Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft
File:                     59F73133C9108C206FE9409E22591FE97847518A.mft (raw, json)
Hash identifier:          OqGpkprr41SSpBKZNRMMp6FsRTiitARpVddUQEc1v8U=
Subject key identifier:   23:84:D0:A7:39:6D:9B:D8:B2:17:E1:67:BE:4F:A4:8D:BD:33:4F:A8
Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A
Certificate issuer:       /CN=59F73133C9108C206FE9409E22591FE97847518A
Certificate serial:       2FBC7A4B934C49C8C8A533410DBC630B1E84E884
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft
Manifest number:          0250
Signing time:             Fri 20 Jun 2025 18:15:38 +0000
Manifest this update:     Fri 20 Jun 2025 18:10:38 +0000
Manifest next update:     Sat 21 Jun 2025 21:22:38 +0000
Files and hashes:         1: 3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa (hash: tj+Nk5YIFtNNAnbCVCfNRDb7J/dOF5OGaMHrBVoGDB4=)
                          2: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (hash: KALs4Bg1TQfELrRE+85zSdFG7MESCGOAh2u6gZmU89k=)
                          3: 59F73133C9108C206FE9409E22591FE97847518A.crl (hash: g5JGg75suqwm2gfN5/IIvaCXqUne5kFz6eaI4PfSV64=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bc:7a:4b:93:4c:49:c8:c8:a5:33:41:0d:bc:63:0b:1e:84:e8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A
        Validity
            Not Before: Jun 20 18:10:38 2025 GMT
            Not After : Jun 21 21:22:38 2025 GMT
        Subject: CN=2384D0A7396D9BD8B217E167BE4FA48DBD334FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:73:fc:e6:b6:f4:2c:c8:6a:66:54:1d:4d:
                    0d:79:b0:db:fb:be:94:94:e8:06:f2:ec:ec:f3:5c:
                    3a:99:52:e8:22:98:63:90:08:c2:c1:e0:0b:4f:3a:
                    10:9e:77:d1:2b:1d:13:23:61:54:95:90:39:75:46:
                    a4:84:c1:8d:43:cf:b6:3a:b6:d9:15:8b:64:5b:dc:
                    06:b3:6e:f9:89:0b:24:32:69:43:1e:f6:46:53:30:
                    52:e3:e5:fc:ba:41:f7:94:a3:51:86:0c:27:4a:3e:
                    e2:7d:15:f4:96:6d:de:0e:ff:4c:40:de:d7:5a:36:
                    4c:da:eb:da:b9:e1:f8:7e:ca:9e:35:60:87:b9:23:
                    53:f9:5d:e6:07:98:b6:3d:ac:9f:6c:6d:19:e4:9e:
                    77:00:73:95:33:bd:9a:35:98:f6:ee:9c:6b:d6:cd:
                    40:f8:cb:13:7c:2c:10:7d:52:1b:6f:69:05:d7:10:
                    4f:2a:12:92:a3:73:0b:70:8c:49:d1:49:5f:f6:78:
                    b6:80:ed:fd:b0:39:84:37:5d:bb:9a:7c:93:0a:a9:
                    09:55:3d:6e:c5:be:d7:03:c9:00:5f:2b:66:63:e0:
                    72:74:14:30:c4:0f:0a:65:7b:e5:5f:9b:c6:19:29:
                    8f:d8:8b:88:43:c3:3b:43:8e:03:c9:61:56:d3:fd:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:84:D0:A7:39:6D:9B:D8:B2:17:E1:67:BE:4F:A4:8D:BD:33:4F:A8
            X509v3 Authority Key Identifier:
                keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:a0:41:72:03:17:d6:c6:86:d0:6a:e0:68:6a:02:d7:2c:
         12:3b:f8:20:a4:ef:92:b1:67:41:8f:81:1a:fe:40:0a:20:1b:
         bf:31:08:bd:59:b5:7f:0e:76:a5:5a:95:6b:f5:3e:cd:86:32:
         0b:62:8f:3b:8c:6a:6a:b4:6e:71:0a:45:31:e9:72:fb:ba:b3:
         18:03:a3:c2:b1:0c:3a:9a:50:91:a4:5a:3d:a1:31:68:ee:a9:
         62:bb:c2:9e:88:88:61:70:0d:93:b1:09:a4:15:04:bf:00:d5:
         0b:22:01:c3:5c:ca:b4:f9:1c:ca:62:ee:1a:ff:80:4d:44:93:
         a3:6c:82:4f:98:5d:60:50:4f:fd:88:f3:f7:15:eb:e8:0c:e0:
         2f:76:b7:10:d1:f1:9c:2d:54:80:2a:1a:ac:e7:53:8d:ab:72:
         c3:e2:b7:d3:7c:da:1c:96:bc:7a:29:d0:b0:91:b2:d4:95:75:
         b8:bf:94:65:09:ad:61:1b:b4:b6:d8:26:6e:d4:58:9b:3f:3a:
         ab:64:54:e2:cd:12:5c:3b:b5:4b:51:dc:91:ba:8a:99:6d:48:
         a3:ac:fd:60:66:09:8d:91:e1:63:83:e2:6d:37:f1:c5:aa:aa:
         0d:a5:4c:77:5c:5e:33:f3:38:2d:74:c4:c3:65:fc:1e:d7:43:
         53:24:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----