Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.mft
File:                     200D6A4F731D3AA371C0F0BED5EA7D32A5998642.mft (raw, json)
Hash identifier:          H+d1M8MJIH9vmpHOkdqePl78HgZdpZD0xcYIN7iJEJk=
Subject key identifier:   AE:46:A0:1E:CF:9D:54:A7:35:42:DE:C8:89:DC:B0:EC:60:EF:5E:B6
Authority key identifier: 20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42
Certificate issuer:       /CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
Certificate serial:       681420F27872F883C60353404A0C5B648725DA6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.mft
Manifest number:          0209
Signing time:             Thu 26 Feb 2026 17:42:20 +0000
Manifest this update:     Thu 26 Feb 2026 17:37:20 +0000
Manifest next update:     Fri 27 Feb 2026 19:09:20 +0000
Files and hashes:         1: 323830343a343064633a3a2f33322d3332203d3e20323635393836.roa (hash: QE45ZeAAgkwkt1zz3vINX34MwHgA3N3UudjZehNOA1s=)
                          2: 3138312e3139312e33352e302f32342d3234203d3e20323635393836.roa (hash: ZXw2eFdxoq6V+1zUiqyftRAfi3Nap4nLzvY5L+qULXM=)
                          3: 323830343a343064633a633030303a3a2f33342d3334203d3e20323635393836.roa (hash: 2HpkVc/t+TOc30BX63bxbnrJ6Mh0xtzaLwp/+nnwPYU=)
                          4: 323830343a343064633a343030303a3a2f33342d3334203d3e20323635393836.roa (hash: 5rBXfxGt5FwbOiquEd+uKBwu9bDxbW1jtFdzIjFeSqE=)
                          5: 3138312e3139312e33322e302f32322d3232203d3e20323635393836.roa (hash: SxGUzwHJ4nOh1JJ5ZAZUixevnoBz0i0tPBVst9kq2NA=)
                          6: 323830343a343064633a383030303a3a2f33342d3334203d3e20323635393836.roa (hash: mlKKKulKhTHVEDIA/TzqZhuT3a30zhe+K8lXZ01aB88=)
                          7: 323830343a343064633a3a2f33342d3334203d3e20323635393836.roa (hash: +qUupL7lmcDDiMBrttTp/eEjnxtM1AAcNzHfDGGL8lc=)
                          8: 200D6A4F731D3AA371C0F0BED5EA7D32A5998642.crl (hash: NmjxC4Z0e7tPrRftvhKZ5fiA/W9SzqNne5cnd7QylkE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:14:20:f2:78:72:f8:83:c6:03:53:40:4a:0c:5b:64:87:25:da:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
        Validity
            Not Before: Feb 26 17:37:20 2026 GMT
            Not After : Feb 27 19:09:20 2026 GMT
        Subject: CN=AE46A01ECF9D54A73542DEC889DCB0EC60EF5EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:fd:5e:22:d9:87:0a:a4:ed:8d:11:61:61:
                    bd:69:1b:0f:66:64:3a:fe:bd:15:f2:a0:2d:68:f3:
                    c9:73:34:a2:95:51:f0:3c:0f:96:5e:69:bf:de:a4:
                    3c:8a:b8:4c:3e:9d:cc:11:ab:f6:77:b8:24:5d:02:
                    92:83:2d:4e:24:58:e6:ef:0d:85:d6:09:79:d4:90:
                    6d:da:20:ac:55:90:55:cf:c8:7a:c2:39:3a:b5:af:
                    19:47:f3:21:3d:6a:77:53:84:eb:07:d7:50:99:b3:
                    f1:dc:c4:aa:76:01:e2:7d:3a:dd:24:51:80:60:31:
                    f4:76:05:98:01:78:4a:54:dd:d2:78:53:d1:0d:f3:
                    e0:76:b3:f6:84:bc:ca:74:32:64:e5:9a:57:21:83:
                    63:37:5f:8f:e4:01:d1:ab:4e:b3:c4:78:72:5e:bd:
                    09:f5:96:e8:15:1c:59:6c:2c:7f:4b:07:f1:8c:f1:
                    07:b8:d8:55:1c:c3:47:f9:91:47:e9:a2:56:e9:60:
                    1d:61:58:85:14:ed:29:b9:9b:88:e7:6b:72:e1:c0:
                    51:f9:b6:93:06:a6:ff:88:3f:30:71:a6:47:45:dc:
                    e8:3f:38:dc:be:cd:bb:96:9e:18:65:45:ff:db:c2:
                    55:98:3b:c8:dc:5d:14:5b:e7:69:47:c9:fc:c3:63:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:A0:1E:CF:9D:54:A7:35:42:DE:C8:89:DC:B0:EC:60:EF:5E:B6
            X509v3 Authority Key Identifier:
                keyid:20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:3b:b4:21:b8:87:7b:9e:40:80:05:87:a2:8e:e8:84:88:
         9e:df:c9:aa:f4:99:3b:97:b8:44:cf:69:32:99:42:60:f3:42:
         e8:98:7e:99:97:5b:2f:54:f0:02:8a:91:7f:7b:10:69:d8:4f:
         df:a8:6d:79:b6:ef:29:95:7e:79:41:30:5c:a9:ba:42:57:14:
         9c:93:fc:e9:d5:34:9e:85:e0:4f:42:72:c4:81:2a:b0:a0:36:
         79:9a:72:b3:64:d6:d4:e8:e1:de:6e:53:8d:6c:3f:a5:da:b0:
         dc:a4:a7:f4:ed:ec:ed:25:28:4c:3a:48:92:c8:6b:02:b6:4d:
         c4:7f:2b:18:74:ad:f0:81:a9:d7:1e:9a:ef:21:a5:e3:12:be:
         ec:ad:fe:ef:95:1a:42:a0:8c:19:9c:35:94:c9:99:27:48:a8:
         da:a7:b1:0a:fc:38:f9:47:7e:18:c6:13:d4:a0:00:37:7a:1a:
         6e:77:46:06:55:af:9c:9d:a1:db:67:f0:9d:4b:0d:81:4e:17:
         ef:d4:e4:89:84:5e:42:0b:76:1f:83:27:a8:8c:5a:98:b5:45:
         9d:69:84:df:75:7c:63:1d:18:de:63:70:90:9d:13:a9:f4:74:
         98:b2:18:61:d0:70:cc:ad:58:b2:cf:d7:52:95:77:9a:02:f5:
         ec:17:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:22 2026 by rpki-client