Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File:                     5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier:          XtYCJWQd5vtLbiSlacyjSvjiYXYxrur4ScMKNnzwSZE=
Subject key identifier:   B0:3F:B9:AB:71:F8:C5:76:50:06:37:77:32:E7:2A:3B:23:AA:42:CD
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer:       /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial:       6FB88C1CAEB674B409E1918FF7B7ABDF18769CE4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number:          0393
Signing time:             Fri 12 Jun 2026 22:57:47 +0000
Manifest this update:     Fri 12 Jun 2026 22:52:47 +0000
Manifest next update:     Sun 14 Jun 2026 00:09:47 +0000
Files and hashes:         1: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: shcVophYnQNt0DJaAC6ovRcuvVk9Jr10AYbR/2eamPk=)
                          2: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: mqNqqmq59PG1ngENDtBPLxxBLIXkdkydi6VBE9MoqL8=)
                          3: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: JwxJxLXHnuXylWtYGwsja7XRkU3CyAGigBVFhVAwhCM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b8:8c:1c:ae:b6:74:b4:09:e1:91:8f:f7:b7:ab:df:18:76:9c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
        Validity
            Not Before: Jun 12 22:52:47 2026 GMT
            Not After : Jun 14 00:09:47 2026 GMT
        Subject: CN=B03FB9AB71F8C5765006377732E72A3B23AA42CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:82:e3:55:49:71:c4:08:58:0b:37:04:86:
                    47:34:e9:59:02:e0:95:b6:5c:95:8e:f6:5b:4e:67:
                    a2:3c:2c:de:de:bb:50:57:8d:78:ee:0b:96:dc:a1:
                    09:10:0c:48:99:33:ba:fa:f5:ca:91:a4:6e:5d:f7:
                    66:8f:e5:91:b1:b3:94:7b:2b:59:23:c8:6b:e6:1d:
                    60:2e:d5:a1:f6:54:4b:ad:8c:82:93:7e:ef:73:ad:
                    ee:c2:d7:d2:c9:a5:d3:ab:06:e7:e5:3a:99:81:76:
                    b2:c1:14:98:fd:7c:4d:01:18:74:8b:c7:ec:49:71:
                    53:41:12:99:7a:00:99:60:56:35:24:60:5e:3a:f7:
                    f2:a0:11:63:b8:43:0b:01:b6:f5:7c:25:16:ed:6b:
                    91:06:13:d9:04:ff:42:24:63:b1:7c:bf:8a:df:ac:
                    07:66:5f:c9:a1:72:e4:8a:f5:fe:0e:40:1f:ff:29:
                    9d:aa:8f:da:9b:94:a4:e2:c2:70:f4:7b:7e:a8:29:
                    51:bf:6a:b9:c6:35:2a:4b:7c:0d:fd:fc:8d:2c:f5:
                    9d:d5:a9:06:b8:17:73:db:a4:84:84:27:32:e9:b4:
                    53:98:05:8b:f5:9e:5e:b2:dc:59:f7:0b:0a:c0:e1:
                    3c:98:1f:22:17:f5:94:b5:1f:10:c8:1d:8d:5f:29:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3F:B9:AB:71:F8:C5:76:50:06:37:77:32:E7:2A:3B:23:AA:42:CD
            X509v3 Authority Key Identifier:
                keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:b1:09:60:1b:31:6a:4e:e8:32:46:52:81:3a:17:32:27:
         6b:55:e0:f0:47:4c:99:ea:43:6d:5c:d1:b6:e2:f5:c1:9b:f3:
         48:5f:aa:5b:64:e2:1e:9d:41:0d:af:66:d2:f6:8a:9a:d8:f7:
         46:62:d0:f2:1b:0c:96:14:84:7c:ce:57:7c:fa:b7:b7:51:2f:
         bf:fc:cd:38:b7:4c:79:dc:6a:8e:a9:bf:68:bf:39:00:38:2b:
         62:2f:58:2a:18:09:6f:58:3f:12:e9:f7:01:8f:26:93:bf:97:
         cb:c9:a5:b5:a9:2b:0e:f5:ae:f9:45:62:e3:07:16:30:a1:70:
         37:fa:0e:86:68:d1:00:21:60:b4:0b:62:d0:6e:63:f0:df:6f:
         a7:18:dd:0d:ea:74:05:18:75:82:d6:13:df:c6:34:0e:db:ea:
         bb:e0:37:b6:70:71:cc:96:a6:76:b3:0d:6b:66:ce:cc:02:61:
         15:68:60:de:7d:81:31:e4:ff:60:11:20:61:8c:b5:74:33:70:
         1a:ce:f7:2d:9d:3d:72:3b:49:01:b4:66:02:f8:fc:9e:4b:a6:
         43:43:50:f8:8d:42:c3:27:3d:33:7e:01:49:51:2f:8c:63:6e:
         6a:5a:57:40:12:90:a8:86:63:3c:f2:75:7d:d0:5e:43:c1:5c:
         c1:c2:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:21:26 2026 by rpki-client