Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.mft
File:                     919559B7857557ABD92797154F2A7923EF470015.mft (raw, json)
Hash identifier:          dOjjVdLVBxY2mKEEQibv57KMgVygMbx5qyLtNOYpPus=
Subject key identifier:   78:CE:CC:A8:29:28:FC:7B:75:BF:A3:BA:AF:45:D2:90:47:5B:6E:1D
Authority key identifier: 91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15
Certificate issuer:       /CN=919559B7857557ABD92797154F2A7923EF470015
Certificate serial:       38C9D8046685CB01B6F82CF806168EA3628F7723
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.mft
Manifest number:          1E
Signing time:             Thu 16 Apr 2026 14:16:49 +0000
Manifest this update:     Thu 16 Apr 2026 14:11:49 +0000
Manifest next update:     Fri 17 Apr 2026 14:48:49 +0000
Files and hashes:         1: 34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (hash: BqpMMrdgvJXPwMV9I0FuZ0jLqdn4Tu0A9eoKoRsA5Yk=)
                          2: 323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (hash: qxSD4GJwXQV+15xLTNiZYCNZOv8zlEwV5BhWcUIXU7k=)
                          3: 34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (hash: XxsV/NQ38PKtlNeC6xmNLlw7PDmCTmCEq3yjlNS1IWA=)
                          4: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (hash: qSFclo2o0tNDkVdbNkjYHiI2quKZZ8fXG7F8XjA1PRg=)
                          5: 919559B7857557ABD92797154F2A7923EF470015.crl (hash: zPiDe5qtbQMDfqTsW0J5sMlruC3hknkBasIuWS78+z8=)
                          6: 323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (hash: GE4Qh7YNrzjdSPIO7mjh4QCLYUbVVGzWfLJ6Cep687Q=)
                          7: 34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (hash: ScR43/ZwICflc1VwAN4WBgVfvmcPdI8kY8ww7SCnkP4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c9:d8:04:66:85:cb:01:b6:f8:2c:f8:06:16:8e:a3:62:8f:77:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919559B7857557ABD92797154F2A7923EF470015
        Validity
            Not Before: Apr 16 14:11:49 2026 GMT
            Not After : Apr 17 14:48:49 2026 GMT
        Subject: CN=78CECCA82928FC7B75BFA3BAAF45D290475B6E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:de:56:de:2b:1b:e4:76:ed:f0:5d:38:70:
                    49:d6:45:5f:40:23:88:23:1a:a2:cf:a3:72:c2:ef:
                    5f:a6:bc:e7:19:6c:fd:b9:54:d7:c1:f7:e0:09:6f:
                    70:85:7f:23:77:27:2b:09:e1:2a:75:4e:05:29:f2:
                    30:23:29:c3:4a:9b:3b:03:e3:da:3a:72:10:16:da:
                    93:ff:85:9d:8f:a3:02:3c:58:f1:71:a4:cf:a0:3a:
                    37:e6:81:2f:3b:cd:a6:37:77:b2:ce:ff:32:af:7b:
                    c9:b8:e1:6b:b6:90:c5:b9:d5:17:7b:d2:4f:74:39:
                    33:ca:21:05:61:af:55:67:3a:37:32:a5:a3:2d:12:
                    b0:d8:cb:89:01:e2:0a:0a:32:3f:13:ed:30:d9:ca:
                    98:65:63:ae:6e:74:06:24:ea:81:ab:e6:91:fe:f3:
                    47:4b:02:63:c3:c6:29:3d:11:65:28:af:86:b5:c1:
                    36:89:f1:3a:48:85:e9:f2:88:6f:12:ab:49:da:18:
                    28:f3:4a:22:9a:83:5a:2b:67:e4:fb:e0:26:17:1c:
                    83:7f:1f:80:ed:4f:26:af:d3:6b:a4:05:f7:fd:e4:
                    2d:53:10:14:71:ce:9a:62:5d:0d:29:3b:d9:cf:5a:
                    38:23:0a:f2:99:05:0e:c2:0f:3f:74:f6:9a:64:c9:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:CC:A8:29:28:FC:7B:75:BF:A3:BA:AF:45:D2:90:47:5B:6E:1D
            X509v3 Authority Key Identifier:
                keyid:91:95:59:B7:85:75:57:AB:D9:27:97:15:4F:2A:79:23:EF:47:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/919559B7857557ABD92797154F2A7923EF470015.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/919559B7857557ABD92797154F2A7923EF470015.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f2:8b:0b:08:af:42:8b:0c:1e:a9:c9:62:a3:bb:ad:9c:76:
         c4:68:5c:1a:90:61:e9:4e:f1:3d:bf:7a:ce:27:ca:b5:a5:2c:
         cd:a2:e8:e5:5b:c3:0b:40:da:eb:b0:3a:6a:40:e7:83:c8:4d:
         d7:fe:36:6a:d5:58:06:52:26:13:5f:fd:72:63:d7:4d:a0:e0:
         3e:95:e6:c2:81:9d:52:7f:9f:cc:8d:c7:a8:e2:cf:29:82:cb:
         64:11:42:c5:c3:09:1f:05:f2:b4:b3:09:f5:ed:14:ea:ea:98:
         9f:83:fb:d9:f5:27:8f:3a:a9:2e:8d:e6:7b:2e:52:d2:d6:e7:
         b5:6a:20:0c:71:52:b5:73:d5:b0:f3:0b:89:02:08:99:96:f1:
         6c:3f:c0:be:4b:60:8b:81:39:73:b3:47:aa:a7:02:34:03:02:
         68:bb:61:44:9b:65:0c:53:a6:c1:a2:44:60:45:08:d6:04:ce:
         0a:9a:5d:83:62:5d:5f:64:47:df:6c:8f:63:0e:62:28:8d:bb:
         8e:7a:dd:e5:08:c1:b3:04:28:08:3b:01:18:f4:86:ab:ea:60:
         b6:00:21:75:89:7c:a8:34:ef:da:73:75:d5:88:c3:47:12:6d:
         a9:2f:fc:b9:2b:b5:ce:5d:be:3c:64:9e:c8:7f:40:61:d9:b7:
         d5:f7:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:43 2026 by rpki-client