Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft
File:                     E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft (raw, json)
Hash identifier:          jfcO1vc+Wp4MWDr4+Rd61oVGP4PxHYZ5aNqB2vKzxtM=
Subject key identifier:   F8:60:1B:4C:85:ED:D9:EF:72:C5:23:76:C7:9F:C4:81:CF:8E:ED:2D
Authority key identifier: E5:81:B7:3D:C1:05:7A:71:A7:F6:1D:C9:11:8F:0E:07:7F:EF:F0:9D
Certificate issuer:       /CN=E581B73DC1057A71A7F61DC9118F0E077FEFF09D
Certificate serial:       3F60891BD5AB93BB7789D7AB4E3D0DC2F56C45E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft
Manifest number:          71
Signing time:             Sat 14 Jun 2025 21:50:00 +0000
Manifest this update:     Sat 14 Jun 2025 21:45:00 +0000
Manifest next update:     Sun 15 Jun 2025 23:29:00 +0000
Files and hashes:         1: 3137302e37382e3134382e302f32322d3332203d3e20323636323732.roa (hash: LmBwrHM2VEgTMUKeAxSeVfYqx9LY3anxOaLGGQ4CuGg=)
                          2: 323830343a333532383a3a2f33322d313238203d3e20323636323732.roa (hash: UVPO/JwRXiEbibuto3C+Dl9uswPYc/te6Ep+Z/kB2YU=)
                          3: E581B73DC1057A71A7F61DC9118F0E077FEFF09D.crl (hash: RZvK//IQ8JWNl82BT/9FWOqPBX/85nHoGi+n/Gg5SwA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:60:89:1b:d5:ab:93:bb:77:89:d7:ab:4e:3d:0d:c2:f5:6c:45:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E581B73DC1057A71A7F61DC9118F0E077FEFF09D
        Validity
            Not Before: Jun 14 21:45:00 2025 GMT
            Not After : Jun 15 23:29:00 2025 GMT
        Subject: CN=F8601B4C85EDD9EF72C52376C79FC481CF8EED2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:2b:1d:3e:dc:9b:b8:80:4c:66:35:0b:22:
                    f7:61:c6:af:22:38:18:78:ca:a0:45:dd:09:12:17:
                    12:4f:be:5b:cb:52:4e:6e:6b:0c:9c:6b:80:0b:fd:
                    5a:65:d1:32:08:67:39:7f:d9:9a:df:16:48:5b:3e:
                    d9:42:b7:25:b3:e6:b0:44:9d:7c:9e:65:fc:98:dd:
                    89:fc:3b:bc:8d:96:ee:59:57:16:a8:af:e7:a7:48:
                    ab:94:11:82:af:86:c3:ed:21:34:97:d2:d0:a6:77:
                    c3:f5:d8:18:51:f9:d4:56:d1:9f:16:b0:a7:09:05:
                    a6:c4:ac:45:b8:55:de:94:ff:3e:4a:35:0d:cf:2e:
                    8e:0f:f6:da:9a:09:24:fd:10:2b:8b:f7:4d:61:29:
                    ad:17:f2:97:12:65:20:2a:c7:db:6d:9a:18:2a:98:
                    3f:2f:1d:8e:ef:66:ff:92:08:2f:9e:d0:01:7d:16:
                    23:b7:8f:00:c5:8a:6a:b1:9a:7e:4f:73:1d:9e:4a:
                    f0:6f:05:fc:bb:f7:fa:33:c9:b3:f9:c0:8a:72:bc:
                    7a:91:6a:e1:db:7c:c0:d6:fb:19:08:33:32:78:2f:
                    8a:35:b5:09:98:4b:9d:4f:46:a5:b4:d9:e5:37:5e:
                    15:36:2b:00:f0:5f:c1:39:7c:05:bd:32:e7:81:26:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:1B:4C:85:ED:D9:EF:72:C5:23:76:C7:9F:C4:81:CF:8E:ED:2D
            X509v3 Authority Key Identifier:
                keyid:E5:81:B7:3D:C1:05:7A:71:A7:F6:1D:C9:11:8F:0E:07:7F:EF:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/E581B73DC1057A71A7F61DC9118F0E077FEFF09D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:a4:ca:9b:04:40:49:8c:a1:1f:d6:9b:af:15:ba:a0:b6:
         02:68:db:05:32:95:f7:32:11:7f:41:1d:ea:35:4a:72:61:f0:
         14:3a:48:5e:32:f5:3f:a2:32:c5:e3:45:57:66:f1:fb:bc:ba:
         24:12:6c:af:bb:7a:41:90:bb:d9:3c:81:59:4c:e8:9d:8a:4c:
         3d:dd:e0:c5:95:e5:ed:8d:9b:4c:7e:79:de:44:95:07:62:1b:
         31:36:19:43:e9:43:9a:61:b4:cc:cd:ff:93:63:63:9f:16:11:
         fd:1f:e5:37:7e:98:89:6f:22:bc:bc:c0:3d:79:d1:9b:5d:ef:
         6d:90:cb:08:34:93:ce:76:73:64:1b:65:b5:c8:42:f4:ed:bc:
         66:2b:9a:fb:69:91:cf:2f:58:8e:ad:7b:94:b3:ec:57:c9:4f:
         71:8e:19:9b:3d:f3:65:1b:14:ec:3a:10:ac:d7:47:a8:1a:98:
         2e:40:30:b3:ab:92:de:53:1a:32:c5:18:ba:c1:10:cb:8b:0a:
         6e:12:e8:3f:16:a7:97:15:e8:02:98:2b:51:77:a3:84:a4:ba:
         0c:86:a8:86:3e:8c:f2:8e:53:9e:c5:3e:cf:60:47:ba:d5:16:
         cd:79:4b:90:b0:ac:c6:af:55:bd:b6:d4:f3:c8:fa:99:07:bb:
         27:ba:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:17:55 2025 by rpki-client