Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
File:                     0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft (raw, json)
Hash identifier:          yE/ZV4r1zrv0RkweA4gip7QQM9gyY01U5xJeCwxyJ/w=
Subject key identifier:   85:A5:37:96:61:6A:55:A5:7C:DE:40:9A:F3:01:50:BC:72:75:2B:49
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       33A70523037B7E89AA293F577295365BF363A7C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
Manifest number:          0214
Signing time:             Tue 29 Apr 2025 13:44:09 +0000
Manifest this update:     Tue 29 Apr 2025 13:39:09 +0000
Manifest next update:     Wed 30 Apr 2025 13:59:09 +0000
Files and hashes:         1: 3138312e3232342e35342e302f32342d3234203d3e20323636333132.roa (hash: 4q3y5rIgyR+ACiQ9VRu96wOCkI5Ajf36RFvW2GE9sfI=)
                          2: 3137302e3233382e35392e302f32342d3234203d3e20323636333132.roa (hash: MPwhXLVyIKfSEGPVE7ZV3DCNnFphfdDCvRdNEYw7Jtw=)
                          3: 3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa (hash: ExheNQpEK0E9Do+dV52nBY7MmnbjZx58zvI98w2xuvM=)
                          4: 3138392e39302e3233352e302f32342d3234203d3e20323636333132.roa (hash: jMUUt4n/4abfVTIqxbP5/IhQ1uBN2BW8CZMQQsb0U90=)
                          5: 3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa (hash: OJGQL+D1xd10N/t+KyIak7B4zbCcdBv67aK/mjx1TAQ=)
                          6: 3137302e3233382e35362e302f32342d3234203d3e20323636333132.roa (hash: Tt7zrfnTr46Tw6B99TYxvgXg2wVXBpHJfLjZluMbDCU=)
                          7: 3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa (hash: 1u9EubRjQkeayW62I4kI3TdX3A/9Kayea41FAZX4BQM=)
                          8: 3138392e39302e3233342e302f32342d3234203d3e20323636333132.roa (hash: qI8hDyw1hNC1BQaSMGsSuolt4fYzbKAYxhMvpFFA5fA=)
                          9: 323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (hash: p+tiLooqfNvykHBiRTNNzroZG0pHHKyehY7oKzm/vng=)
                          10: 3137302e3233382e35382e302f32342d3234203d3e20323636333132.roa (hash: 2rEmdKgz//Nur4ZHrC4T1nDivkOAOv/P7I+ZjVjG3sg=)
                          11: 323830343a333565303a3a2f33362d3336203d3e20323636333132.roa (hash: UdmWjMeCSrwQpqWFpRLztSxTg70i1z4sYAlUkM0Fjxg=)
                          12: 3138392e39302e3233322e302f32322d3232203d3e20323636333132.roa (hash: lvD9uxglrAThpU2F4EJlsyp789Xyshasv4QwNpxoHEY=)
                          13: 3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (hash: VS3KH0PiNeiQcK83tqryKnRiXIQUtKzkzwf3JDNGOyg=)
                          14: 3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa (hash: LEwBWhzdVi3cUWayAjFE9KVAaEikeE0pKkBqJb5Wp/8=)
                          15: 3138392e39302e3233332e302f32342d3234203d3e20323636333132.roa (hash: GnGf9BvoVqXoLKydDj6Yn9Z5YQbv0v029RnacPBOnm8=)
                          16: 323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa (hash: QOADgJinGgmZJLgUy1oefMpEhNK1U8m+rAg2GUez8wM=)
                          17: 0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl (hash: QO9kCR3sDsvDyBwl6/RimnMHA5xtpR0y2+UlcGiI5J8=)
                          18: 3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa (hash: DjCSjxDO6UMR7RsL+E+7fY5jwinWW66hW063wWQ5YVE=)
                          19: 3138312e3232342e35352e302f32342d3234203d3e20323636333132.roa (hash: iaP5k2tb2JCGdyMTfMZv0GZwNmIr/eNRVvi6W0/lbQA=)
                          20: 3138392e39302e3233322e302f32342d3234203d3e20323636333132.roa (hash: EtrgBfoISAhFWrBxSV+es1WOk3NACV1i9TbkW7exOo4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a7:05:23:03:7b:7e:89:aa:29:3f:57:72:95:36:5b:f3:63:a7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Apr 29 13:39:09 2025 GMT
