa (hash: FngtNL/Io5YlHXAhNZyz7aoSCMw2DC/5GlW5NN02/Ks=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:80:db:6a:b0:8e:6c:06:1a:8a:2f:cc:39:c4:62:f8:ec:9a:83:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F97F39AAB3141A64ADAE0C3853FB919DA5AC600
        Validity
            Not Before: Apr 14 00:16:14 2026 GMT
            Not After : Apr 15 01:58:14 2026 GMT
        Subject: CN=E8779C9C56176F321E2C32A4B8482ABC7C500B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:4f:29:e9:dd:df:6d:6c:bc:db:0e:2c:33:
                    78:2a:ff:08:cc:90:67:f5:1a:b5:f3:69:07:d9:e5:
                    18:25:46:21:fa:55:0d:00:ab:ee:67:02:b4:e5:5a:
                    19:e4:79:3e:78:23:13:19:db:88:25:c0:1f:26:3a:
                    3f:29:b1:90:84:df:cd:07:36:73:6b:3a:98:a7:d4:
                    71:12:fe:a3:22:3f:33:ad:f7:5c:1f:b5:97:b8:f4:
                    74:bf:2a:ae:28:14:5b:85:de:af:6e:dd:bd:14:00:
                    f7:89:83:18:56:9a:a9:06:89:71:2f:71:d4:28:f1:
                    58:81:cc:ba:eb:03:55:94:71:87:f1:9e:ec:d6:5a:
                    d2:b8:c8:90:b4:99:2d:75:f1:4d:27:bd:03:54:e5:
                    e9:0e:68:af:8c:f9:81:b7:4d:ac:f3:a8:32:28:6c:
                    b5:1a:48:07:e5:e7:4f:7e:de:0f:e7:ec:ad:40:23:
                    e6:37:90:16:de:bb:91:9b:f2:ef:3f:6d:aa:30:a1:
                    c2:08:b7:cf:4a:41:6b:a8:b0:1b:dd:c9:e6:bf:21:
                    d9:21:3f:e5:c4:da:c9:e1:22:4f:8f:4d:01:41:68:
                    82:e8:f0:da:64:10:72:20:f5:0e:71:76:fd:d0:14:
                    1c:89:93:e7:d1:5e:d4:c4:2d:7f:a1:05:56:6a:96:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:77:9C:9C:56:17:6F:32:1E:2C:32:A4:B8:48:2A:BC:7C:50:0B:2C
            X509v3 Authority Key Identifier:
                keyid:7F:97:F3:9A:AB:31:41:A6:4A:DA:E0:C3:85:3F:B9:19:DA:5A:C6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zBU7vViPnHZtxTQp1HShMmQEpzTCby5vWo3jGeht91T/0/7F97F39AAB3141A64ADAE0C3853FB919DA5AC600.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:3e:5d:1b:71:da:ed:55:2c:37:98:97:7e:98:82:37:22:
         71:d2:47:5d:0e:61:fb:3b:b9:32:03:d3:09:b4:4d:9b:1c:36:
         4a:7d:77:bb:55:db:ac:1e:09:6d:a4:c1:82:ba:f8:b9:03:ad:
         27:86:81:00:00:c1:07:98:80:e3:95:bf:18:01:b4:a9:b8:cc:
         94:67:1c:ff:5d:a3:48:43:51:71:ac:f1:b9:14:d6:38:8a:86:
         d1:24:b4:7d:56:6b:a2:dd:2c:f5:d7:13:0f:a9:1d:1a:a8:83:
         9d:1b:74:75:fb:58:c6:37:e4:74:39:b2:14:d7:fd:3a:73:22:
         f8:a8:44:0e:13:64:fd:3e:4c:3b:ff:65:c2:97:7c:57:69:a0:
         68:f2:67:fe:cb:e0:bf:95:ad:96:e3:a9:70:f1:b7:f6:a3:68:
         c6:69:16:9f:bc:3f:70:44:8c:d6:d6:65:a6:69:da:d6:10:2b:
         f9:3c:5c:31:76:46:ce:4c:ac:28:1f:16:7e:21:fd:bb:7e:22:
         d2:56:98:57:61:d6:86:ba:c5:ab:24:e1:f6:0b:41:da:e6:47:
         96:6d:7b:5a:2e:bd:f1:f5:74:02:f4:e3:af:e4:61:ec:5e:c7:
         9c:e3:02:18:9f:98:96:35:93:5c:43:2b:9a:94:71:89:b8:01:
         b3:15:37:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPoDbarCObAYaii/MOcRi+Oyag/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y5N0YzOUFBQjMxNDFBNjRBREFFMEMzODUzRkI5MTlE
QTVBQzYwMDAeFw0yNjA0MTQwMDE2MTRaFw0yNjA0MTUwMTU4MTRaMDMxMTAvBgNV
BAMTKEU4Nzc5QzlDNTYxNzZGMzIxRTJDMzJBNEI4NDgyQUJDN0M1MDBCMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p08p6d3fbWy82w4sM3gq/wjM
kGf1GrXzaQfZ5RglRiH6VQ0Aq+5nArTlWhnkeT54IxMZ24glwB8mOj8psZCE380H
NnNrOpin1HES/qMiPzOt91wftZe49HS/Kq4oFFuF3q9u3b0UAPeJgxhWmqkGiXEv
cdQo8ViBzLrrA1WUcYfxnuzWWtK4yJC0mS118U0nvQNU5ekOaK+M+YG3TazzqDIo
bLUaSAfl509+3g/n7K1AI+Y3kBbeu5Gb8u8/baowocIIt89KQWuosBvdyea/Idkh
P+XE2snhIk+PTQFBaILo8NpkEHIg9Q5xdv3QFByJk+fRXtTELX+hBVZqlrvpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6HecnFYXbzIeLDKkuEgqvHxQCywwHwYDVR0j
BBgwFoAUf5fzmqsxQaZK2uDDhT+5GdpaxgAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHpCVTd2VmlQbkhadHhUUXAxSFNoTW1RRXB6VENieTV2V28zakdlaHQ5
MVQvMC83Rjk3RjM5QUFCMzE0MUE2NEFEQUUwQzM4NTNGQjkxOURBNUFDNjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGOTdGMzlBQUIzMTQxQTY0
QURBRTBDMzg1M0ZCOTE5REE1QUM2MDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHpCVTd2VmlQbkhadHhUUXAxSFNoTW1RRXB6VENieTV2V28zakdlaHQ5MVQvMC83
Rjk3RjM5QUFCMzE0MUE2NEFEQUUwQzM4NTNGQjkxOURBNUFDNjAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc5g+XRtx2u1VLDeYl36YgjcicdJHXQ5h+zu5MgPTCbRNmxw2Sn13u1XbrB4J
baTBgrr4uQOtJ4aBAADBB5iA45W/GAG0qbjMlGcc/12jSENRcazxuRTWOIqG0SS0
fVZrot0s9dcTD6kdGqiDnRt0dftYxjfkdDmyFNf9OnMi+KhEDhNk/T5MO/9lwpd8
V2mgaPJn/svgv5WtluOpcPG39qNoxmkWn7w/cESM1tZlpmna1hAr+TxcMXZGzkys
KB8WfiH9u34i0laYV2HWhrrFqyTh9gtB2uZHlm17Wi698fV0AvTjr+Rh7F7HnOMC
GJ+YljWTXEMrmpRxibgBsxU3vA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:40 2026 by rpki-client