Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
File:                     F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json)
Hash identifier:          rCHahyiaKFqy4Yj5WRS7CRZ3aPFaKFtiv+hZI3M8Yec=
Subject key identifier:   A3:D3:3B:21:28:AF:BE:3D:EE:3E:C8:7E:03:E0:67:D2:68:8F:92:DF
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Certificate issuer:       /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial:       0EEC6085384936B44DB65EFA26259E4EB9575982
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft
Manifest number:          019D
Signing time:             Sat 09 Aug 2025 14:05:32 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:32 +0000
Manifest next update:     Sun 10 Aug 2025 15:24:32 +0000
Files and hashes:         1: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: Gf1AO7OK6AtHGK/KWTZZiiyqoUwIh+M0+5uIbfy5e0Q=)
                          2: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: YG1K/ShgfdXloHQLk0pvW55EZVjg/llKx1Tuu6evW98=)
                          3: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: XOZnUoacLdQhkw6zS/TgauzVEmit+11nBmmF+xAfHTw=)
                          4: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: UFI2Hj5+gnsvxuvuG9PgdFqnHIyMDPTGWkMjMAkRt5c=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ec:60:85:38:49:36:b4:4d:b6:5e:fa:26:25:9e:4e:b9:57:59:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
        Validity
            Not Before: Aug  9 14:00:32 2025 GMT
            Not After : Aug 10 15:24:32 2025 GMT
        Subject: CN=A3D33B2128AFBE3DEE3EC87E03E067D2688F92DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:fd:18:fe:ac:05:99:93:e6:67:cb:89:7e:
                    ce:d9:02:cf:3a:65:31:20:ae:e6:be:6b:b3:6f:f9:
                    5f:89:f4:f8:fc:8c:10:6c:b9:03:36:e6:80:cf:68:
                    49:43:24:05:c4:b3:b5:fb:68:35:24:e5:a2:c9:63:
                    1c:40:89:86:ad:4c:7f:6e:00:a5:1d:99:2a:1f:64:
                    df:44:45:15:69:19:bc:93:db:b0:49:18:46:00:0e:
                    c9:7e:63:3b:98:48:06:5f:32:47:2d:4c:0b:d1:99:
                    6f:07:5f:d9:79:64:1f:9c:32:54:2a:6e:2d:5a:0f:
                    b1:e1:fc:af:dd:64:b3:bb:55:0f:e3:32:36:ba:0c:
                    5f:d9:c3:dc:ec:0f:0b:9a:8c:38:5f:16:f6:28:c4:
                    97:6e:7a:99:60:14:09:af:8a:54:4b:09:42:58:28:
                    cc:57:b9:95:1e:54:ff:36:e3:86:09:03:8a:0c:b3:
                    b1:51:fc:0e:62:4f:bb:ee:fa:5d:a2:89:2f:3b:0d:
                    dc:79:4b:e7:b3:06:56:a1:2c:1d:ca:3a:f5:9f:84:
                    3b:3b:34:04:eb:ac:fd:18:3e:18:09:bd:2d:35:df:
                    eb:11:3f:ae:40:83:17:db:dd:37:5f:02:ea:d3:53:
                    10:a4:e0:c3:51:a5:5a:e7:1b:ca:22:c1:4c:d6:85:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:3B:21:28:AF:BE:3D:EE:3E:C8:7E:03:E0:67:D2:68:8F:92:DF
            X509v3 Authority Key Identifier:
                keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:88:38:34:db:2a:86:1d:02:eb:38:07:aa:72:bb:c5:e0:1c:
         44:49:29:d0:80:30:81:35:a5:25:90:ac:6d:e7:f3:74:20:84:
         bf:83:dc:bc:82:9f:91:bb:e8:33:bb:6a:b3:b8:f8:82:4a:e3:
         71:8b:84:53:bc:d4:df:0e:20:92:da:c4:d9:fc:c2:27:45:42:
         02:3b:bb:c0:77:fc:ba:20:34:dc:30:89:cd:f4:0d:cc:f9:a9:
         67:32:f5:e3:68:e1:41:22:2b:33:bb:69:e3:4d:df:43:78:f9:
         4b:4f:d6:bb:7c:a8:63:1b:39:2c:1c:0a:c6:c4:15:0d:17:61:
         0f:4e:b2:f9:0e:7e:d7:90:ee:d4:c2:95:22:41:aa:e4:59:6b:
         08:35:1d:7c:34:09:ab:9d:1a:1e:5c:99:3a:08:3e:64:20:b4:
         97:e6:15:31:b8:73:44:37:cc:88:9f:16:c8:93:a9:21:1c:5a:
         dd:1e:4e:8f:3b:f8:fa:6b:60:06:74:c3:03:14:2a:33:ed:00:
         78:66:26:c9:36:5a:7f:fc:65:b5:5d:65:6f:81:48:35:23:fd:
         d6:4d:3a:1a:5c:cc:b6:7e:0a:d7:00:fc:43:a2:fa:0a:01:69:
         97:79:24:59:e8:a5:ce:14:24:7d:91:09:ff:4b:8b:fb:ac:89:
         3a:4b:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:10 2025 by rpki-client