Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
File:                     BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft (raw, json)
Hash identifier:          mWSPjtO+5W1zQJwHE5tAxF3tMTI0G8LiouLCVS43fzE=
Subject key identifier:   59:32:07:E6:E9:FA:DF:B9:DF:23:AE:98:72:60:41:FC:C3:F1:79:80
Authority key identifier: BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC
Certificate issuer:       /CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
Certificate serial:       1DCF8B1FE40EFBB7BA75631E76EE9E77255B3D34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft
Manifest number:          85
Signing time:             Tue 14 Apr 2026 01:26:02 +0000
Manifest this update:     Tue 14 Apr 2026 01:21:02 +0000
Manifest next update:     Wed 15 Apr 2026 04:19:02 +0000
Files and hashes:         1: BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl (hash: /fQW6sxZUvA9pMZBYI/nD+sGx/HvbpWVd935PQ5oDW8=)
                          2: 34352e3138362e3234352e302f32342d3234203d3e20323639353236.roa (hash: 74PswJQxEh2stbG7ROd8HSj9ZWTQZwv1p1WqgA4+TnU=)
                          3: 34352e3138362e3234342e302f32342d3234203d3e20323639353236.roa (hash: DzypTh+jo6sLVBRs0PRqqjYTpTb8AT6HVpQ/8GSck4I=)
                          4: 34352e3138362e3234362e302f32342d3234203d3e20323639353236.roa (hash: 2WtqhDgxnU79dUxBdOr4EHJxmz7kfC7rZsFBNF7EcoU=)
                          5: 34352e3138362e3234372e302f32342d3234203d3e20323639353236.roa (hash: oaYSySIKAHhHUr8gXwJO3nzY7Om/yKSmmP0fndw2ryU=)
                          6: 323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (hash: 9yJTB1aQNRZQ7VBDWfm0bQSwLjvSqD2OSGJcvOqnuOc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:8b:1f:e4:0e:fb:b7:ba:75:63:1e:76:ee:9e:77:25:5b:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF8ED8F6E25060930593D3682BBEAA1A08356BAC
        Validity
            Not Before: Apr 14 01:21:02 2026 GMT
            Not After : Apr 15 04:19:02 2026 GMT
        Subject: CN=593207E6E9FADFB9DF23AE98726041FCC3F17980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:96:de:59:db:95:54:2e:63:9c:fd:cf:40:
                    cb:7d:85:4b:97:b3:57:73:47:0e:5d:33:50:40:30:
                    00:09:18:67:06:b5:d3:12:91:24:6b:d6:af:7c:4d:
                    6d:d9:c4:62:37:80:4d:39:f7:8f:e9:59:af:17:15:
                    96:25:ce:ca:38:e1:f6:54:b3:38:fb:49:22:dc:6f:
                    c8:a4:67:bf:53:13:4f:30:d3:fa:fc:f5:a6:76:b6:
                    84:e2:3a:c8:46:b8:ed:a4:5f:ca:f0:8f:3a:c6:3e:
                    36:a4:7e:bd:df:32:0b:ba:3f:ff:31:c1:b4:62:da:
                    89:cb:eb:44:3d:37:dd:9b:80:91:13:fa:c2:3f:d5:
                    aa:31:5f:03:de:6c:bb:03:15:90:ff:61:81:49:87:
                    2d:2b:a4:36:b1:4f:b6:e4:7a:d3:7e:da:c5:d5:8a:
                    cf:16:9f:40:9f:1e:45:61:96:ad:1c:c4:42:ab:89:
                    4f:56:a5:2c:c8:70:ad:cf:b8:b8:00:b8:df:06:69:
                    bd:7b:eb:7c:44:3f:a4:37:48:0b:4e:43:c9:7d:18:
                    63:c6:8d:7e:f1:2e:39:0d:9b:3a:10:0d:70:83:32:
                    4c:42:0d:fe:67:b9:2a:ff:a7:ca:95:be:bd:8e:22:
                    cd:80:1b:da:b2:82:e8:ea:b5:9d:39:b7:4d:a1:a3:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:32:07:E6:E9:FA:DF:B9:DF:23:AE:98:72:60:41:FC:C3:F1:79:80
            X509v3 Authority Key Identifier:
                keyid:BF:8E:D8:F6:E2:50:60:93:05:93:D3:68:2B:BE:AA:1A:08:35:6B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/BF8ED8F6E25060930593D3682BBEAA1A08356BAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:de:b4:dd:43:71:4e:ee:c3:f9:eb:6a:21:d5:59:d9:4d:
         62:2a:3f:3a:e9:fc:bd:93:18:21:74:4c:09:84:64:b2:10:2c:
         9b:76:7c:ab:08:aa:fb:f6:bb:90:ed:60:a7:42:49:36:60:be:
         1d:45:d7:fb:83:7b:0c:47:60:07:f1:7c:58:48:1f:db:83:9b:
         58:f7:29:d6:3b:b6:7e:07:be:25:b7:d0:cb:e9:1f:0c:54:70:
         ab:57:5d:b1:c0:f6:ed:c8:73:26:52:3a:1d:db:a4:42:0a:dd:
         e3:85:5c:51:2a:1c:63:7e:68:3a:29:df:41:58:7f:3e:6f:b4:
         0f:83:b9:bc:1d:18:6c:14:40:0f:65:36:23:ee:53:43:d2:be:
         2a:89:0a:41:ad:24:ac:83:79:21:b6:43:5a:59:94:c9:a3:84:
         7c:51:76:1c:11:e7:1c:cf:ca:0c:0f:0c:ea:b3:05:84:16:6f:
         84:9d:ba:98:82:16:06:bf:b6:27:89:26:67:8e:68:d1:a4:aa:
         a8:cd:e4:46:53:e6:61:b7:5c:b9:a9:4c:8f:07:47:11:ec:34:
         15:e1:ed:51:fa:37:8c:96:35:8e:f0:9e:00:7f:f6:94:4e:6b:
         4a:5f:4a:cf:96:df:06:ac:85:ed:69:42:67:10:87:a4:0d:05:
         b6:e7:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:44 2026 by rpki-client