Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
File:                     2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft (raw, json)
Hash identifier:          b3UHa2db/p4lh8YTtdq5QEEA3PXrBLL0XdxtvTdQp5I=
Subject key identifier:   10:F7:6D:B8:FC:33:5C:DD:E9:67:0F:67:1B:87:D7:24:7C:56:B6:98
Authority key identifier: 2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD
Certificate issuer:       /CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
Certificate serial:       143785C565D5BE778B53CEAAE590D25E4D19F2A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft
Manifest number:          94
Signing time:             Sun 01 Mar 2026 15:55:16 +0000
Manifest this update:     Sun 01 Mar 2026 15:50:16 +0000
Manifest next update:     Mon 02 Mar 2026 16:55:16 +0000
Files and hashes:         1: 3136382e302e382e302f32322d3332203d3e20323635323137.roa (hash: QzUknYbsE//CO8M51w5TSfwgghjqJGCFxGP1tkznYPM=)
                          2: 2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl (hash: MLLtGtsf5bt26jsC6vhwGVkDW4RiyWy/W/BKu1xA5VE=)
                          3: 323830343a326336633a3a2f33322d313238203d3e20323635323137.roa (hash: mPmFCm8ilMdueYRD2BbIq8/i/Laj/o3PO3ZZSQdqSls=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:85:c5:65:d5:be:77:8b:53:ce:aa:e5:90:d2:5e:4d:19:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BDEDB462587B54D8EAD035C81DB7FC030F30BBD
        Validity
            Not Before: Mar  1 15:50:16 2026 GMT
            Not After : Mar  2 16:55:16 2026 GMT
        Subject: CN=10F76DB8FC335CDDE9670F671B87D7247C56B698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:a9:51:23:4c:49:dc:be:3e:07:f9:ac:5f:
                    47:92:b0:b1:99:41:bb:34:e1:ad:fa:ed:d5:d2:b0:
                    2c:59:5e:f1:f1:a5:25:be:da:5a:d9:4f:e7:29:29:
                    7f:c4:4b:93:60:93:1d:d3:83:4d:ab:02:0c:63:9c:
                    6a:e1:37:85:7c:c0:ff:26:f2:83:5e:4c:22:a5:29:
                    20:69:66:8e:5f:0b:69:5b:f7:8d:b7:d2:fc:e2:e3:
                    5a:f8:be:c6:ef:38:c1:4f:9d:80:4f:a4:d2:6c:09:
                    2a:5e:c2:2b:44:20:38:57:70:41:b5:56:5e:f4:25:
                    fc:2a:83:8e:e7:d5:b1:d4:c5:ac:e9:a6:27:61:73:
                    26:ff:3f:ac:66:9e:9e:5b:8f:50:32:24:e4:df:90:
                    d1:f8:7d:d5:3c:52:43:a8:8e:36:85:76:c4:c4:3d:
                    ef:32:dd:66:ba:b5:38:c6:51:80:63:2a:30:5a:65:
                    20:6f:d6:4c:69:ec:16:02:64:b6:48:18:6a:83:ea:
                    e5:1e:05:f0:04:c8:eb:31:1b:8c:3e:2a:e0:50:61:
                    38:2c:b8:55:aa:0f:9a:27:25:8c:a7:db:dc:55:88:
                    ca:9e:fb:a3:cb:2a:50:49:37:d1:71:07:e2:3e:fe:
                    18:59:50:d9:ee:11:58:a3:e2:90:ec:0d:f5:4d:61:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:6D:B8:FC:33:5C:DD:E9:67:0F:67:1B:87:D7:24:7C:56:B6:98
            X509v3 Authority Key Identifier:
                keyid:2B:DE:DB:46:25:87:B5:4D:8E:AD:03:5C:81:DB:7F:C0:30:F3:0B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ukPz17uVrbMHvjCf4oR5uy539GUWRN8CaGRd7zetzoS/0/2BDEDB462587B54D8EAD035C81DB7FC030F30BBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:84:09:33:b0:1c:02:a2:f3:6f:7f:6a:2a:46:3a:e2:0c:
         48:07:77:64:33:af:b6:b9:e9:32:e5:50:23:84:7d:80:73:aa:
         75:e6:b0:39:70:db:b9:48:8e:76:94:48:7a:35:78:80:c6:3b:
         23:f7:2c:0b:fc:08:f5:8e:6d:14:2c:80:0e:cf:c3:ce:2c:ee:
         49:4e:ed:f5:2d:c9:ae:49:5c:c0:dd:3d:16:01:f8:1c:06:52:
         e0:c4:a2:b3:93:65:32:82:54:a5:3f:80:e8:8e:a6:87:f0:9c:
         83:18:42:37:c3:c9:be:2b:7b:eb:2d:ff:e0:4b:28:c7:59:5b:
         6b:64:a1:4c:72:09:5a:4a:86:67:d3:c8:5c:b7:95:77:f4:ff:
         5f:93:62:5e:04:98:e9:68:61:33:ff:de:cb:1b:b8:b4:1c:1f:
         c2:b1:f1:fa:6c:e9:5c:d1:c9:fd:7c:15:9b:0f:7d:03:0b:41:
         97:0d:b9:f7:84:a0:18:74:ad:d1:9f:c8:05:dd:99:2d:81:6d:
         08:d4:2a:08:04:7a:c3:a4:d6:26:35:7e:d3:0f:4f:0e:04:00:
         32:69:7a:f8:97:46:24:09:18:99:d0:b0:40:ee:0d:25:fa:5f:
         ca:76:54:ba:48:c6:00:dc:1d:6b:2a:ef:39:19:45:c0:81:b1:
         4f:97:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:34 2026 by rpki-client