Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
File:                     0817DBC592F999355596EFF8ED1D632370D2A2D0.mft (raw, json)
Hash identifier:          i3AoVP36VSsdEXwA+mKp5eOyoejlOliVwI/L/BQuN+U=
Subject key identifier:   45:F0:1C:63:F1:BA:F8:61:F1:56:3B:36:DA:70:0F:D9:62:A6:F0:79
Authority key identifier: 08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
Certificate issuer:       /CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
Certificate serial:       32A9D48C195D9B8BDC746B45551AC1C321C5FFA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
Manifest number:          B4
Signing time:             Fri 01 Aug 2025 08:42:18 +0000
Manifest this update:     Fri 01 Aug 2025 08:37:18 +0000
Manifest next update:     Sat 02 Aug 2025 11:59:18 +0000
Files and hashes:         1: 0817DBC592F999355596EFF8ED1D632370D2A2D0.crl (hash: CzcJE9OpkONoSY4EU6i2xCF87xQcjrlxo4xQHzueGVg=)
                          2: 34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (hash: OjXuAtBkVcOvvx4OoAgrp0COCxFiOXAhBYC2rEcQJao=)
                          3: 323830343a343838633a3a2f33322d3332203d3e20323637313238.roa (hash: 1s2O60lHgDIQpC8FZVx7268kNuAwgJjkP2rHqfWjny8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a9:d4:8c:19:5d:9b:8b:dc:74:6b:45:55:1a:c1:c3:21:c5:ff:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
        Validity
            Not Before: Aug  1 08:37:18 2025 GMT
            Not After : Aug  2 11:59:18 2025 GMT
        Subject: CN=45F01C63F1BAF861F1563B36DA700FD962A6F079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:0b:48:ab:f2:21:bc:52:0d:63:f8:36:a3:
                    81:87:61:5b:55:a2:9f:e0:4f:6a:2c:7a:3e:bf:df:
                    25:be:7a:5c:36:cd:f5:da:15:6f:19:6b:23:74:79:
                    e8:1b:8e:c0:a5:70:f5:da:a5:86:e4:71:eb:84:1f:
                    ed:77:6b:1a:21:57:bd:53:1e:2d:33:a1:ca:ae:c7:
                    1d:08:ab:75:61:e3:07:a1:05:f3:d9:64:8c:f7:0f:
                    f7:ff:9f:98:a2:bd:d9:1d:0f:db:d7:c8:39:3d:40:
                    8b:b9:e8:97:d5:c9:2b:57:75:fa:fa:6f:84:b5:09:
                    1f:f7:40:21:ae:f1:64:cb:4d:7c:56:00:fb:9b:b4:
                    ff:bd:9e:84:7f:fe:d4:de:8a:85:f4:bd:b4:93:2a:
                    80:ac:77:fd:7e:c2:b7:0f:d5:2b:a8:80:8f:4e:4f:
                    4e:de:a0:aa:89:91:06:f7:d8:7d:fc:f9:90:29:1d:
                    7a:54:62:c9:2d:29:ae:fa:3b:cf:23:0b:f6:bd:c7:
                    7b:17:6a:0b:75:9b:6d:3e:db:67:b1:3c:77:f7:82:
                    fe:b1:a2:ff:9e:93:53:a0:9e:c4:59:b8:6e:07:05:
                    94:41:26:ac:5b:97:24:aa:c8:f9:b2:07:b4:10:22:
                    8b:9c:c5:e6:32:f2:d9:9b:95:21:1e:1b:62:89:e1:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F0:1C:63:F1:BA:F8:61:F1:56:3B:36:DA:70:0F:D9:62:A6:F0:79
            X509v3 Authority Key Identifier:
                keyid:08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:68:4f:12:0f:b4:01:15:6f:80:af:54:5d:a1:55:66:3f:
         98:ad:6e:71:46:ed:40:dd:75:0f:38:ac:40:17:96:96:0d:8f:
         7b:1b:78:4f:db:5c:c6:47:00:d0:97:15:77:a4:15:f1:30:d5:
         14:85:3f:06:29:1f:9c:35:fb:39:44:f6:a0:9f:fe:05:ed:36:
         28:f4:55:9a:00:1b:dd:f6:03:24:bf:31:08:45:3c:71:c8:aa:
         11:b4:23:28:3c:53:ec:11:3b:57:ad:32:93:36:7a:d3:46:67:
         23:b2:6b:cb:9d:ec:ab:84:79:dd:9d:72:fc:98:53:fb:b5:65:
         e6:ac:59:af:d1:43:49:9a:e7:9a:dc:af:35:fd:6c:4b:ca:a5:
         57:1b:29:d6:25:15:7b:8e:f3:94:50:e1:a5:5c:d9:7f:c6:03:
         c9:65:ea:ca:67:bc:58:42:54:84:a5:e3:11:c7:ed:5c:53:d4:
         fe:55:74:c7:84:9d:61:48:e6:3b:1a:17:81:ee:01:b5:f7:4b:
         7b:8e:f3:41:3e:14:ba:d9:33:71:82:dd:ca:d5:8f:67:33:ea:
         19:49:bb:e4:d0:a2:c3:c1:f1:5d:bd:3b:97:71:d5:d5:17:c0:
         df:08:95:0d:ec:dd:24:d4:0d:1b:b4:f6:28:a3:2f:56:1e:d7:
         52:1a:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:57 2025 by rpki-client