Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
File:                     DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft (raw, json)
Hash identifier:          ApWRoQ7e+iF6POEnIHZtQh9Vvn4iFsSwK+sZLJcK2qE=
Subject key identifier:   07:E1:D9:C2:24:AA:65:C5:A6:25:24:87:DF:C8:70:2C:A7:09:20:32
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       3FB95E5951D117221C590526435708B6FF17D4F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
Manifest number:          0288
Signing time:             Mon 04 Aug 2025 18:10:02 +0000
Manifest this update:     Mon 04 Aug 2025 18:05:02 +0000
Manifest next update:     Tue 05 Aug 2025 21:48:02 +0000
Files and hashes:         1: 323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (hash: JmbvOjVKbR/XYJut5SHfgiOn1lqjtci9jd0EVLJXXL0=)
                          2: 34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (hash: Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=)
                          3: 34352e3232372e3131322e302f32342d3234203d3e20323637303234.roa (hash: NbuMp6zwIPF0O7p39k96W67CEvlo0InSX/oh1MCa9MM=)
                          4: 323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (hash: GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=)
                          5: 323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (hash: L9M53YB4o7JNc7dDg3XjTGRgx6YePRqEVkPp8+b2wk4=)
                          6: 34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (hash: oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=)
                          7: 323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (hash: 0NBW+l9oQvgut+Wpp8Bb1HAjDdw9+mIwXXr8N5HctTA=)
                          8: 323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (hash: ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=)
                          9: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (hash: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=)
                          10: 323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (hash: DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=)
                          11: 323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (hash: 7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=)
                          12: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl (hash: c7ZsmdaX6FawSRDOR5X1pJR+O8TgHbVjV+w1cdct86E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b9:5e:59:51:d1:17:22:1c:59:05:26:43:57:08:b6:ff:17:d4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Aug  4 18:05:02 2025 GMT
            Not After : Aug  5 21:48:02 2025 GMT
        Subject: CN=07E1D9C224AA65C5A6252487DFC8702CA7092032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:ee:b2:ab:6c:5c:5a:ae:f9:0f:dd:e7:10:
                    9d:e7:35:fd:74:23:3e:67:45:48:73:7c:53:6e:a0:
                    b3:8a:0f:a4:3b:1b:3e:f7:17:39:d2:a9:e2:82:4f:
                    e2:ff:4f:bb:95:c4:e2:9d:c0:18:fe:53:8f:fd:29:
                    c3:27:2c:65:2f:d7:07:b7:1a:58:4a:51:5d:0f:df:
                    a4:ff:c5:e3:61:1e:b1:1d:bb:72:ec:98:49:76:e5:
                    12:db:7b:11:e6:49:ec:03:0e:17:b3:a9:8f:d0:8a:
                    98:58:bd:cc:9a:57:d6:6e:d2:17:48:4f:2c:02:2d:
                    c6:13:9e:94:52:8f:f2:fb:70:45:08:8a:00:80:f7:
                    54:d7:02:4b:86:b1:cc:1f:f9:63:12:d6:5c:52:ae:
                    a1:69:2e:82:1d:f9:58:08:4b:ed:ee:b7:7f:28:60:
                    75:27:77:1f:00:fe:4a:f0:24:fc:22:12:d7:b6:46:
                    d6:7a:2b:28:ab:18:84:36:aa:1b:b1:b3:6d:ca:f5:
                    68:fb:5f:6f:8c:15:be:e1:53:a2:1f:9c:58:d1:f5:
                    68:14:e2:86:f8:00:1f:9b:0c:17:c9:15:64:c6:1e:
                    a2:a3:01:59:bb:37:d0:33:36:34:9e:83:7b:35:b1:
                    28:7d:1b:ac:12:6f:6f:0c:2f:c1:a9:c7:4b:6c:54:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E1:D9:C2:24:AA:65:C5:A6:25:24:87:DF:C8:70:2C:A7:09:20:32
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:05:33:86:32:ed:80:5d:b7:89:9d:5a:b7:16:04:ef:4e:
         2b:43:d7:72:af:bb:25:9f:6a:94:b9:dc:59:fc:69:93:04:df:
         48:58:23:18:5f:4f:1f:35:ae:a3:18:7e:b8:79:45:81:c5:cd:
         e1:95:94:05:6e:01:77:fb:62:db:e8:6a:f9:d2:9a:d9:9c:fb:
         c0:c6:c8:67:26:32:6a:01:f9:c4:32:dd:98:48:4f:63:07:78:
         8e:82:90:b3:9d:38:57:b8:10:e1:f7:3b:48:36:d0:7c:17:73:
         4e:35:33:70:ee:2c:47:32:2d:ef:be:00:92:61:e9:ba:d8:25:
         d7:e7:e8:7d:d4:0b:d9:25:e7:1d:52:da:13:55:8f:56:95:5b:
         ed:96:9a:52:af:52:50:26:e6:bb:8d:eb:94:53:9e:cf:40:7a:
         99:c3:5a:f6:f6:bd:f0:d9:30:a7:89:5b:fc:ef:4f:0c:21:9f:
         6d:6f:ea:9a:98:6b:15:2d:7b:2c:49:03:ba:e7:e6:a6:13:04:
         78:cb:e9:3c:50:67:a1:20:df:4c:f2:00:72:86:44:5a:86:fa:
         42:d3:d3:5e:5e:e6:ea:93:cb:5c:e3:14:a5:64:3f:88:62:3a:
         a1:29:ff:b2:72:af:6e:d2:66:87:d6:d4:92:b4:34:35:1e:ff:
         77:71:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:04 2025 by rpki-client