Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
File:                     D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft (raw, json)
Hash identifier:          QaVKAup/zAUEe/xjKX/693S9NCEze7R0KI7uDgV6Ykc=
Subject key identifier:   05:CD:D9:A1:3C:5E:51:E0:5A:45:92:8F:72:B9:22:51:8A:38:8B:EB
Authority key identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53
Certificate issuer:       /CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
Certificate serial:       43286DF671C7ACBC9B9B9CF50706BB29FA5AE5B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
Manifest number:          0123
Signing time:             Wed 10 Jun 2026 10:02:27 +0000
Manifest this update:     Wed 10 Jun 2026 09:57:27 +0000
Manifest next update:     Thu 11 Jun 2026 12:37:27 +0000
Files and hashes:         1: 323830343a316538343a3a2f33322d3336203d3e20323634343333.roa (hash: wqkO26iBwML8dHCOdOfHPla5oFoB5WF7uIRgLGj2YMk=)
                          2: 3133312e3232312e3134382e302f32322d3234203d3e20323634343333.roa (hash: cB6sCKAyHvesTFjo6aVVBHx3MwFesWxApaaS8pLGJk4=)
                          3: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl (hash: 1lxClOF/oYE4nP5E1+lAXxrDyScUl3cVIbBjCrqET4I=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:28:6d:f6:71:c7:ac:bc:9b:9b:9c:f5:07:06:bb:29:fa:5a:e5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
        Validity
            Not Before: Jun 10 09:57:27 2026 GMT
            Not After : Jun 11 12:37:27 2026 GMT
        Subject: CN=05CDD9A13C5E51E05A45928F72B922518A388BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:2f:ed:f0:fd:a9:1e:6b:ee:58:73:3c:48:
                    ea:59:93:06:e2:b8:5b:7b:ae:96:6d:7e:6b:bc:1e:
                    3b:34:2b:7e:8a:7c:59:3c:fc:de:20:41:37:50:5f:
                    3f:2e:7b:07:88:39:a5:8b:ef:37:37:73:07:ab:0e:
                    0e:9e:3c:2d:43:08:d0:34:ea:78:7c:08:80:0d:d8:
                    05:df:43:d7:bf:f0:18:cf:07:d2:b3:ce:4e:b9:c0:
                    96:c0:4c:95:ec:13:23:fd:db:eb:9b:84:d2:aa:c5:
                    c9:2c:07:bd:9c:25:85:0b:4c:09:56:2b:6c:0f:98:
                    da:15:0a:8d:39:28:57:e9:07:68:50:5e:37:08:d7:
                    a9:7c:79:94:b1:36:db:78:04:e8:c5:d5:60:54:ec:
                    1c:cc:db:58:0e:ed:2d:2d:e0:30:ab:95:68:15:97:
                    75:4a:23:ec:02:04:d5:a4:06:23:9b:5c:5c:98:db:
                    0b:7f:de:60:26:aa:0f:48:0d:22:37:fc:93:ab:ed:
                    04:cb:be:78:64:91:4f:76:3b:1e:34:89:78:84:02:
                    ba:db:16:63:82:2c:48:d3:74:2f:07:a5:b4:36:8b:
                    c1:76:21:41:82:f2:f8:05:e7:5a:27:8d:f1:61:d4:
                    5d:3d:fd:46:8c:57:0b:b3:05:54:e3:43:54:3a:2e:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:D9:A1:3C:5E:51:E0:5A:45:92:8F:72:B9:22:51:8A:38:8B:EB
            X509v3 Authority Key Identifier:
                keyid:D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:23:be:fd:44:79:50:28:5e:7e:e8:21:4e:ea:ce:cd:81:35:
         1d:ae:c8:34:2c:53:d5:92:02:f6:70:f7:ef:6a:38:8f:c6:4e:
         23:de:60:5d:b2:9f:67:b1:15:ad:3c:04:70:cd:76:42:27:d1:
         8d:b3:88:f2:cd:e0:1b:85:27:7a:47:f9:a1:0c:c2:21:2e:fe:
         f7:16:bd:08:0e:8e:8a:71:f7:b3:c4:ca:35:da:92:e6:15:48:
         21:c1:9c:9c:c4:c2:bc:95:dc:d2:12:0a:12:97:b8:88:69:9d:
         07:41:f7:bb:af:bb:4d:d8:92:ae:e5:5e:6c:f7:61:72:2d:6d:
         ee:8d:95:4b:8e:06:60:30:88:53:a4:6d:86:83:ab:82:e4:df:
         be:cd:83:1c:85:41:59:53:77:aa:4a:67:14:f4:cc:59:d2:1f:
         5f:73:06:40:c8:de:33:eb:88:cb:8c:19:b3:f7:48:35:c4:c1:
         c4:62:a1:33:66:30:7a:0c:f8:87:a0:27:97:9a:f0:c5:3d:8a:
         eb:ba:c4:2f:4d:e8:87:fd:5b:bf:b4:5d:f5:39:e9:38:43:3d:
         ad:ce:6f:a7:44:c2:55:1c:ae:98:c9:53:ba:31:6c:24:69:4b:
         fa:91:8c:08:29:8f:63:65:cd:99:1a:17:1f:1a:77:4a:a2:d5:
         e0:63:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:28:58 2026 by rpki-client