Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft
File:                     96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft (raw, json)
Hash identifier:          WsPE8u4qHkLDip02Lw3ZR3R6962Xb7uZdyjEJSHh4jY=
Subject key identifier:   FF:8F:59:DC:D6:57:8A:00:FF:F0:F1:BB:29:0D:5A:DD:35:99:6C:F4
Authority key identifier: 96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82
Certificate issuer:       /CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
Certificate serial:       02940FDE6D442487AB42689AB624863CB737B938
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft
Manifest number:          02AE
Signing time:             Sun 01 Mar 2026 04:25:15 +0000
Manifest this update:     Sun 01 Mar 2026 04:20:15 +0000
Manifest next update:     Mon 02 Mar 2026 06:53:15 +0000
Files and hashes:         1: 3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa (hash: LCpjUHvOqeon5R2eI8MqMtmoTaiH42tdh3AnzR7YzKI=)
                          2: 323830343a336632633a3a2f33322d313238203d3e20323636363434.roa (hash: 6H0dUCYu+zpyOtjKrACs8ym/KLI6dHxy1ivwjplR+eE=)
                          3: 96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl (hash: lPrUiIdXYrjVIunGc4QyDt6KFqjGtsA9GmclF4bcphE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:94:0f:de:6d:44:24:87:ab:42:68:9a:b6:24:86:3c:b7:37:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
        Validity
            Not Before: Mar  1 04:20:15 2026 GMT
            Not After : Mar  2 06:53:15 2026 GMT
        Subject: CN=FF8F59DCD6578A00FFF0F1BB290D5ADD35996CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:3e:e1:ff:e4:67:94:1d:bf:6e:20:be:6c:
                    89:7b:90:c0:7d:fb:e3:26:ff:3e:3e:3b:4d:bb:9c:
                    7f:b4:20:a8:a6:ce:e0:ba:5a:fb:38:fa:93:91:fd:
                    23:2a:9c:56:5e:86:77:7b:a8:f5:40:d3:c7:b4:24:
                    e9:75:79:da:b4:49:4e:9f:ff:dd:a2:98:3d:8e:71:
                    1d:41:1a:73:39:a6:90:9f:9b:ea:6e:55:2c:4d:52:
                    76:72:b6:ed:db:33:31:57:e2:cd:24:f5:0a:f0:83:
                    ef:71:03:65:23:55:ae:1b:c6:12:ba:8f:ee:e6:8e:
                    95:79:d7:dc:93:54:43:4a:70:8a:25:4f:b9:2a:1e:
                    57:3b:f7:a4:41:91:e3:ff:45:a4:4c:96:61:a1:c4:
                    1d:fc:d8:98:f3:da:23:b2:60:0a:13:69:4c:f4:03:
                    82:ad:bb:96:3f:55:45:35:28:f5:e2:91:ec:33:c8:
                    12:87:dd:52:23:46:57:f2:65:89:b5:ef:c4:06:5c:
                    46:91:18:69:df:38:af:ae:e8:06:de:74:b4:a8:fe:
                    1e:f1:71:22:a7:28:55:17:ea:84:85:6c:10:a7:f9:
                    2b:b4:2b:ba:98:a5:ea:68:9f:76:3a:12:db:64:96:
                    80:b0:9b:a3:15:42:22:ea:48:f6:6d:92:9b:28:12:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:59:DC:D6:57:8A:00:FF:F0:F1:BB:29:0D:5A:DD:35:99:6C:F4
            X509v3 Authority Key Identifier:
                keyid:96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:f5:fb:5f:5c:ec:50:82:fe:87:2c:72:8f:84:c7:fe:24:
         a9:96:f5:83:4a:6a:64:d8:93:50:fc:ca:6a:10:d5:5b:70:26:
         8f:c1:0a:6f:7c:2f:30:6e:c9:0d:05:72:32:9c:5c:d9:00:3f:
         9a:09:0b:43:de:9c:72:12:c7:17:70:2f:ca:9b:53:fa:b0:f3:
         32:b8:07:f4:68:b1:c8:72:db:0c:ad:ed:25:bd:bb:fa:cb:2c:
         e6:da:1f:88:33:27:7a:d1:f7:ac:82:2a:d1:e7:e6:25:d5:d3:
         c7:5a:03:3b:67:76:de:10:45:42:15:c1:ab:4b:65:88:83:ea:
         5b:17:ab:a5:2d:34:fb:0b:f7:db:69:ca:b7:5a:85:e8:76:31:
         c8:72:95:ca:8f:6a:dc:cb:ff:5d:8a:6b:ac:44:f6:a5:08:1b:
         3a:fa:07:b5:36:95:ee:f8:d9:0d:51:70:e2:21:e7:84:65:bd:
         d3:ea:2a:82:35:a1:97:6e:28:cf:5d:99:5a:dc:a8:03:49:d0:
         5e:ff:be:69:9a:95:32:04:e0:a9:e1:90:42:7f:ca:56:44:f8:
         5e:c4:1a:65:fb:6b:34:9a:02:ab:b6:49:82:c1:35:33:db:36:
         2d:13:b3:ef:98:61:e1:9f:47:12:8a:29:9d:ba:c2:d3:3e:0a:
         17:89:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:12 2026 by rpki-client