Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
File:                     99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft (raw, json)
Hash identifier:          cb2W5hEtu3deS+Lrbt0j1B+zDpt2f4ZHzrLqSZbTPfI=
Subject key identifier:   80:B9:20:02:E5:1B:DB:DB:8F:CF:51:B2:AC:60:F0:AF:69:37:A9:36
Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A
Certificate issuer:       /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
Certificate serial:       52F31A1B4D6247F411E677C0E0D3EEE8674DCE89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
Manifest number:          018F
Signing time:             Fri 27 Feb 2026 08:39:13 +0000
Manifest this update:     Fri 27 Feb 2026 08:34:13 +0000
Manifest next update:     Sat 28 Feb 2026 11:34:13 +0000
Files and hashes:         1: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl (hash: hb5jkM1cCFJ7PiiVx9NAla3GRliBGWdVyVN6K2t0voY=)
                          2: 34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (hash: Vrt0CzEyM2PFJe+InYR1IwnM+I67HCAmxDrqTTmERvo=)
                          3: 323830343a356366383a3a2f33322d313238203d3e20323638393433.roa (hash: GcYsJrCgHMe99NpgpZuWCzNu1TQaO1J+BqBAsKQkiDU=)
                          4: 34352e3137372e342e302f32332d3332203d3e20323638393433.roa (hash: 0+kYLD8yHBn8SEvHZmP6Lna69QmTu4oRBPJPDeUnb5c=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f3:1a:1b:4d:62:47:f4:11:e6:77:c0:e0:d3:ee:e8:67:4d:ce:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
        Validity
            Not Before: Feb 27 08:34:13 2026 GMT
            Not After : Feb 28 11:34:13 2026 GMT
        Subject: CN=80B92002E51BDBDB8FCF51B2AC60F0AF6937A936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:0d:3b:13:4f:12:19:f2:3d:4a:ba:16:98:
                    7b:2c:e2:c1:01:1a:da:d3:b4:0d:89:27:e5:58:b4:
                    4c:66:22:4a:06:fa:d2:f6:d5:97:61:ab:00:07:06:
                    0e:94:ce:7f:9c:6d:69:37:f4:49:98:12:63:b5:75:
                    41:36:1e:bf:f8:31:23:de:12:52:36:4b:91:95:fc:
                    e7:bd:57:11:5d:1b:a0:18:7b:05:9c:09:f5:f5:08:
                    b8:59:27:df:5f:d3:43:6a:36:3d:19:6f:60:02:65:
                    fc:2f:49:1b:6f:71:97:7f:70:43:bf:bf:95:96:31:
                    a6:02:50:7a:dd:48:f8:f5:17:fa:ef:97:1a:e3:a2:
                    d8:a9:53:6b:52:9a:5b:35:78:1a:01:df:30:3e:fd:
                    bf:49:0c:78:76:e6:29:0c:4f:44:bd:7e:ba:fb:aa:
                    9e:f6:3f:50:bf:45:a8:20:15:11:23:b0:2d:71:20:
                    3f:d9:04:ab:03:aa:64:70:75:65:39:5a:51:37:13:
                    28:67:ee:61:f8:eb:4e:8e:51:4c:74:8c:23:0b:4c:
                    87:c3:c5:96:e8:70:a0:3e:92:61:b9:06:0f:53:f8:
                    77:b0:bc:c4:b7:c8:21:2e:ca:4f:bc:76:15:3e:cf:
