Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/330C8FA46798AD996C4F9DE05366834BEA113F51.mft
File:                     330C8FA46798AD996C4F9DE05366834BEA113F51.mft (raw, json)
Hash identifier:          n0mgBNSdE5fVPTJJ/WDg95N8sYVIn3isS7tHLCGO0CM=
Subject key identifier:   D0:9C:5A:E5:C6:A9:ED:F6:94:E1:74:B1:4B:75:26:8B:EE:EA:7F:2E
Authority key identifier: 33:0C:8F:A4:67:98:AD:99:6C:4F:9D:E0:53:66:83:4B:EA:11:3F:51
Certificate issuer:       /CN=330C8FA46798AD996C4F9DE05366834BEA113F51
Certificate serial:       6696F79F9AFCFD9585C3980CCABDC612D0FE1A9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/330C8FA46798AD996C4F9DE05366834BEA113F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/330C8FA46798AD996C4F9DE05366834BEA113F51.mft
Manifest number:          1F
Signing time:             Mon 05 May 2025 03:48:37 +0000
Manifest this update:     Mon 05 May 2025 03:43:37 +0000
Manifest next update:     Tue 06 May 2025 06:26:37 +0000
Files and hashes:         1: 323830343a356235383a3a2f33322d3438203d3e20323638383336.roa (hash: qfm6GTsyRBkZH5CplsWMcuj9ezYMVyCYtvQFCZNiwrg=)
                          2: 34352e3137342e32382e302f32322d3234203d3e20323638383336.roa (hash: 4QksSGX2Zz7aCACIBb3UD8xzQb+SOlp0QPTkNRtmqHo=)
                          3: 330C8FA46798AD996C4F9DE05366834BEA113F51.crl (hash: z06uOHQf+92OSOeA/ql0m2CKEQWOFymHezO5YtavsGc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:f7:9f:9a:fc:fd:95:85:c3:98:0c:ca:bd:c6:12:d0:fe:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330C8FA46798AD996C4F9DE05366834BEA113F51
        Validity
            Not Before: May  5 03:43:37 2025 GMT
            Not After : May  6 06:26:37 2025 GMT
        Subject: CN=D09C5AE5C6A9EDF694E174B14B75268BEEEA7F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ca:72:28:88:4d:40:cf:89:a1:1a:43:3b:84:
                    c6:23:64:25:b6:61:db:78:a6:1e:53:0a:09:e1:d0:
                    f4:48:1d:bd:ef:24:5f:d3:57:87:79:f2:d7:c9:b6:
                    2f:22:f2:e4:e6:62:05:03:c6:57:c7:71:ef:30:f9:
                    f1:83:b3:87:d9:e5:a6:9c:a4:a1:5d:10:16:ed:6a:
                    57:ab:53:98:e5:d3:16:94:d6:6d:00:c5:b0:df:17:
                    1c:63:05:99:4c:d3:63:8c:aa:ad:d5:e6:1c:3b:6a:
                    5a:b2:b0:a7:d1:0f:37:0b:58:c3:4a:7f:77:c8:2c:
                    f1:a0:f1:7f:40:4d:38:57:f4:69:0d:ef:6b:df:bc:
                    b3:3c:bc:18:64:f4:07:44:c4:77:42:ab:b2:c0:5d:
                    ba:8d:64:28:3b:a2:f4:9b:d0:87:88:93:08:39:35:
                    e2:c3:71:bd:21:ac:6d:a1:f7:6b:d1:a4:ff:e8:02:
                    5f:f3:e5:7c:30:d0:e7:1b:6f:34:84:92:5e:56:08:
                    7d:b1:1d:36:34:6e:b7:8a:2c:14:a1:8f:9d:1c:ea:
                    40:00:f3:25:f6:a0:a3:5b:53:79:ee:31:7b:f0:85:
                    b1:d4:bc:b4:4d:53:4a:1e:82:2a:70:8e:1f:42:ec:
                    31:03:ef:5d:7d:82:18:73:d4:72:a3:bb:c5:f5:5e:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:5A:E5:C6:A9:ED:F6:94:E1:74:B1:4B:75:26:8B:EE:EA:7F:2E
            X509v3 Authority Key Identifier:
                keyid:33:0C:8F:A4:67:98:AD:99:6C:4F:9D:E0:53:66:83:4B:EA:11:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/330C8FA46798AD996C4F9DE05366834BEA113F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/330C8FA46798AD996C4F9DE05366834BEA113F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/330C8FA46798AD996C4F9DE05366834BEA113F51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:e2:36:3e:03:64:5c:79:fa:84:21:7e:37:6f:c7:17:1b:
         5f:3e:a5:f5:8e:17:07:dc:87:9e:47:c2:22:03:f3:7a:56:4d:
         c2:1b:8a:ca:4e:98:e1:7f:60:43:59:82:ac:38:85:d0:2b:1f:
         b9:a3:45:97:9f:70:5e:76:aa:7e:03:cf:d5:01:77:27:ec:00:
         77:43:6b:74:94:d5:e7:52:a9:c7:99:cd:2a:eb:e4:04:c0:d5:
         c3:ae:63:ae:06:ce:c7:c8:fe:98:17:b7:f5:90:34:04:6c:ea:
         c4:b5:2e:82:a1:a6:ae:37:0c:92:b1:b3:27:62:99:d6:49:fc:
         f5:91:96:c3:ff:77:bd:f5:84:0a:79:ea:d1:76:5b:2c:02:7c:
         cb:ba:3a:21:ac:12:a0:d3:c0:17:d4:e3:a0:eb:87:bd:f1:45:
         9c:ad:ec:ab:51:d0:c3:d5:26:09:8e:a7:cc:b9:94:2e:34:d6:
         a3:9c:b2:e6:c7:05:83:0b:79:5d:69:4f:92:87:ec:07:1d:d0:
         19:80:f0:89:34:71:d6:4f:61:0a:f7:90:41:fa:a3:01:ee:d8:
         3c:9e:50:e0:94:3e:1a:68:f8:e9:40:05:96:01:36:20:af:f8:
         aa:22:b2:31:6b:ca:66:e1:7b:2d:19:89:41:68:a5:de:29:d8:
         11:78:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:19:36 2025 by rpki-client