Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
File:                     8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft (raw, json)
Hash identifier:          M3zFme20TMKz67z41+WJvMaSj8oJVZd2ACPd0beDwdU=
Subject key identifier:   FC:C9:91:02:04:A3:B6:90:A3:22:35:DB:9E:94:82:85:E1:39:FC:5E
Authority key identifier: 86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2
Certificate issuer:       /CN=8663247D8136C6B4962E7AFD2A8510373EEEE3B2
Certificate serial:       060E3A5CE6AD7997DD5351636ACD63DE9F10CCDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
Manifest number:          0231
Signing time:             Tue 17 Jun 2025 09:00:00 +0000
Manifest this update:     Tue 17 Jun 2025 08:55:00 +0000
Manifest next update:     Wed 18 Jun 2025 10:30:00 +0000
Files and hashes:         1: 34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa (hash: gPEfsiJimqRTxhfCw1hLm0L4pT8piL/8yluw8MGL7jk=)
                          2: 8663247D8136C6B4962E7AFD2A8510373EEEE3B2.crl (hash: m7bVr8Y5DBVV0uSBFuoRDyQybSOaODinjQYDCeqi83Q=)
                          3: 323830343a353235383a3a2f33322d3334203d3e20323638353132.roa (hash: 1iJfOVlknsPwveOpJPAtNAXhgC9lW1R/RkCaYaGYdqw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:3a:5c:e6:ad:79:97:dd:53:51:63:6a:cd:63:de:9f:10:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8663247D8136C6B4962E7AFD2A8510373EEEE3B2
        Validity
            Not Before: Jun 17 08:55:00 2025 GMT
            Not After : Jun 18 10:30:00 2025 GMT
        Subject: CN=FCC9910204A3B690A32235DB9E948285E139FC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:de:07:93:4f:af:8a:17:a9:08:96:12:68:
                    3e:85:88:02:74:f1:f2:36:63:84:f1:e9:9b:41:54:
                    cb:27:52:cc:c7:6a:07:e8:c9:c3:e9:67:02:0a:6b:
                    54:2c:37:a6:c2:53:1c:e5:99:fc:34:4e:37:8e:e7:
                    34:f8:a1:ac:1a:e9:40:8c:13:28:0e:a0:c1:ae:97:
                    86:9c:d8:0a:d4:22:10:44:af:80:5e:b6:43:a2:10:
                    69:71:b6:b5:1f:74:35:91:83:a1:b4:61:dd:d0:aa:
                    a0:b9:d2:34:5b:34:61:52:74:7f:aa:34:32:94:26:
                    ef:ca:7c:d5:60:5e:33:86:43:f0:02:56:52:d6:24:
                    4b:3c:08:00:3a:16:b3:5b:9d:f2:af:09:62:32:2d:
                    eb:2b:fa:cc:fb:d9:f5:5a:b2:74:68:ef:f7:02:86:
                    4e:b4:54:eb:5e:fd:e8:2c:97:97:a6:a8:b5:fc:6d:
                    b5:d7:a6:64:cc:38:74:78:04:11:3c:a4:ab:a3:78:
                    72:eb:5c:ac:54:0b:ba:fe:e9:ce:b4:e5:95:6b:18:
                    5a:7c:63:11:90:af:51:ff:30:0f:21:45:69:65:df:
                    ae:94:e9:c0:a4:dd:da:37:7c:61:ae:d3:11:7b:0d:
                    05:b7:48:7c:bb:0a:3a:ab:98:17:c1:a1:af:9a:32:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C9:91:02:04:A3:B6:90:A3:22:35:DB:9E:94:82:85:E1:39:FC:5E
            X509v3 Authority Key Identifier:
                keyid:86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:92:14:e3:ad:5f:3f:6a:ba:6f:b0:ba:4b:97:1e:b2:f5:
         fc:d2:f8:a6:35:49:24:93:7e:2c:66:ca:af:25:48:9d:00:b0:
         64:38:16:b9:a8:77:b9:5e:c7:fe:ce:b5:a8:80:30:df:4b:8b:
         bf:59:63:c9:01:fd:cb:87:b6:96:87:37:a6:f8:d8:01:08:16:
         57:9b:39:1d:73:0d:56:84:10:28:77:94:65:36:34:85:8b:4b:
         cb:41:ac:3b:81:0c:e9:49:ba:29:00:ee:b7:6f:cf:ac:97:5f:
         3f:16:1b:6a:86:6f:5a:ae:eb:ab:1d:83:5b:bd:84:c2:a8:58:
         36:67:f7:65:c6:b5:45:ec:d3:62:64:00:c8:0a:9c:95:49:7a:
         37:99:bc:76:04:10:cd:ba:61:9d:e3:e4:ef:1a:50:fe:c9:44:
         55:19:16:4e:84:f9:e8:eb:56:e8:f4:54:2b:b8:e5:b6:7e:8f:
         d1:62:0f:7a:54:59:42:89:96:90:48:01:c1:dd:f5:dd:dd:98:
         97:56:b1:6c:f6:12:dd:ca:b7:7e:a4:a7:8e:cf:06:fc:45:1f:
         0e:83:b3:76:3f:ed:99:d3:49:f2:85:d2:57:f1:27:3c:af:e0:
         8d:7d:e6:09:fc:87:4d:ac:65:84:03:f3:f9:cd:ac:4e:4c:80:
         31:cc:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:47:50 2025 by rpki-client