Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
File:                     8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json)
Hash identifier:          aoZPNE64x/IjGsPNHHmcmFdTQi1+6o8m+GGM6aaSwsM=
Subject key identifier:   3C:CF:5C:46:C0:07:95:5F:6D:FE:DB:CA:87:01:13:93:EC:D1:39:16
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       0C6946FA160E2BEA1FA50F293E3A495DC05B736F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
Manifest number:          01CA
Signing time:             Mon 16 Jun 2025 10:23:48 +0000
Manifest this update:     Mon 16 Jun 2025 10:18:48 +0000
Manifest next update:     Tue 17 Jun 2025 11:40:48 +0000
Files and hashes:         1: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: 8H/r/568SoLhgL8Vfggd5Uz33MgvONnERdfArYe2F0Q=)
                          2: 3230302e37312e37322e302f32322d3234203d3e20323636323136.roa (hash: LsdoBFPjvnCYDUIEB1OBj2TtkRawSEPatOpN+nSRJkY=)
                          3: 323830343a336338303a3a2f33322d3438203d3e20323636323136.roa (hash: tSSIbS/TBIAyAuSJldorLPMVCV6GTStK7lsX5yJ55PY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:46:fa:16:0e:2b:ea:1f:a5:0f:29:3e:3a:49:5d:c0:5b:73:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Jun 16 10:18:48 2025 GMT
            Not After : Jun 17 11:40:48 2025 GMT
        Subject: CN=3CCF5C46C007955F6DFEDBCA87011393ECD13916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:e2:de:ce:de:ef:11:d9:af:35:2c:a3:ec:
                    1e:a5:16:db:cb:d9:9f:cb:a9:75:a4:c9:51:32:79:
                    e4:4d:17:b7:73:57:48:d2:3c:70:68:74:8f:da:98:
                    47:df:69:a7:24:bb:6a:5f:b5:c2:ed:ae:d7:8c:09:
                    94:fd:d5:67:d5:51:70:aa:a8:4f:d7:8c:c4:a5:98:
                    1c:d2:01:89:66:b8:a9:80:e8:46:c4:9e:63:33:0a:
                    da:86:25:a8:b3:09:93:da:a7:3e:2d:e7:ee:4b:fe:
                    d1:b4:e6:83:a4:55:9e:10:60:1e:ad:b0:ec:84:17:
                    fa:c6:55:84:b0:a7:62:06:13:28:09:77:81:a4:bc:
                    16:72:42:7e:7b:ab:58:c4:a2:32:c0:14:aa:8e:d3:
                    4b:eb:5d:53:fc:46:e7:8f:6e:6f:bd:1d:c5:45:9a:
                    52:93:4e:cd:d2:b5:5f:30:77:e3:ba:00:a8:4c:02:
                    dd:96:57:0b:f0:73:2c:d0:75:57:0f:9c:c9:4d:00:
                    ba:29:93:d7:7c:21:f1:f1:99:45:8b:74:71:7b:ba:
                    a7:32:98:78:bf:1f:44:de:d8:3d:3b:a1:48:15:1b:
                    c5:c7:c6:6a:aa:f4:42:63:a2:bf:72:04:2c:9b:66:
                    34:2a:c3:92:e8:ff:f8:f0:9a:6e:6b:34:9d:ec:4e:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:5C:46:C0:07:95:5F:6D:FE:DB:CA:87:01:13:93:EC:D1:39:16
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:b2:90:8e:12:a2:59:66:f5:7f:9c:a4:3c:d0:14:d9:1f:
         0c:a7:a4:00:f0:42:f6:24:27:34:d6:73:1c:2a:bf:35:2c:f8:
         bc:1d:8f:63:67:d2:97:32:71:69:69:7c:74:57:aa:b4:cd:f0:
         92:c0:dd:95:7a:1e:7f:2e:15:06:1d:e6:49:b3:f5:62:4e:92:
         09:a1:85:d3:2c:7d:8a:cd:86:65:98:49:0a:e6:eb:83:13:09:
         96:ab:fd:91:1b:5e:0b:be:bb:73:43:6b:01:fc:17:63:e2:19:
         89:d2:8f:df:44:23:36:72:cf:9a:29:e0:39:6b:3b:95:d0:21:
         f3:e9:ea:3e:7e:69:41:d3:3c:79:55:38:1f:45:5e:2a:83:1d:
         2e:90:57:2b:94:4e:10:82:2f:eb:8a:6c:24:7b:77:39:62:c1:
         6f:c9:cb:41:d2:c3:fa:95:2a:6e:01:53:38:9b:50:2a:61:a0:
         16:72:5c:da:18:ae:81:c1:65:34:87:e1:6f:57:13:3a:dd:1e:
         22:d9:a2:12:e4:1b:08:f5:d4:2a:cf:38:fa:82:10:0d:6f:f3:
         f1:8a:73:0d:7b:0f:85:cc:cf:44:10:7a:89:b3:2e:5f:70:b9:
         f5:fc:ad:57:ad:33:ad:2a:53:fe:ff:9a:6c:e4:52:5e:40:32:
         99:11:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:58:08 2025 by rpki-client