            Not After : Apr 30 13:59:09 2025 GMT
        Subject: CN=85A53796616A55A57CDE409AF30150BC72752B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:d4:4c:b0:af:72:0f:56:e9:a0:7a:46:67:
                    e5:7e:25:ab:af:63:d8:ba:57:e1:1a:8b:e7:75:70:
                    8e:52:b6:eb:bd:d8:50:11:27:0c:13:a7:15:ed:0f:
                    98:e7:91:e5:cf:7f:eb:75:f4:75:bd:cf:71:e2:79:
                    62:58:56:1f:5d:18:fd:b1:33:71:28:fb:ab:36:5a:
                    6f:be:5c:1f:de:8a:a0:54:68:55:8b:39:d7:1f:83:
                    e0:79:3c:da:c7:28:67:45:8f:6b:99:b3:4c:e2:17:
                    56:7d:4c:7d:f1:c0:88:59:2c:74:05:22:b5:d5:35:
                    c0:97:41:ce:2f:c6:da:4c:63:3f:bb:da:d8:8e:fb:
                    dd:fd:43:31:2c:34:1e:24:27:17:6e:44:96:a0:0f:
                    5d:59:a8:93:a2:cc:cf:b7:6f:69:f9:94:9e:83:a4:
                    e4:2d:ed:d4:f1:c5:7a:69:e0:0c:e5:61:b5:62:9c:
                    56:6c:fd:5c:ba:8e:8f:16:fd:8c:27:57:c1:5a:31:
                    be:a6:b9:e1:f8:0b:18:58:d1:6b:d7:ba:74:d7:62:
                    a3:91:23:f2:07:cf:e4:40:5d:dc:43:a8:0e:31:32:
                    97:1d:b1:7b:10:7f:6a:68:0f:f2:27:65:f0:75:c8:
                    01:24:b4:c7:58:f9:79:31:95:6c:13:d6:a2:c2:3e:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:37:96:61:6A:55:A5:7C:DE:40:9A:F3:01:50:BC:72:75:2B:49
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:c6:70:3b:f2:ca:33:d9:9e:a4:77:2c:6c:96:ce:68:48:
         97:b9:86:98:5f:4a:f0:18:71:28:af:00:35:66:4c:ca:9d:df:
         22:41:8d:4b:a5:59:71:be:a3:f0:d8:85:62:fe:22:d4:9e:a6:
         89:9a:a5:11:22:da:cb:81:00:ac:2a:ba:a1:aa:da:e8:b3:04:
         21:37:3b:12:65:a0:5d:7d:fb:7f:19:e1:7c:35:50:f5:32:12:
         6d:5c:35:84:b7:97:6a:3b:4e:fb:30:26:f6:b3:e9:78:9f:75:
         4e:59:b4:8e:7e:38:2a:0b:47:d0:7f:35:ce:9c:e9:4a:d0:6a:
         38:81:10:27:78:01:0e:61:dd:e1:7a:4d:6c:11:84:dd:f6:f9:
         99:88:55:dd:c2:53:92:86:bf:30:a2:f7:6e:1a:ec:c8:11:d6:
         7a:6e:06:1d:cc:59:67:a6:4f:b1:0b:f8:bf:37:5a:b2:53:02:
         8f:48:35:1e:6a:25:9e:20:d5:18:59:e9:3f:e8:40:dc:12:ab:
         86:0d:9e:e8:69:26:10:d5:b7:cc:c3:a6:be:3b:97:cb:96:a3:
         30:13:5b:78:56:d4:e2:34:d8:fe:47:6e:c7:1c:7d:84:69:88:
         45:2d:43:e6:8c:eb:3d:1b:0e:87:f9:80:bb:b6:4b:f8:05:88:
         43:ab:c1:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM6cFIwN7fomqKT9XcpU2W/Njp8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNTA0MjkxMzM5MDlaFw0yNTA0MzAxMzU5MDlaMDMxMTAvBgNV
BAMTKDg1QTUzNzk2NjE2QTU1QTU3Q0RFNDA5QUYzMDE1MEJDNzI3NTJCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjdRMsK9yD1bpoHpGZ+V+Jauv
Y9i6V+Eai+d1cI5Stuu92FARJwwTpxXtD5jnkeXPf+t19HW9z3HieWJYVh9dGP2x
M3Eo+6s2Wm++XB/eiqBUaFWLOdcfg+B5PNrHKGdFj2uZs0ziF1Z9TH3xwIhZLHQF
IrXVNcCXQc4vxtpMYz+72tiO+939QzEsNB4kJxduRJagD11ZqJOizM+3b2n5lJ6D
pOQt7dTxxXpp4AzlYbVinFZs/Vy6jo8W/YwnV8FaMb6mueH4CxhY0WvXunTXYqOR
I/IHz+RAXdxDqA4xMpcdsXsQf2poD/InZfB1yAEktMdY+XkxlWwT1qLCPqpVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhaU3lmFqVaV83kCa8wFQvHJ1K0kwHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3MzdhM24vMS8w
QTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWWzGcDvyyjPZnqR3LGyWzmhIl7mGmF9K8BhxKK8ANWZMyp3fIkGNS6VZcb6j
8NiFYv4i1J6miZqlESLay4EArCq6oara6LMEITc7EmWgXX37fxnhfDVQ9TISbVw1
hLeXajtO+zAm9rPpeJ91Tlm0jn44KgtH0H81zpzpStBqOIEQJ3gBDmHd4XpNbBGE
3fb5mYhV3cJTkoa/MKL3bhrsyBHWem4GHcxZZ6ZPsQv4vzdaslMCj0g1HmolniDV
GFnpP+hA3BKrhg2e6GkmENW3zMOmvjuXy5ajMBNbeFbU4jTY/kduxxx9hGmIRS1D
5ozrPRsOh/mAu7ZL+AWIQ6vBPg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:27:27 2025 by rpki-client