Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
File:                     01E324E0856935E5A923E1963BBE18F5274878DD.mft (raw, json)
Hash identifier:          /1arJi2baKAZam/DD/j8nt0NYtUiuFTLbvxBOQbL+WY=
Subject key identifier:   84:C3:59:E4:C1:64:7E:A5:E1:0E:18:C7:EC:2E:18:D1:B7:97:F1:16
Authority key identifier: 01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD
Certificate issuer:       /CN=01E324E0856935E5A923E1963BBE18F5274878DD
Certificate serial:       2AEBAE279A44FD36EDE17477E7092568DDA2865B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
Manifest number:          01A9
Signing time:             Fri 17 Apr 2026 01:49:02 +0000
Manifest this update:     Fri 17 Apr 2026 01:44:02 +0000
Manifest next update:     Sat 18 Apr 2026 05:13:02 +0000
Files and hashes:         1: 323830343a393032343a3a2f34302d3430203d3e20323733353333.roa (hash: fNopnZH6Gojj5olVy/Ug9t0w9887khojp8Hnh0a/pno=)
                          2: 34352e3136362e3232362e302f32332d3233203d3e20323733353333.roa (hash: bKUANUEveP5uPf0qXFTnYAskMZEEUBbO2ylFtpnSd0E=)
                          3: 34352e3136362e3232372e302f32342d3234203d3e20323733353333.roa (hash: 5NKB6450V4DKuohSLNhNXRq6Kn2Lu73aCxUUt55zPac=)
                          4: 323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa (hash: BQh1h/FpGvgiIK8XQUKJMOoLKnSYHtMpK7BxTi5/A/c=)
                          5: 01E324E0856935E5A923E1963BBE18F5274878DD.crl (hash: EC0WF5qqG+a7Hv4lTHJ76PSI/1CEHvbAhUskN7GskeI=)
                          6: 34352e3136362e3232362e302f32342d3234203d3e20323733353333.roa (hash: beQ49c2NMhSZa7vgUmtNXegdiwktGYYWFK5YtwAWjfs=)
                          7: 323830343a393032343a3a2f33322d3332203d3e20323733353333.roa (hash: 7Cg6co7ivqH1e/Pv0axGJtiPyZLQ3w/rB/DWM9Awdy0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:ae:27:9a:44:fd:36:ed:e1:74:77:e7:09:25:68:dd:a2:86:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E324E0856935E5A923E1963BBE18F5274878DD
        Validity
            Not Before: Apr 17 01:44:02 2026 GMT
            Not After : Apr 18 05:13:02 2026 GMT
        Subject: CN=84C359E4C1647EA5E10E18C7EC2E18D1B797F116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:42:e1:a4:fa:b7:9d:e6:1d:9a:4b:31:93:
                    9d:2f:25:85:2c:dc:f8:3c:be:7a:d9:aa:8f:23:5a:
                    49:f5:72:a8:b6:e8:26:29:36:bd:e9:30:a7:32:1b:
                    99:c0:a4:92:dd:ae:24:e9:b7:8c:65:9b:31:f3:69:
                    5c:60:cc:85:9e:fc:f3:35:f3:c3:20:83:f1:5b:df:
                    b1:02:cd:db:67:f2:02:bb:07:0a:f2:34:2a:6f:e1:
                    1a:65:69:5f:ef:cd:df:a3:f4:13:ab:0b:d7:e1:2e:
                    ff:99:ea:67:ab:49:e2:77:33:e3:d0:27:ab:cb:f0:
                    38:bf:6d:64:6b:b1:39:69:e4:69:18:7a:2f:3b:82:
                    9f:3c:14:28:6e:1c:66:f6:60:2a:2f:b7:30:8b:3e:
                    f6:e6:a6:94:6a:12:45:3d:da:bb:9c:be:6c:f6:26:
                    ad:aa:40:ba:12:0a:b3:44:19:fc:c7:43:5b:c6:ce:
                    ac:09:8c:13:e6:b7:a2:6a:b8:a7:e7:18:0c:d7:28:
                    d4:63:d3:d3:c2:87:61:57:af:88:d8:39:09:d0:51:
                    26:13:04:9a:53:01:73:d9:c0:71:d9:23:10:c0:1a:
                    8a:b8:38:95:d0:a3:7f:a5:d7:46:15:70:01:d3:9d:
                    73:9e:97:be:09:72:90:44:5a:fe:7f:d0:c7:e3:98:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:59:E4:C1:64:7E:A5:E1:0E:18:C7:EC:2E:18:D1:B7:97:F1:16
            X509v3 Authority Key Identifier:
                keyid:01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:23:d6:45:1c:1d:58:34:69:b5:d3:c1:77:cf:ab:2c:9c:
         e1:d4:de:04:0d:1a:0b:36:28:6b:30:ee:b1:a8:b1:0a:4d:ff:
         e3:18:c0:23:0a:32:66:5a:b2:a1:b4:9d:0a:e6:bf:cf:77:5d:
         71:45:d8:2a:b6:54:07:d2:e1:7d:5d:43:05:52:cb:e9:5b:ba:
         43:0d:40:4e:ea:cc:1a:fd:92:0c:e3:de:15:cf:09:88:50:9a:
         d8:d8:f2:98:6f:9b:67:c5:bd:ea:70:b7:9f:3e:fa:40:30:09:
         a7:cd:03:80:81:07:8d:84:8a:33:08:91:a5:b4:a3:7e:87:5f:
         79:f4:6c:e0:ba:6f:5d:0d:e9:93:b0:18:c6:50:02:bd:9f:9e:
         5e:ef:dd:9d:2d:34:38:91:ab:fa:d0:c1:2f:36:81:35:f2:48:
         f7:3c:7b:74:32:c6:10:76:80:c8:93:a3:7d:e6:fc:63:b1:6a:
         c0:cd:64:17:c6:27:93:f7:d6:23:0f:22:ba:94:96:f0:3d:71:
         5d:73:8e:41:f0:8e:42:8b:de:2f:bf:a1:f9:28:50:19:a8:f2:
         45:4e:9d:b1:61:6e:7d:2b:4b:c0:7f:3a:ac:80:3d:f4:c0:07:
         c6:42:bd:7c:5f:08:15:b3:94:8a:57:a3:ed:0b:7d:09:f6:ea:
         15:fd:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:02:00 2026 by rpki-client