Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
File:                     70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft (raw, json)
Hash identifier:          5hSBl4tIk8Tgl1T2NEHY+v0lUQr5fNUZn0sUlPhwQA4=
Subject key identifier:   28:93:53:B5:66:6E:9E:91:BC:3A:22:84:8D:18:28:E9:D7:48:79:57
Authority key identifier: 70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D
Certificate issuer:       /CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
Certificate serial:       39A450751DFE18C58C8321B29230D0D3029E503E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft
Manifest number:          01B2
Signing time:             Tue 14 Apr 2026 23:27:02 +0000
Manifest this update:     Tue 14 Apr 2026 23:22:02 +0000
Manifest next update:     Thu 16 Apr 2026 03:09:02 +0000
Files and hashes:         1: 34352e342e3133322e302f32322d3234203d3e20323636303632.roa (hash: hg4Pm0EbDY/iWODtioTWTWp/IGSoxMd1Rjvcv3JDf7k=)
                          2: 70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl (hash: awB3fyvALn4z/+/RuZB2XjX3U9V6HTZuxLYXcsr3/vg=)
                          3: 34352e362e3132382e302f32322d3234203d3e20323636303632.roa (hash: UwrB4PYZnVsTXnVGkOXnLOjv89DKTZ26pmpB8/AFHuA=)
                          4: 323830343a333966383a3a2f33322d3438203d3e20323636303632.roa (hash: pg8tszNCvNEb7xkcd+iWygWpZOdy2lv/1W5Ktjs9OaU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a4:50:75:1d:fe:18:c5:8c:83:21:b2:92:30:d0:d3:02:9e:50:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D
        Validity
            Not Before: Apr 14 23:22:02 2026 GMT
            Not After : Apr 16 03:09:02 2026 GMT
        Subject: CN=289353B5666E9E91BC3A22848D1828E9D7487957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:84:40:71:e0:8e:65:c4:8e:8f:40:89:1f:
                    8e:14:b1:03:c6:2d:78:2d:2b:66:fc:ed:48:cb:31:
                    df:11:0d:2b:fd:fa:50:87:f5:36:d5:0a:a8:2b:d7:
                    81:8c:9c:5c:f4:59:23:b0:21:35:cc:93:ac:8d:16:
                    11:e3:dd:54:88:a5:5e:71:bf:32:e7:a7:db:97:59:
                    dc:d7:b9:1c:74:0f:99:39:93:ca:48:10:fa:6f:15:
                    5c:3a:aa:88:fd:17:9a:77:ee:ef:f6:02:da:21:a9:
                    51:83:34:5f:51:c0:23:1a:03:85:a0:20:71:8d:0e:
                    05:71:13:22:62:bf:17:ac:80:24:0e:14:2f:07:dc:
                    31:bd:c7:02:1a:5e:34:25:9e:d6:e0:92:54:2c:3b:
                    90:bd:5d:11:7a:79:63:c3:ef:6e:dd:61:15:cd:ce:
                    cc:7f:30:e6:d3:1b:30:1b:73:e1:a2:9e:bd:96:a6:
                    d6:97:6f:b9:2f:ef:b2:6f:9f:aa:13:d5:da:bd:b4:
                    fc:e7:eb:29:db:ad:4b:5d:f2:76:e7:82:76:0f:38:
                    7c:f8:22:ad:19:80:19:7f:82:db:21:5d:e0:79:f4:
                    3b:f2:2f:55:c2:e2:a2:0e:a3:d5:43:de:12:64:42:
                    15:35:f5:45:6f:41:57:67:99:f1:c5:9e:56:96:f2:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:53:B5:66:6E:9E:91:BC:3A:22:84:8D:18:28:E9:D7:48:79:57
            X509v3 Authority Key Identifier:
                keyid:70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:9d:b8:79:c5:01:2e:d7:d0:ef:30:3c:e7:32:d5:36:e3:78:
         a8:0c:93:d9:4f:10:f5:cb:14:00:fa:63:ea:df:ca:b1:3d:9e:
         ef:07:7a:72:9e:cf:c4:d7:fb:c2:27:99:1e:18:1d:a7:dd:c6:
         3d:49:de:08:6f:de:d5:43:71:52:bc:2e:c5:78:2d:2c:bf:2d:
         6b:d9:1f:71:c7:e0:29:8d:7b:d6:11:17:51:23:15:b7:92:dd:
         e9:da:7a:09:ef:2e:df:c8:b5:88:9f:82:df:fc:cb:68:d1:3c:
         c9:e8:1b:30:13:fc:f2:fb:34:54:0d:16:25:c4:ac:28:76:ba:
         f0:a5:d5:38:04:7c:c4:e1:f2:be:ee:d5:be:51:81:65:29:53:
         f7:be:ed:fd:ad:6c:34:ae:03:17:a7:fe:5a:7e:04:20:90:68:
         ae:5c:10:72:90:fa:18:d9:8a:a5:ad:56:d2:9d:d0:bf:00:8e:
         4c:ec:ca:1e:71:44:dc:51:49:ed:b7:4b:4d:fb:9d:c9:e6:74:
         ee:b9:0f:63:06:5b:59:41:d1:59:d6:fb:22:ae:4c:25:ce:ca:
         82:52:91:7c:eb:8d:e5:74:af:af:c5:e1:69:bc:7e:c9:06:2f:
         1b:e8:36:ae:40:9f:68:03:80:41:e0:3f:2b:72:da:85:de:a1:
         ac:67:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:22 2026 by rpki-client