Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
File:                     AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft (raw, json)
Hash identifier:          cOma45UdkI5tZy51M8IluYBcjfWPXq7tmMAeWRXcxoE=
Subject key identifier:   C2:5A:AF:F5:DE:2D:DE:92:68:F9:3C:94:41:27:D4:30:25:75:6B:55
Authority key identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E
Certificate issuer:       /CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
Certificate serial:       13D71099F10E2FBBB9E958C256B8C6682DA3EDF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft
Manifest number:          010A
Signing time:             Fri 08 Aug 2025 21:16:12 +0000
Manifest this update:     Fri 08 Aug 2025 21:11:12 +0000
Manifest next update:     Sat 09 Aug 2025 23:38:12 +0000
Files and hashes:         1: 3138372e312e3131322e302f32302d3234203d3e203533313633.roa (hash: KEPOlyimGfzK+dgAsfUZhXEmJvr7GPULzbKCjyGEgB8=)
                          2: 323830343a313033303a3a2f33322d3634203d3e203533313633.roa (hash: X6qBBtxq6WBoSpXZi+rqpkjudYLjH0UEqTpgZkZ6Y8s=)
                          3: AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl (hash: Zyg+dmLIqImAAXXrunOWsXtta0QZswNFAxwkp8Y0J5A=)
                          4: 3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (hash: 8LQ1dgzvynTBD/pGJssMbvz4NrsjrlS5dsbgTBe/XR8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:10:99:f1:0e:2f:bb:b9:e9:58:c2:56:b8:c6:68:2d:a3:ed:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E
        Validity
            Not Before: Aug  8 21:11:12 2025 GMT
            Not After : Aug  9 23:38:12 2025 GMT
        Subject: CN=C25AAFF5DE2DDE9268F93C944127D43025756B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:97:77:78:fd:f8:8f:fc:14:be:e5:84:19:
                    d1:c0:d9:01:03:8c:ab:1b:cc:ef:9a:3b:ed:d6:ac:
                    dd:d5:70:03:42:07:1e:16:ec:a1:67:ee:43:67:c1:
                    10:70:ec:42:c9:9d:be:08:8e:e1:0b:5d:0e:24:c6:
                    2a:18:24:98:ef:e8:76:cc:d7:4c:9c:0c:43:2f:cc:
                    6e:83:2b:4f:26:3c:b9:19:4e:b6:c3:a6:4d:91:79:
                    38:c2:a2:58:df:08:bc:8a:bc:92:c2:d9:b3:8d:25:
                    9b:f7:d1:43:15:75:b4:9f:12:bd:6f:95:84:92:2d:
                    20:d7:c4:21:0c:db:41:98:b3:58:64:8e:1e:65:09:
                    d6:72:d4:49:4d:f4:9f:e8:a5:30:92:77:32:fc:6c:
                    53:2b:5e:88:5a:39:61:c5:39:2b:81:97:8b:e7:59:
                    3b:a6:f1:0c:0e:ab:7a:9b:c4:5e:14:0a:5f:b3:e9:
                    ee:5d:f9:a6:37:fe:92:9d:be:fe:23:ba:88:16:1f:
                    9b:29:5f:3c:41:d8:1a:68:7f:cf:47:36:99:94:e8:
                    f6:5f:10:cd:8e:76:8d:75:91:f7:78:40:aa:f0:e7:
                    2c:21:73:ee:0f:6d:79:a8:70:7e:89:67:50:cc:e8:
                    f5:9b:eb:c7:8b:8e:f4:a0:e2:a5:16:5d:0b:a0:c9:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:AF:F5:DE:2D:DE:92:68:F9:3C:94:41:27:D4:30:25:75:6B:55
            X509v3 Authority Key Identifier:
                keyid:AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c6:c2:98:25:f9:fb:34:47:4a:14:a2:58:3a:4f:72:81:31:
         6f:f3:f5:48:d9:e5:89:48:42:4c:fb:bb:70:ac:e5:99:81:28:
         8a:78:c2:b3:c7:8d:50:0e:f7:6b:7a:95:a8:99:7d:12:34:00:
         ff:d2:dd:18:29:ee:94:0e:d4:7a:0d:b0:bf:13:ae:91:75:08:
         d5:83:4c:3e:45:30:76:6b:09:7b:49:5c:d5:7a:86:5e:7a:1f:
         45:75:71:02:31:c4:20:b6:a5:05:e1:c8:eb:c6:e2:f0:8d:a1:
         21:b0:f8:1e:6c:b0:f8:28:5e:fa:e1:ae:21:45:a5:fe:2d:4a:
         07:37:ca:4c:cd:4a:dd:5b:61:9d:ad:55:a3:fc:7e:43:94:1d:
         5c:a2:64:28:4d:7c:6b:76:71:c3:0f:50:76:c5:ed:66:2b:01:
         d7:a8:dd:f5:af:4b:9b:c6:4e:d1:4b:2f:5f:c9:3a:f2:8d:63:
         3b:4b:d6:28:a9:fd:3e:60:93:d8:f5:54:19:5c:aa:b8:75:6b:
         c9:d4:cd:bf:3d:ae:91:cf:36:a3:79:19:ef:4b:4c:6b:bf:a5:
         88:f7:ba:6b:af:aa:aa:83:4e:1c:34:72:9f:e6:da:10:3f:fd:
         d9:a1:96:6e:92:9f:23:09:8e:7a:69:49:24:7d:0d:9d:02:b1:
         d1:a6:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:22:47 2025 by rpki-client