Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/06A7907222E454EB4ECF6A3E99C6542039076347.mft
File:                     06A7907222E454EB4ECF6A3E99C6542039076347.mft (raw, json)
Hash identifier:          hjAEf4HRe6shpD4wjzecS6KBkX3JFJZKht2DBmLL3rM=
Subject key identifier:   AF:8E:E8:20:BE:E2:60:A1:7B:C2:09:A2:B5:EA:16:99:0D:A5:8F:4A
Authority key identifier: 06:A7:90:72:22:E4:54:EB:4E:CF:6A:3E:99:C6:54:20:39:07:63:47
Certificate issuer:       /CN=06A7907222E454EB4ECF6A3E99C6542039076347
Certificate serial:       7ECFBE8493FCBD8DEF48AD3050B913641F8F5382
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A7907222E454EB4ECF6A3E99C6542039076347.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/06A7907222E454EB4ECF6A3E99C6542039076347.mft
Manifest number:          31
Signing time:             Thu 19 Jun 2025 07:12:05 +0000
Manifest this update:     Thu 19 Jun 2025 07:07:05 +0000
Manifest next update:     Fri 20 Jun 2025 09:10:05 +0000
Files and hashes:         1: 06A7907222E454EB4ECF6A3E99C6542039076347.crl (hash: JE0u9XSOWB4zzmI45ELxfl/UNAcwwtx0RPcitAdnYT0=)
                          2: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (hash: sBQ87sl41iTCH2r8IhMCGSKbrfVLmjx4i/kpMg8ybNo=)
                          3: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (hash: bTdYs9Mt8O81ZF7FRHKSW1EZUaPsM7sfI14lyQx5cTk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cf:be:84:93:fc:bd:8d:ef:48:ad:30:50:b9:13:64:1f:8f:53:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A7907222E454EB4ECF6A3E99C6542039076347
        Validity
            Not Before: Jun 19 07:07:05 2025 GMT
            Not After : Jun 20 09:10:05 2025 GMT
        Subject: CN=AF8EE820BEE260A17BC209A2B5EA16990DA58F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:82:87:3d:67:ef:1c:04:9e:d9:51:1a:4e:
                    4a:9b:8c:f9:77:b9:17:a4:72:51:46:bd:a1:a9:f3:
                    23:d1:ac:94:07:c7:e6:5f:8c:8d:3d:4f:28:26:90:
                    f5:23:e6:c3:05:c8:08:3a:a1:0c:c7:e9:02:7f:fd:
                    0d:b2:1c:16:89:fc:e7:b3:c3:db:57:a1:0c:4f:7d:
                    2b:b8:ff:cc:93:f2:37:0f:27:89:db:ca:5b:cf:cb:
                    e2:43:e8:96:7e:a4:e8:1a:f7:f1:4e:3d:2d:1a:04:
                    d0:29:28:a6:9e:52:e6:08:b3:55:06:77:0e:65:89:
                    01:b4:1b:28:5f:b6:6e:dc:75:43:1e:ed:e3:2b:81:
                    06:13:bf:3d:46:9e:33:50:7d:c6:17:82:a4:cc:3a:
                    74:67:35:80:2a:68:a7:c1:03:61:4d:15:8a:7d:31:
                    2c:96:b8:fe:11:3f:52:f1:0d:64:44:f7:a9:3d:61:
                    cc:af:fb:43:52:5d:34:62:9a:b4:56:95:66:0d:c5:
                    3e:24:69:5d:af:d6:ef:73:3d:7a:d5:33:d8:16:06:
                    5c:01:2c:68:e8:0a:3a:c9:94:ba:c6:08:cb:b1:1e:
                    1d:02:8a:7a:59:4b:6d:d9:ab:6e:67:87:8c:9d:ba:
                    aa:4d:a0:72:43:bc:31:3d:0e:2e:20:87:d6:18:2a:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:E8:20:BE:E2:60:A1:7B:C2:09:A2:B5:EA:16:99:0D:A5:8F:4A
            X509v3 Authority Key Identifier:
                keyid:06:A7:90:72:22:E4:54:EB:4E:CF:6A:3E:99:C6:54:20:39:07:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/06A7907222E454EB4ECF6A3E99C6542039076347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A7907222E454EB4ECF6A3E99C6542039076347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/06A7907222E454EB4ECF6A3E99C6542039076347.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:e8:96:a0:b1:7a:c9:d6:d2:4c:69:ee:cd:2e:d6:6c:62:
         d1:5f:fe:d6:a8:f9:c4:4f:91:67:33:87:ca:5e:da:a2:f4:14:
         78:54:5a:40:4a:2d:b8:2d:31:2d:a7:b3:bc:25:a3:31:73:2a:
         4a:06:f8:fa:7a:c7:ad:ac:4f:fb:7f:47:85:6e:33:7a:97:80:
         e6:d8:b7:41:37:e0:8a:6b:b8:2a:4d:38:7d:92:3c:72:ff:ff:
         6d:f1:27:28:55:13:b8:c0:fc:eb:b0:09:b3:0b:fa:ab:de:8f:
         9f:89:a6:1d:c5:8b:27:ba:47:95:a2:29:1a:3a:8b:a7:72:9f:
         e1:9c:9d:a3:e8:60:d0:1a:56:2d:92:68:7a:05:2d:a1:bc:98:
         2b:ce:a3:d0:31:36:2f:c9:fd:7f:0f:68:9c:ab:e7:94:e2:f2:
         f2:26:60:3b:c4:09:b1:8c:7b:a4:51:56:2e:3c:c6:1f:e3:ac:
         96:91:d3:ff:4a:dd:be:94:74:fc:0c:4c:97:b0:57:34:d4:d4:
         4a:b5:f7:51:f8:a8:e6:70:d0:e3:e5:42:88:38:74:36:11:a6:
         93:49:f8:3c:bf:dc:d5:15:a1:05:bd:a2:f9:c2:2e:a9:5c:c2:
         eb:dd:8e:8d:ee:2c:7c:ff:56:88:0c:b9:70:01:8d:ac:e5:39:
         4e:42:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:31:28 2025 by rpki-client