                    01:aa:3d:5c:75:cc:34:ea:37:a3:65:50:ae:0a:bd:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:20:02:E5:1B:DB:DB:8F:CF:51:B2:AC:60:F0:AF:69:37:A9:36
            X509v3 Authority Key Identifier:
                keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:a8:ee:4e:d1:45:b2:e2:51:97:7b:27:c1:13:f9:3c:04:
         bb:f2:48:c1:e1:38:fe:e6:43:69:3e:57:8a:a8:ee:90:8c:1d:
         b9:49:41:8c:35:87:e0:4d:cf:41:ab:4e:62:79:bc:9f:16:ec:
         e3:e1:bd:ab:77:75:5a:a0:df:3c:db:53:28:07:fb:60:e8:c5:
         f5:03:52:30:85:e5:f6:f5:af:43:f7:d3:80:b1:e7:6e:27:eb:
         0f:d0:79:f7:5d:3a:5d:65:d8:91:61:51:0f:57:d6:5a:e1:3b:
         2c:eb:72:09:20:04:51:5c:10:68:e9:43:01:f1:23:5c:e5:1c:
         7b:ca:47:e0:71:e5:53:fe:01:9c:77:c0:12:3c:29:cc:aa:b3:
         cc:f2:b3:c6:e2:d3:dc:b5:5a:3b:37:93:80:28:d8:3c:ee:a7:
         18:37:0f:84:0f:39:0d:31:c0:37:5e:57:db:98:5f:85:75:bc:
         62:21:c2:a0:e3:92:90:59:f3:f8:07:21:d3:e4:3c:fc:70:93:
         6f:f4:9f:7c:8e:9d:12:03:13:01:d3:6b:40:48:52:70:10:fc:
         6a:e8:ec:6b:83:0d:46:93:aa:d5:ec:2d:4a:d7:c1:87:a9:1e:
         07:03:cf:62:4b:51:4a:f1:2a:cd:e3:91:87:ef:3d:6d:96:da:
         28:79:e2:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUvMaG01iR/QR5nfA4NPu6GdNzokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDQkU2MTJDRjk4N0JDMTlCMkVCRkE3NzVDMzdBQTg4
NzA0QTAyQTAeFw0yNjAyMjcwODM0MTNaFw0yNjAyMjgxMTM0MTNaMDMxMTAvBgNV
BAMTKDgwQjkyMDAyRTUxQkRCREI4RkNGNTFCMkFDNjBGMEFGNjkzN0E5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgw07E08SGfI9SroWmHss4sEB
GtrTtA2JJ+VYtExmIkoG+tL21ZdhqwAHBg6Uzn+cbWk39EmYEmO1dUE2Hr/4MSPe
ElI2S5GV/Oe9VxFdG6AYewWcCfX1CLhZJ99f00NqNj0Zb2ACZfwvSRtvcZd/cEO/
v5WWMaYCUHrdSPj1F/rvlxrjotipU2tSmls1eBoB3zA+/b9JDHh25ikMT0S9frr7
qp72P1C/RaggFREjsC1xID/ZBKsDqmRwdWU5WlE3Eyhn7mH4606OUUx0jCMLTIfD
xZbocKA+kmG5Bg9T+HewvMS3yCEuyk+8dhU+zwGqPVx1zDTqN6NlUK4KvdBnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgLkgAuUb29uPz1GyrGDwr2k3qTYwHwYDVR0j
BBgwFoAUmcvmEs+Ye8GbLr+ndcN6qIcEoCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz
QzQvMC85OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5Q0JFNjEyQ0Y5ODdCQzE5
QjJFQkZBNzc1QzM3QUE4ODcwNEEwMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZzQzQvMC85
OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB56o7k7RRbLiUZd7J8ET+TwEu/JIweE4/uZDaT5XiqjukIwduUlBjDWH4E3P
QatOYnm8nxbs4+G9q3d1WqDfPNtTKAf7YOjF9QNSMIXl9vWvQ/fTgLHnbifrD9B5
9106XWXYkWFRD1fWWuE7LOtyCSAEUVwQaOlDAfEjXOUce8pH4HHlU/4BnHfAEjwp
zKqzzPKzxuLT3LVaOzeTgCjYPO6nGDcPhA85DTHAN15X25hfhXW8YiHCoOOSkFnz
+Ach0+Q8/HCTb/SffI6dEgMTAdNrQEhScBD8aujsa4MNRpOq1ewtStfBh6keBwPP
YktRSvEqzeORh+89bZbaKHniHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:19 2026 by rpki-client