Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.mft
File:                     98795ED91D95FB396CC99C94860EA4CAD59F6435.mft (raw, json)
Hash identifier:          GWeXm72KBBzD0NWlCgvlw0waFq+RKxUszq6t9byLtBc=
Subject key identifier:   A6:B2:57:D8:F1:22:8B:EB:EF:D6:D0:1F:D2:7F:EB:66:E1:67:66:B2
Authority key identifier: 98:79:5E:D9:1D:95:FB:39:6C:C9:9C:94:86:0E:A4:CA:D5:9F:64:35
Certificate issuer:       /CN=98795ED91D95FB396CC99C94860EA4CAD59F6435
Certificate serial:       59AACA91A491890A0E3FF828E41199835BBE5292
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.mft
Manifest number:          0289
Signing time:             Fri 08 Aug 2025 14:15:34 +0000
Manifest this update:     Fri 08 Aug 2025 14:10:34 +0000
Manifest next update:     Sat 09 Aug 2025 15:55:34 +0000
Files and hashes:         1: 98795ED91D95FB396CC99C94860EA4CAD59F6435.crl (hash: OSimMmaSDft2SIBoQmBfzyZf+Fpt2k+pE9wRAq0Xggs=)
                          2: 3139312e3234312e32342e302f32312d3234203d3e20323633363634.roa (hash: j4WAs5i//Hebu1P9NBeVYN30dcjFqcYLpKJzoSi5/rM=)
                          3: 323830343a313133303a3a2f33322d3438203d3e20323633363634.roa (hash: iN1AZ4hIa7vYMf+hHc0XkSCiRrREQ89RAGba6RDPqbY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:aa:ca:91:a4:91:89:0a:0e:3f:f8:28:e4:11:99:83:5b:be:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98795ED91D95FB396CC99C94860EA4CAD59F6435
        Validity
            Not Before: Aug  8 14:10:34 2025 GMT
            Not After : Aug  9 15:55:34 2025 GMT
        Subject: CN=A6B257D8F1228BEBEFD6D01FD27FEB66E16766B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:9b:ea:85:83:2c:a2:8a:1b:9e:b8:54:fd:
                    1c:3e:f7:95:f0:19:79:ce:52:0b:07:41:5b:ff:e7:
                    dc:75:0e:07:6d:d6:fb:fe:37:f9:64:9a:fd:9e:57:
                    84:15:c2:79:f3:ad:96:dc:9c:a6:d7:a8:7e:73:a8:
                    f9:9b:91:c0:ca:d9:42:77:9a:ca:a4:84:84:bc:4d:
                    36:da:83:f8:e6:1d:57:f5:5e:c2:92:9d:96:c0:80:
                    a6:01:e2:c7:34:df:24:e2:77:30:a6:d2:c7:34:78:
                    ce:73:bd:a5:d5:ee:48:30:fd:33:61:7f:12:89:7e:
                    6b:54:e6:b4:de:f3:da:e6:f3:5a:94:ca:92:53:cd:
                    dc:cc:f9:a2:94:3c:54:3c:90:a8:c8:c2:4b:4d:22:
                    40:a6:2c:cf:c2:71:60:01:39:1b:6e:d9:58:76:50:
                    2e:35:6e:22:65:2e:59:c6:58:10:36:bd:44:b9:84:
                    58:2f:9f:bd:a0:c3:0d:e3:5f:0f:f0:08:09:3c:0c:
                    8b:13:33:eb:4e:85:98:92:e3:4c:69:c2:45:1f:e7:
                    a5:bb:cd:8b:e8:27:c5:fd:90:f3:23:60:57:da:44:
                    33:dd:ed:d0:99:b6:cd:93:cd:c2:be:98:bc:44:d8:
                    8b:8d:a8:9a:bf:85:99:a5:23:23:87:5d:0f:ac:ad:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B2:57:D8:F1:22:8B:EB:EF:D6:D0:1F:D2:7F:EB:66:E1:67:66:B2
            X509v3 Authority Key Identifier:
                keyid:98:79:5E:D9:1D:95:FB:39:6C:C9:9C:94:86:0E:A4:CA:D5:9F:64:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/1/98795ED91D95FB396CC99C94860EA4CAD59F6435.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:89:df:07:4a:4a:3e:05:6d:60:88:a4:ed:4a:dd:8a:9a:
         1c:cf:a4:5e:8a:58:73:fc:69:b4:d0:db:3a:78:dd:2c:86:c4:
         1f:68:df:64:97:d4:24:c0:a9:cd:f8:ca:7e:6e:e8:83:b3:26:
         f0:73:d6:9c:3d:f8:00:c7:75:cc:6c:c3:a9:f1:87:a6:09:0c:
         4a:12:3d:a8:bc:24:0a:e9:87:5a:d8:93:ef:e8:04:88:a9:10:
         50:ff:b5:f5:c1:0b:a3:d1:52:77:2e:45:7f:82:b6:63:14:87:
         51:c3:f3:f6:a2:79:9a:c6:83:29:fd:71:54:57:81:c5:9b:31:
         d7:32:aa:24:42:47:a7:f3:b3:d5:be:88:d0:2c:68:eb:71:f4:
         dd:d5:1f:28:f3:d6:3d:a0:c2:cc:32:7d:98:41:0b:bc:88:90:
         65:77:d7:1b:f3:74:e8:82:3a:be:34:55:54:36:b2:18:82:a3:
         0d:b7:54:06:bf:19:11:9b:9d:85:ed:4f:2e:5c:ac:3c:0b:5a:
         e8:38:da:7e:6a:e5:23:31:54:ab:f0:6e:b3:2d:f0:61:23:fd:
         c6:79:c0:49:2c:b7:0e:5a:67:d0:9d:2e:92:ae:28:05:a1:ad:
         a6:4c:24:ea:1f:1f:3b:87:5a:a7:e7:32:cf:8b:54:dd:e9:f1:
         06:03:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:51 2025 by rpki-client