Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
File:                     0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft (raw, json)
Hash identifier:          trrwm0R/rVPwrYNvhfaKo5YCJaWWbxIai15k51i+fvA=
Subject key identifier:   39:AF:CF:13:DA:11:83:34:1F:BB:38:E6:8B:B7:21:EA:43:53:84:59
Authority key identifier: 0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
Certificate issuer:       /CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Certificate serial:       173265761B8C738CCA28235EA8C58090923B599D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
Manifest number:          02AA
Signing time:             Fri 12 Jun 2026 21:47:25 +0000
Manifest this update:     Fri 12 Jun 2026 21:42:25 +0000
Manifest next update:     Sat 13 Jun 2026 22:09:25 +0000
Files and hashes:         1: 3138372e31372e3132382e302f32322d3234203d3e20323730363131.roa (hash: VcZtae4V8vmmNeAZ9IBe8oO332eSlH4069zbiIxe6/s=)
                          2: 0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl (hash: wgIxeVakT/Pz8nUwCiCWj7GoKrOp10P+XuIku0cTloA=)
                          3: 323830343a366561383a3a2f33322d3438203d3e20323730363131.roa (hash: wz8TGnxv2/qOskSYTn0i3OS+47RSWT4cKKWw2ATTDCs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:32:65:76:1b:8c:73:8c:ca:28:23:5e:a8:c5:80:90:92:3b:59:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
        Validity
            Not Before: Jun 12 21:42:25 2026 GMT
            Not After : Jun 13 22:09:25 2026 GMT
        Subject: CN=39AFCF13DA1183341FBB38E68BB721EA43538459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:6d:36:1c:7f:58:42:c3:62:68:9f:49:71:
                    69:82:71:4b:ea:a7:75:33:92:a2:46:d6:88:d3:5e:
                    5f:55:fc:4d:52:97:e4:5b:9f:98:d6:62:d6:6c:e8:
                    e9:67:9e:d5:e9:60:5d:46:8c:b6:f0:1a:28:62:91:
                    b6:67:be:36:d4:bb:de:2a:f4:f7:13:2d:7a:36:a2:
                    9e:ea:8c:4b:8f:af:f9:d4:00:90:e8:29:9d:dd:df:
                    86:1e:2b:e3:fc:28:90:80:6b:0f:5d:16:af:b8:6e:
                    b4:9c:10:f3:bc:16:ac:ca:c3:ff:43:78:ca:50:1d:
                    2e:a2:50:bb:cc:4b:16:09:94:53:7d:64:2c:ea:c9:
                    a4:6f:ea:f3:8f:0b:38:43:d0:26:84:ab:e5:90:26:
                    4c:51:60:99:a3:6c:b8:11:20:19:d3:40:4b:00:cb:
                    43:e2:0f:35:2e:95:8a:6f:34:3e:c6:db:12:fa:7c:
                    cd:56:4c:fb:aa:a9:d7:f6:9f:95:6a:1e:06:b9:53:
                    f3:30:08:d0:87:42:80:40:60:e0:2c:8f:84:5f:b7:
                    67:aa:19:11:6f:be:fe:62:ed:aa:3f:96:03:64:2e:
                    56:eb:91:6d:ac:bc:f3:01:cf:9b:a5:ea:a5:a5:62:
                    32:66:fe:68:94:de:e5:54:31:60:07:47:a5:3e:79:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AF:CF:13:DA:11:83:34:1F:BB:38:E6:8B:B7:21:EA:43:53:84:59
            X509v3 Authority Key Identifier:
                keyid:0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:3a:b7:61:41:19:ca:93:f9:4e:1a:23:a4:65:f7:af:48:
         b8:b3:9d:08:dd:81:25:eb:e5:98:ed:cf:3c:63:92:84:d4:39:
         db:bb:ad:39:d6:41:a6:62:b3:de:be:f0:31:e7:e0:c5:ab:95:
         cc:38:6d:4b:79:85:48:b6:aa:2d:27:3c:bb:9f:fd:50:00:fa:
         51:1d:e8:c2:3e:e4:30:98:16:89:b0:bb:67:2c:4b:bc:04:10:
         03:a2:7d:96:1c:94:0f:2e:f5:bc:e5:d7:a3:17:5d:2f:a9:56:
         2f:5e:4d:32:66:45:4c:a4:16:48:fd:a2:08:2f:e6:66:7f:0d:
         8c:36:86:39:89:dc:4c:eb:a3:cc:df:04:80:26:da:67:99:5c:
         4a:bd:b9:78:2a:c4:0b:7b:28:00:85:9b:2f:1a:1e:f8:d7:57:
         96:e0:8c:36:53:91:93:25:90:33:fe:c0:a8:03:02:85:85:01:
         3e:15:2c:6c:61:3d:02:16:61:04:2b:6f:84:6a:c7:75:be:44:
         e7:b4:0d:7b:da:19:88:da:9b:61:ea:a5:8e:6f:55:a3:0c:d5:
         a4:0b:95:f8:d3:46:dd:18:a2:fb:d3:12:13:9f:45:b8:f9:b2:
         72:b4:bb:37:cf:38:76:ae:d5:d5:c3:cd:7d:3e:9e:04:fd:aa:
         a7:72:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:42:25 2026 by rpki-client