Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
File:                     835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft (raw, json)
Hash identifier:          six97+6cDvKDxDy3JI0jYmDGyAu/Y167u2UsMXSGO8Y=
Subject key identifier:   21:6A:41:FE:23:EA:3E:F8:5D:B9:88:55:38:37:34:CF:73:BE:82:F0
Authority key identifier: 83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11
Certificate issuer:       /CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
Certificate serial:       71DFBFF17E447E8DB7E2908D35FD971E8F753283
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
Manifest number:          0422
Signing time:             Fri 12 Jun 2026 15:58:23 +0000
Manifest this update:     Fri 12 Jun 2026 15:53:23 +0000
Manifest next update:     Sat 13 Jun 2026 17:11:23 +0000
Files and hashes:         1: 3137372e31302e3233322e302f32312d3332203d3e20323632383830.roa (hash: CBC+1Ux1L7zESTaZyv91rdhymRx58FnvDazwt5/EAWU=)
                          2: 3137302e38322e3230362e302f32332d3332203d3e20323632383830.roa (hash: tU4tJmk5bYXZMM9RdgJRP/KC2UAx2/bJMhqEPUotbT4=)
                          3: 3136382e3139372e35322e302f32322d3332203d3e20323632383830.roa (hash: COFBDAaof4JWMG5Gooq1wFSVC14spzQBDrXSyeTRKpI=)
                          4: 323830343a326565383a3a2f33322d313238203d3e20323632383830.roa (hash: Cs4GxQju0XI1Mp17VabDrzd7Eg6YQlZ8+/YkIkH8JaY=)
                          5: 835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl (hash: Hb8+aAwcgqjyQmjA3efec5GY3gftJUtKSflM2Vw4A+A=)
                          6: 3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa (hash: hb81MIXbwgFvawY0DP6WEdQDtyIOISujuoJ8nAm3xDY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:df:bf:f1:7e:44:7e:8d:b7:e2:90:8d:35:fd:97:1e:8f:75:32:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
        Validity
            Not Before: Jun 12 15:53:23 2026 GMT
            Not After : Jun 13 17:11:23 2026 GMT
        Subject: CN=216A41FE23EA3EF85DB98855383734CF73BE82F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:f7:4d:c1:50:ef:4a:41:5c:2c:aa:e9:04:
                    42:5b:15:51:5b:9b:22:c6:7d:20:36:8a:45:39:0f:
                    ec:48:73:c4:86:33:69:70:e8:2d:d8:20:68:c5:66:
                    95:14:71:35:2e:6c:52:f4:1e:87:c4:ad:e8:34:98:
                    8b:c9:8b:46:a1:5d:22:db:6a:b2:c7:d7:26:5c:b7:
                    bd:d6:b8:e6:02:55:50:9a:de:6b:f1:63:ee:45:fc:
                    77:d0:e8:44:9e:65:1f:f5:5d:fa:01:2b:04:c0:35:
                    3b:5a:e9:3a:b0:7b:89:e7:bf:7f:08:c6:42:ac:ea:
                    94:62:05:07:b6:59:d9:2f:85:12:be:58:c1:8c:87:
                    85:82:bf:c7:47:9f:90:5e:66:1b:b7:d7:16:c7:ca:
                    3a:a2:a3:90:15:99:c5:d9:6a:4f:2d:5a:8e:03:3c:
                    dd:64:75:e8:78:76:f2:06:21:8a:39:4f:5d:e2:f1:
                    4f:80:8b:92:dc:4d:ff:ce:11:78:d7:97:cf:bd:22:
                    91:b7:f8:9a:f9:e6:ed:ac:90:93:9a:d3:fd:bb:dc:
                    88:bc:d0:1a:16:79:c8:14:61:d8:20:8b:dc:5c:dc:
                    ff:07:83:61:22:b7:84:30:54:bc:c9:4f:2a:69:51:
                    d1:7a:5f:8e:54:ac:10:43:f8:17:dd:e4:bc:2c:b9:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:41:FE:23:EA:3E:F8:5D:B9:88:55:38:37:34:CF:73:BE:82:F0
            X509v3 Authority Key Identifier:
                keyid:83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:fa:7c:a0:91:93:92:b4:8a:86:6f:cc:09:5f:5d:4e:70:
         76:41:60:fd:50:78:3b:9a:97:b8:d1:2b:19:ac:f9:a6:4f:d6:
         67:83:a2:71:3a:f7:98:52:a5:6b:82:dc:ff:e9:4a:f1:3e:41:
         58:8f:0d:bf:00:c1:e8:26:1c:3a:2f:76:eb:3e:78:07:23:c7:
         41:84:af:50:8e:ea:7b:94:4d:0d:1d:b0:39:13:3c:92:21:61:
         fc:c1:a4:9e:4a:c7:b9:6a:35:71:3a:e0:24:cb:46:51:67:7c:
         dc:41:f1:bb:95:ab:cb:35:30:2b:9d:90:72:f4:ee:bd:05:1b:
         2d:8b:fa:a8:0c:dc:20:79:db:99:7b:af:6a:61:55:79:9c:fb:
         7c:a1:b8:d4:24:62:a5:8d:f2:6d:b5:84:a7:59:9d:13:34:11:
         54:d9:04:d7:09:b1:53:69:88:73:2a:66:ab:27:c0:b4:ec:d5:
         c2:97:31:4e:ad:de:25:20:49:77:d2:18:d6:f7:79:49:85:da:
         c0:b4:45:77:83:a2:3b:e5:53:3f:09:d6:34:84:b6:6e:79:0b:
         d2:88:ba:b9:5a:15:33:26:6f:bf:01:0b:df:8f:36:a8:04:4b:
         f9:a9:d2:f9:8f:7f:c2:31:8c:9d:93:ae:76:67:c9:b5:af:6c:
         2d:4d:0b:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcd+/8X5Efo234pCNNf2XHo91MoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM1QTFBRTUxQjYwM0RDRUIzRkNBOThFQjJGRjNDQzk0
Qjc5OEMxMTAeFw0yNjA2MTIxNTUzMjNaFw0yNjA2MTMxNzExMjNaMDMxMTAvBgNV
BAMTKDIxNkE0MUZFMjNFQTNFRjg1REI5ODg1NTM4MzczNENGNzNCRTgyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkk/dNwVDvSkFcLKrpBEJbFVFb
myLGfSA2ikU5D+xIc8SGM2lw6C3YIGjFZpUUcTUubFL0HofEreg0mIvJi0ahXSLb
arLH1yZct73WuOYCVVCa3mvxY+5F/HfQ6ESeZR/1XfoBKwTANTta6Tqwe4nnv38I
xkKs6pRiBQe2WdkvhRK+WMGMh4WCv8dHn5BeZhu31xbHyjqio5AVmcXZak8tWo4D
PN1kdeh4dvIGIYo5T13i8U+Ai5LcTf/OEXjXl8+9IpG3+Jr55u2skJOa0/273Ii8
0BoWecgUYdggi9xc3P8Hg2Eit4QwVLzJTyppUdF6X45UrBBD+Bfd5LwsuWhbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIWpB/iPqPvhduYhVODc0z3O+gvAwHwYDVR0j
BBgwFoAUg1oa5RtgPc6z/KmOsv88yUt5jBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVrVVNMaFVDTkQ0WXdjNks4bVgxTGNTVW5tSnBWY1hSTTE2OU5paDZp
RHcvMS84MzVBMUFFNTFCNjAzRENFQjNGQ0E5OEVCMkZGM0NDOTRCNzk4QzExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNUExQUU1MUI2MDNEQ0VC
M0ZDQTk4RUIyRkYzQ0M5NEI3OThDMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFVrVVNMaFVDTkQ0WXdjNks4bVgxTGNTVW5tSnBWY1hSTTE2OU5paDZpRHcvMS84
MzVBMUFFNTFCNjAzRENFQjNGQ0E5OEVCMkZGM0NDOTRCNzk4QzExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGsr6fKCRk5K0ioZvzAlfXU5wdkFg/VB4O5qXuNErGaz5pk/WZ4OicTr3mFKl
a4Lc/+lK8T5BWI8NvwDB6CYcOi926z54ByPHQYSvUI7qe5RNDR2wORM8kiFh/MGk
nkrHuWo1cTrgJMtGUWd83EHxu5WryzUwK52QcvTuvQUbLYv6qAzcIHnbmXuvamFV
eZz7fKG41CRipY3ybbWEp1mdEzQRVNkE1wmxU2mIcypmqyfAtOzVwpcxTq3eJSBJ
d9IY1vd5SYXawLRFd4OiO+VTPwnWNIS2bnkL0oi6uVoVMyZvvwEL3482qARL+anS
+Y9/wjGMnZOudmfJta9sLU0LqA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:30:37 2026 by rpki-client