Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.mft
File:                     B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.mft (raw, json)
Hash identifier:          4mOf/TkLgvRSq3vwbc+Y+b9DCSk+jvTAJFPYtasmsCA=
Subject key identifier:   50:5C:92:D1:93:90:17:7A:9F:02:51:F4:4F:B9:1F:74:3E:C1:40:CE
Authority key identifier: B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D
Certificate issuer:       /CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
Certificate serial:       79C1A58FC6CBEFD4D6C473B80E275216100FE72E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.mft
Manifest number:          13
Signing time:             Thu 07 Aug 2025 22:40:14 +0000
Manifest this update:     Thu 07 Aug 2025 22:35:14 +0000
Manifest next update:     Fri 08 Aug 2025 23:14:14 +0000
Files and hashes:         1: 323830343a373037383a3a2f33322d3333203d3e20323730373238.roa (hash: 04sSW+12oab6zd5RgPWCP0ndooi9YgdeiQsbIwXUJ9s=)
                          2: 3138372e3130322e3233322e302f32322d3234203d3e20323730373238.roa (hash: L4fj2gU7PPY+o301GXiqMMP7Mh6Hztcy/SSlY72JqK0=)
                          3: B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.crl (hash: kOUAN8olarLDtc5Kx2u+0/ycMtjAgxaY7wOTiiwThRY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c1:a5:8f:c6:cb:ef:d4:d6:c4:73:b8:0e:27:52:16:10:0f:e7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
        Validity
            Not Before: Aug  7 22:35:14 2025 GMT
            Not After : Aug  8 23:14:14 2025 GMT
        Subject: CN=505C92D19390177A9F0251F44FB91F743EC140CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:e2:d8:39:b7:d9:a1:29:2c:ba:29:bc:a6:
                    34:59:24:e2:70:ee:79:6c:6c:4c:12:84:77:70:04:
                    44:37:6b:d0:d1:2b:c7:0a:98:d2:0e:b0:c0:f6:ae:
                    a6:5b:05:5e:ff:3b:7f:98:a0:ff:da:32:a4:7d:bd:
                    07:f1:e3:49:b9:4e:6f:7b:39:a8:54:55:95:56:e0:
                    3e:cf:01:ec:5b:46:a9:ec:d3:2c:9d:73:98:c6:d0:
                    b3:77:93:9a:75:94:f9:ee:3a:21:33:18:75:16:d8:
                    24:1d:45:f7:cb:6d:ba:60:34:94:75:7a:a8:71:46:
                    2b:66:a7:62:23:27:c6:cc:c4:be:e2:cd:82:a4:51:
                    0d:33:e8:89:67:e0:14:a9:02:36:cc:2c:2f:06:b0:
                    77:71:ee:e6:e5:f1:d1:e2:0d:ef:72:85:44:3c:d4:
                    be:2a:00:02:62:ba:90:6d:26:83:60:fe:5e:73:c8:
                    6a:34:34:b5:e5:6a:5b:83:2d:f4:1b:81:0b:ac:03:
                    77:d4:22:50:30:29:d6:98:3b:8c:84:b4:45:55:c3:
                    fe:73:ca:46:a9:2c:62:43:77:d6:7c:ba:e7:de:36:
                    35:1a:a6:8c:b0:ba:66:f5:0a:f6:a0:1f:a9:3b:f5:
                    45:7f:99:f5:e8:f1:8a:36:33:89:c1:f9:4b:d8:91:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:92:D1:93:90:17:7A:9F:02:51:F4:4F:B9:1F:74:3E:C1:40:CE
            X509v3 Authority Key Identifier:
                keyid:B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:3d:f7:3b:67:df:e0:19:37:c5:6c:c3:ed:d2:3a:8c:fd:
         5c:9e:0c:a8:26:e0:6c:de:9d:53:a9:d2:89:13:66:8d:82:09:
         b0:3d:8a:bf:50:57:05:89:71:3a:08:33:9a:61:fa:c6:d7:2c:
         16:de:c0:04:ef:01:1a:56:44:d9:0d:fb:bc:61:0e:79:3d:b7:
         0b:28:9c:4e:a6:c3:50:5a:25:50:99:98:2b:56:fe:ab:93:9b:
         0a:b5:08:8b:b3:0c:7e:86:01:e4:d0:a5:c2:a3:16:45:4d:c6:
         63:c5:16:8a:62:79:be:cf:8f:38:63:9c:21:31:06:83:25:84:
         b1:37:ec:33:95:05:30:b8:ad:d1:c9:a6:bc:ef:70:ce:c5:d3:
         a9:15:f2:f6:92:13:16:d6:20:0f:2f:ef:4c:03:86:18:7a:1d:
         78:f5:bc:40:a9:a9:e9:5b:27:53:88:99:84:7d:00:aa:ec:95:
         f4:51:3d:e1:09:18:00:76:e1:15:1b:48:cc:2c:49:84:f2:2e:
         62:4a:e3:58:84:79:06:47:20:41:b5:2d:3d:02:7e:79:98:e5:
         53:c4:26:12:67:5c:84:3b:41:7f:0a:bd:e4:a9:09:79:cf:03:
         70:d8:96:be:d9:45:b7:d2:07:87:d3:cc:59:ed:e3:2d:3e:f0:
         ad:47:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:55:40 2025 by rpki-client