Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
File:                     B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft (raw, json)
Hash identifier:          jeLDOXrHx+L3/wZTv8Xm1ArxX/mtEAbk/WP2TNG5ciQ=
Subject key identifier:   FE:93:8F:60:76:97:A8:A9:55:C0:14:E7:FE:C6:1A:44:D7:90:2E:47
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       3D232BB671FB5301AB36A036E6B6CDD5A05138FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
Manifest number:          B7
Signing time:             Fri 01 Aug 2025 06:17:16 +0000
Manifest this update:     Fri 01 Aug 2025 06:12:16 +0000
Manifest next update:     Sat 02 Aug 2025 10:15:16 +0000
Files and hashes:         1: 323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (hash: JcWJLpbpMgx/WCcUDdztbuxKF/71Ozn0M8Z1sNNX/k4=)
                          2: 323830343a383237303a3a2f33332d3333203d3e203631363038.roa (hash: BNCGrDkWytMpPM9AhJBlZE9newk1iIjDVUL2IMms0Po=)
                          3: 323830343a383237303a3a2f33342d3334203d3e203631363038.roa (hash: IQgcZZ2DHEikM5VHQlrG262INYwomwNFf25WIz8wKKU=)
                          4: 323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa (hash: tzqdbTV9/xOI7L3sK81V8YTD8VUcYGJCbAZ27S67e+8=)
                          5: 323830343a383237303a3a2f33322d3332203d3e203631363038.roa (hash: H9qowQF/SpXmz3S5/d5U/rTdCgt8/nzkpD2mndzgZdo=)
                          6: 323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (hash: QWMpT15auvi5IqVQCQkkLDo88tzBpoCVWSbjXMc0oYA=)
                          7: B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl (hash: 94q4AQAvLnp3f5RsTHh/WGMMQMeXzehM0xnc0pdHNwI=)
                          8: 323830343a383237303a343030303a3a2f33342d3334203d3e203631363038.roa (hash: GPNYtEq23d6WWeNjnxhyON9srNvwLK8FegrRlTLG6nw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:2b:b6:71:fb:53:01:ab:36:a0:36:e6:b6:cd:d5:a0:51:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Aug  1 06:12:16 2025 GMT
            Not After : Aug  2 10:15:16 2025 GMT
        Subject: CN=FE938F607697A8A955C014E7FEC61A44D7902E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:c9:8f:e9:e4:e7:3c:9e:a7:ec:fa:8b:26:
                    ae:51:af:80:c1:68:05:2b:1f:a9:af:8a:2a:28:ed:
                    0e:28:58:d2:d6:8a:f6:91:43:de:da:ed:4a:2f:60:
                    79:19:81:c8:5c:45:b9:29:02:99:61:5d:2c:14:14:
                    86:6e:26:79:da:7e:b0:38:a3:e9:27:48:00:61:09:
                    db:79:3e:bf:26:78:2c:2e:6d:19:7e:35:2d:e3:6d:
                    a5:a0:25:8d:49:8d:13:dd:0e:8d:52:72:4f:24:37:
                    c2:b3:0e:91:dd:bd:6a:97:56:87:33:c4:1a:7d:98:
                    f8:17:e2:e7:9b:ba:21:38:f1:26:4a:d6:10:4b:82:
                    ba:b2:08:0d:ee:62:8f:d4:71:eb:07:a1:dd:00:56:
                    0b:42:47:ba:0d:88:92:ec:79:fd:a1:72:95:e7:41:
                    79:13:f2:cd:7d:a6:59:96:2f:f8:f3:75:72:85:69:
                    d2:50:1a:58:a6:1e:59:96:97:41:09:18:0b:01:6a:
                    2d:f4:34:c1:36:e2:e3:a9:24:b0:a7:0a:f6:da:32:
                    6f:d0:74:17:eb:d7:16:90:84:85:1f:86:61:9c:60:
                    5d:6b:1f:67:d4:9d:3b:29:66:50:14:57:65:4a:c7:
                    89:0b:41:e0:c5:41:77:39:cc:46:c6:16:42:a7:68:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:8F:60:76:97:A8:A9:55:C0:14:E7:FE:C6:1A:44:D7:90:2E:47
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0f:d6:e0:f7:4b:60:b8:52:f9:f0:5e:0e:cf:8a:a2:af:c2:
         4e:0c:c3:17:9e:97:03:75:48:1a:26:ae:8e:52:39:be:fb:8f:
         70:3d:2d:60:ea:78:9e:ab:8e:e3:6c:81:21:f0:1c:6b:33:f2:
         cc:76:56:c2:55:71:4b:d5:e4:15:59:c2:35:69:ab:a1:fb:09:
         43:48:12:f1:7b:e5:16:b4:d5:3d:31:a3:3d:aa:16:6f:f3:76:
         db:f3:04:fb:4a:20:2c:a1:ed:02:92:ba:df:66:c1:4b:f3:8f:
         a8:a7:c3:83:f9:0a:51:f4:9f:ee:5f:94:ab:60:20:76:2d:77:
         bd:9f:e7:7e:35:66:75:9e:04:cb:ec:97:1c:16:f0:82:b5:ed:
         3e:3f:99:49:6a:9f:53:2b:87:07:9a:53:03:24:dd:d7:4a:d6:
         87:71:7b:b6:3d:54:53:e9:f7:28:82:28:75:8d:fb:2b:27:0b:
         36:b2:31:2b:0e:87:3b:ed:e7:8e:16:ec:4c:af:e2:a0:15:a7:
         9a:09:04:20:8e:30:ef:45:40:fb:fe:7a:19:29:57:c6:79:a2:
         d5:fc:59:11:05:93:4a:a6:ee:fa:6f:77:83:1b:5c:a9:92:51:
         f3:85:9d:13:4c:30:d2:a7:16:db:53:24:6f:68:e5:db:01:df:
         34:7d:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:39 2025 by rpki-client