Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft
File:                     F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft (raw, json)
Hash identifier:          W7HQHgyy0a24CL1sKtrYAdm9ykmxViDmgJCdOjb0DcU=
Subject key identifier:   5F:8F:FB:09:44:4A:02:C3:7D:87:15:8D:4D:03:80:69:D4:0E:28:92
Authority key identifier: F5:68:00:82:B2:8C:E2:4D:CF:2F:F2:2A:D2:9F:12:F9:E3:80:37:CB
Certificate issuer:       /CN=F5680082B28CE24DCF2FF22AD29F12F9E38037CB
Certificate serial:       4987B81913EF6593275F7BD6385DFAA0EC401616
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft
Manifest number:          4A
Signing time:             Wed 18 Jun 2025 00:50:52 +0000
Manifest this update:     Wed 18 Jun 2025 00:45:52 +0000
Manifest next update:     Thu 19 Jun 2025 01:38:52 +0000
Files and hashes:         1: 34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa (hash: kgoZy1DXFveeBCXcN5CphepvLliJqovou/A6nUOmN1g=)
                          2: F5680082B28CE24DCF2FF22AD29F12F9E38037CB.crl (hash: 4hID4ybc6EnSC9CyObXgOuXBwh5TIB/ZQ/RYn6S9iI8=)
                          3: 323830343a343930633a3a2f33322d3438203d3e20323637313631.roa (hash: CyyJdeRIO59MBUMj45WI8IRHxtGOhEgKMhqFxMZp1MM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:87:b8:19:13:ef:65:93:27:5f:7b:d6:38:5d:fa:a0:ec:40:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5680082B28CE24DCF2FF22AD29F12F9E38037CB
        Validity
            Not Before: Jun 18 00:45:52 2025 GMT
            Not After : Jun 19 01:38:52 2025 GMT
        Subject: CN=5F8FFB09444A02C37D87158D4D038069D40E2892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:7d:1b:5d:a5:c3:ab:ec:81:04:bc:ce:01:
                    b0:93:cc:b5:38:0c:1f:d7:36:0b:a6:0c:1a:37:f1:
                    b2:d8:ee:e7:44:84:f4:79:cb:72:0c:8e:a8:58:75:
                    44:d5:3d:ac:57:8e:4e:aa:ac:03:2d:37:48:da:ba:
                    b4:88:56:a6:9a:2b:cd:2c:da:19:4a:28:57:db:f8:
                    5e:4c:41:08:0d:ef:7e:1e:9c:99:9f:e6:1b:89:34:
                    5f:29:4f:88:f7:1a:51:cf:cb:c9:1c:e3:3c:e7:ca:
                    7f:f8:d6:2e:c8:3e:a2:d0:18:45:d4:95:66:e9:fd:
                    de:87:45:56:e0:e2:b2:d2:38:2c:82:2b:92:03:b1:
                    33:9f:30:02:08:e9:03:68:dd:bb:8f:11:62:f3:e6:
                    04:df:0d:98:9b:de:7b:fb:ec:1a:3d:0f:ae:b9:3b:
                    29:18:c1:c0:de:ef:82:b5:9f:d4:92:51:d1:b1:4c:
                    28:10:34:b6:63:05:96:1d:a4:d5:e4:5a:4d:86:0f:
                    8c:53:0f:fd:52:21:c3:36:0a:0f:0d:d6:fa:f4:2f:
                    9b:0f:5d:57:01:6a:1b:0f:ba:1f:49:60:fa:b9:be:
                    c0:3d:0a:03:07:08:21:04:a0:1a:39:86:6f:73:37:
                    a4:ee:c1:57:9b:8c:9f:75:fc:67:f1:fd:f1:2f:ec:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:FB:09:44:4A:02:C3:7D:87:15:8D:4D:03:80:69:D4:0E:28:92
            X509v3 Authority Key Identifier:
                keyid:F5:68:00:82:B2:8C:E2:4D:CF:2F:F2:2A:D2:9F:12:F9:E3:80:37:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:c2:9c:14:a9:5c:25:4e:0a:99:20:44:ff:e9:13:0c:27:
         f0:00:36:ca:bf:04:13:44:7c:26:bb:f4:97:d9:8d:30:37:71:
         cc:61:44:b0:93:e7:d6:8e:28:39:46:1c:15:5a:70:5f:b9:eb:
         08:18:6b:1f:b6:21:dc:c7:9b:64:9a:f2:46:7d:26:01:71:fa:
         cc:dd:6f:3e:34:bd:f8:68:6a:a1:03:6e:c2:b3:a6:e4:28:73:
         9c:3f:b8:c8:2b:ec:a9:73:75:df:6d:f7:44:2d:ad:78:e3:a0:
         4c:e5:3d:e4:56:e4:4e:ed:f9:7e:fa:6c:bd:2e:da:64:08:d0:
         1f:dc:52:72:f6:80:cc:f2:eb:fe:f0:d3:8b:75:8d:06:4b:d9:
         a9:45:5c:89:23:fc:9a:ff:8b:3e:82:28:f7:1c:7c:86:81:07:
         5d:c9:23:f6:b7:2e:4e:ec:9c:11:17:02:c3:a9:2b:65:27:33:
         ea:e4:68:4d:75:bc:6e:22:c6:9c:c4:5f:ac:d5:e4:3a:62:aa:
         31:10:43:df:0c:7f:a5:b2:a9:27:20:96:e1:80:1b:b8:cf:a1:
         0a:f0:cf:a2:8a:37:e7:2c:25:ba:f6:3a:68:8d:cb:72:de:7f:
         53:af:45:fc:67:30:d8:3f:aa:94:15:c8:23:3f:7f:30:b7:a6:
         d0:b0:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:04:08 2025 by rpki-client