Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bkjzyb2DyewimxYusYwkSGWFDSGsz8o9fXeiL5d45FT8/0/9E4F8BD73C32A8787217895D7F24D99645171EDF.mft
File:                     9E4F8BD73C32A8787217895D7F24D99645171EDF.mft (raw, json)
Hash identifier:          Ymg+JTnhdpLVc7Dne6SLquvKppVNjhvYddH+jRTcVaU=
Subject key identifier:   9F:70:55:2A:10:76:48:39:60:43:D9:CE:8B:6F:95:B9:B6:E8:A4:46
Authority key identifier: 9E:4F:8B:D7:3C:32:A8:78:72:17:89:5D:7F:24:D9:96:45:17:1E:DF
Certificate issuer:       /CN=9E4F8BD73C32A8787217895D7F24D99645171EDF
Certificate serial:       3EA93F40D7B5F3405921A8E528C3AA9B477F897F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4F8BD73C32A8787217895D7F24D99645171EDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bkjzyb2DyewimxYusYwkSGWFDSGsz8o9fXeiL5d45FT8/0/9E4F8BD73C32A8787217895D7F24D99645171EDF.mft
Manifest number:          016E
Signing time:             Tue 14 Apr 2026 10:21:14 +0000
Manifest this update:     Tue 14 Apr 2026 10:16:14 +0000
Manifest next update:     Wed 15 Apr 2026 12:53:14 +0000
Files and hashes:         1: 323830343a326638633a3a2f33322d3438203d3e20323634383938.roa (hash: xFCnVyM60C6hWQBMXGAh97STeg79QAJDgx/71XDBGVw=)
                          2: 3136382e3232372e3234382e302f32322d3234203d3e20323634383938.roa (hash: xfW2il9vFWHDg7NFX9nk4Gh8NmE3jFJJmsaNpBhwTUY=)
                          3: 9E4F8BD73C32A8787217895D7F24D99645171EDF.crl (hash: tCHO97TEzFfXtvkae7AhUPjtX4B2s0Ggj9Ka4OXQtaw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a9:3f:40:d7:b5:f3:40:59:21:a8:e5:28:c3:aa:9b:47:7f:89:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E4F8BD73C32A8787217895D7F24D99645171EDF
        Validity
            Not Before: Apr 14 10:16:14 2026 GMT
            Not After : Apr 15 12:53:14 2026 GMT
        Subject: CN=9F70552A107648396043D9CE8B6F95B9B6E8A446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:f0:c8:eb:5f:48:87:83:60:ad:fd:fa:75:
                    ec:2a:84:fc:50:55:5b:d4:a5:08:64:a2:03:ee:e3:
                    45:b3:b7:5b:86:9c:56:2a:c2:b7:f9:12:e1:6c:65:
                    71:a4:ee:c0:13:b2:65:6e:06:72:93:a2:ef:b2:9b:
                    7e:32:a9:3b:22:fc:d4:74:03:0f:71:17:44:03:0b:
                    ad:4e:d3:d7:d9:2d:71:22:08:10:bf:3e:46:20:09:
                    f1:97:18:2d:ac:10:0e:22:4b:6e:69:06:d2:f5:9c:
                    0b:91:f7:e1:1a:b4:ab:bb:a8:f2:a6:40:ad:0c:ed:
                    f1:82:06:08:cd:9e:38:54:73:f2:1c:3e:bb:a2:82:
                    fb:17:ce:45:26:bc:43:a5:d3:cd:a0:a8:1b:0b:55:
                    1a:8f:c8:5a:81:19:de:e4:3c:d6:f0:ca:ef:17:14:
                    4c:21:e1:1c:63:22:5d:63:c8:4b:79:d1:45:1b:82:
                    f1:76:71:fb:e0:dd:14:82:11:13:74:2e:6a:90:77:
                    ad:b2:b2:c1:90:b8:17:ec:a6:c8:f8:74:29:88:b4:
                    2f:e3:b9:8c:a4:42:d9:36:28:f0:b2:b0:a3:99:ea:
                    43:ae:51:92:71:43:0c:27:b8:53:40:8b:63:5c:38:
                    7e:e1:78:34:c5:ed:58:8b:e7:0c:77:4d:9e:cb:6f:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:70:55:2A:10:76:48:39:60:43:D9:CE:8B:6F:95:B9:B6:E8:A4:46
            X509v3 Authority Key Identifier:
                keyid:9E:4F:8B:D7:3C:32:A8:78:72:17:89:5D:7F:24:D9:96:45:17:1E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bkjzyb2DyewimxYusYwkSGWFDSGsz8o9fXeiL5d45FT8/0/9E4F8BD73C32A8787217895D7F24D99645171EDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4F8BD73C32A8787217895D7F24D99645171EDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bkjzyb2DyewimxYusYwkSGWFDSGsz8o9fXeiL5d45FT8/0/9E4F8BD73C32A8787217895D7F24D99645171EDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:5c:e1:8c:3f:60:04:41:07:83:41:98:9a:63:2f:f3:bd:
         39:4f:c0:5d:d7:78:8e:d5:99:5c:ad:de:6d:ef:7d:2e:b4:cf:
         04:f1:0a:4d:5e:d4:aa:0c:b9:83:e2:68:24:1c:93:04:b7:3a:
         f2:ee:bb:05:9b:d8:86:d2:54:f6:20:fa:66:06:8d:6c:ce:70:
         d4:ad:af:e5:ca:87:34:ab:66:29:41:30:64:72:15:8a:ec:ba:
         ec:f4:31:bb:51:9c:be:f2:be:ee:ea:eb:23:2a:da:e2:d8:17:
         c1:2c:43:40:a5:bc:71:cd:5e:12:20:0b:cb:ec:ad:f3:67:21:
         33:39:70:da:78:d6:6b:d7:ac:da:7e:73:ab:0c:a0:05:75:6f:
         aa:4a:cb:b0:94:1a:44:17:10:13:ad:be:5e:92:55:96:76:6d:
         92:b5:11:d3:b4:2f:a3:a2:5f:fb:53:1d:dc:9e:32:ed:67:10:
         10:cc:ef:83:df:25:c7:aa:b7:db:e4:e5:3c:1a:6d:41:76:03:
         c6:ee:d4:a9:c6:08:9a:8b:3c:92:5c:16:1b:2f:95:7a:5b:cb:
         cc:f1:12:ed:2c:64:1d:fb:07:88:7b:ce:25:e8:cd:22:99:fd:
         87:82:c8:5d:7e:69:8b:c2:7c:6c:8a:2f:20:1c:83:21:04:08:
         a4:9b:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:44 2026 by rpki-client