Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
File:                     5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft (raw, json)
Hash identifier:          /Y+y4rkTpbjSUFMfLv0YqS75yFfUY1ap9zrU1D4v+hk=
Subject key identifier:   2E:7F:D8:38:76:84:23:D3:9E:40:C4:33:29:4E:94:C7:42:F6:97:88
Authority key identifier: 51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A
Certificate issuer:       /CN=5196AC1F82B6DD9F736E549759F63EC70D9AC64A
Certificate serial:       4D8E226CB042CBA50F6C4BE35CE5D104DC869165
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft
Manifest number:          8B
Signing time:             Fri 01 Aug 2025 23:58:59 +0000
Manifest this update:     Fri 01 Aug 2025 23:53:59 +0000
Manifest next update:     Sun 03 Aug 2025 02:15:59 +0000
Files and hashes:         1: 323830343a386539383a3a2f33322d313238203d3e20323733343336.roa (hash: ZgE7mkajnWfDvkfEErUbfcj4/me8cWyO3HdXxbdwaYw=)
                          2: 5196AC1F82B6DD9F736E549759F63EC70D9AC64A.crl (hash: wuxAvSwZOQa6mArMb+dJylZ4Xh7WlniyElNDkYSiMmg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:22:6c:b0:42:cb:a5:0f:6c:4b:e3:5c:e5:d1:04:dc:86:91:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5196AC1F82B6DD9F736E549759F63EC70D9AC64A
        Validity
            Not Before: Aug  1 23:53:59 2025 GMT
            Not After : Aug  3 02:15:59 2025 GMT
        Subject: CN=2E7FD838768423D39E40C433294E94C742F69788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:8c:24:03:41:21:99:96:83:39:00:77:8e:
                    4c:31:17:bf:95:d8:a0:fd:de:73:a0:60:e7:99:4a:
                    a7:63:1b:2c:e8:03:66:a4:7c:db:31:97:ca:87:20:
                    60:6d:93:1e:21:09:36:07:2c:f8:0d:50:bc:dd:36:
                    2f:f7:2d:6a:a2:37:e6:38:22:5f:3d:e7:89:6d:a6:
                    85:45:00:19:09:c5:a8:a5:72:28:57:d6:d8:16:eb:
                    11:31:1f:41:e2:99:c7:ca:ea:eb:2c:de:19:34:2a:
                    bd:75:ea:25:d0:ab:84:e2:49:ec:4a:30:7f:0c:58:
                    1b:5b:15:21:bb:3b:57:9b:22:51:06:49:18:3e:68:
                    70:8d:ee:f3:e6:d0:38:b2:91:30:56:40:1f:15:93:
                    5c:f2:45:0a:c8:e4:87:07:15:80:11:4e:35:f1:91:
                    b9:be:bf:17:2d:a3:1e:5c:41:a7:9f:2c:77:16:8b:
                    de:3f:50:0c:e4:b9:ed:f8:94:cd:c0:b4:8d:23:ca:
                    dc:5e:db:62:43:d8:4b:e7:de:ab:6e:0e:7e:ac:02:
                    2c:01:74:59:99:56:92:f6:4b:2b:18:12:58:47:0f:
                    db:a9:16:7a:05:5c:06:39:95:88:5b:2d:ae:e8:bc:
                    b7:8d:00:5a:9a:47:9e:87:a4:98:39:23:5f:73:f1:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7F:D8:38:76:84:23:D3:9E:40:C4:33:29:4E:94:C7:42:F6:97:88
            X509v3 Authority Key Identifier:
                keyid:51:96:AC:1F:82:B6:DD:9F:73:6E:54:97:59:F6:3E:C7:0D:9A:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5196AC1F82B6DD9F736E549759F63EC70D9AC64A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:59:f0:73:22:b1:35:c6:76:95:6e:46:08:99:1e:87:81:
         d6:1b:c5:0d:b5:a4:13:e3:e4:6e:a0:22:7b:c5:96:98:2e:9e:
         e4:c7:9d:ef:89:60:51:db:9c:69:03:0d:44:45:24:b7:70:2d:
         47:46:5a:70:bd:bb:62:6e:d1:ec:46:55:17:1c:6d:72:8f:e4:
         58:a5:6b:b6:f9:7c:45:ec:c4:d5:8a:16:75:53:2b:1f:86:85:
         dc:f5:9f:ea:28:a3:96:db:61:f9:20:e5:29:ca:b8:d0:cc:5a:
         95:4a:c9:d7:a6:41:c2:1b:8d:08:1c:4e:be:ff:09:4e:30:9e:
         43:8b:c4:9c:5b:45:43:5d:da:2d:51:7b:6c:b3:5a:30:bb:af:
         9a:90:3d:77:a7:4c:38:cd:d6:dd:80:74:81:5f:24:cf:35:0c:
         9f:8f:48:0c:f2:15:f9:bf:11:a6:cb:fb:fd:83:83:5d:84:e4:
         71:b2:74:e1:21:5c:28:79:8a:25:26:94:f3:38:cb:e4:70:a1:
         5a:0d:e5:9b:16:e5:1a:00:8f:d1:cb:a8:06:69:cd:9a:e3:0e:
         0b:46:51:bf:dc:b1:54:62:c8:00:28:b5:26:50:e3:9e:c9:9c:
         34:bf:80:6c:07:b9:89:68:c3:1f:ab:93:65:9a:e0:13:4d:01:
         a6:71:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:59 2025 by rpki-client