Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft
File:                     D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft (raw, json)
Hash identifier:          j8f58hrcaBJu9eC/VtUjDLtptVDZpcKNebENU6KN5tQ=
Subject key identifier:   5C:20:0D:6E:1E:AC:8B:D5:C5:45:C6:C4:99:BB:94:51:F6:41:93:09
Authority key identifier: D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9
Certificate issuer:       /CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
Certificate serial:       3F56532AA5FE857D0AC18D5B7C2C2F1F12027769
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft
Manifest number:          23
Signing time:             Tue 05 Aug 2025 10:59:46 +0000
Manifest this update:     Tue 05 Aug 2025 10:54:46 +0000
Manifest next update:     Wed 06 Aug 2025 12:54:46 +0000
Files and hashes:         1: 3136382e3139372e3134302e302f32322d3332203d3e20323635343832.roa (hash: jWHYs8FStpJqE1qQWI/25nEULlVXewvRJSjcf623U0U=)
                          2: 323830343a333464303a3a2f33322d313238203d3e20323635343832.roa (hash: Rm51naI0CND5zfoO2x5K+zXY1GlKZLxxaJaqhKYWb+I=)
                          3: D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl (hash: eBgjoq85Sr8YoNVneNDknGlifRbC1wTj3BfoonZosxo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:56:53:2a:a5:fe:85:7d:0a:c1:8d:5b:7c:2c:2f:1f:12:02:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D855C633051A76487A82C1ED0DB587A18CF1C9
        Validity
            Not Before: Aug  5 10:54:46 2025 GMT
            Not After : Aug  6 12:54:46 2025 GMT
        Subject: CN=5C200D6E1EAC8BD5C545C6C499BB9451F6419309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:12:7c:ff:2b:3b:a7:86:fa:3f:72:7d:5a:
                    2e:45:0d:fb:40:9c:18:90:8f:40:f4:61:c6:94:51:
                    15:df:8d:1f:16:7f:98:0a:ea:37:c6:89:65:2c:e4:
                    09:32:b6:32:a5:6b:bc:3f:17:f1:41:0a:1d:d5:6f:
                    3d:85:e9:e2:4d:18:dc:b9:bf:57:c0:4c:25:7d:91:
                    79:ba:f1:e5:ac:ea:c5:a8:e6:57:11:1d:d8:53:69:
                    42:9b:5c:67:33:8b:1d:83:44:ed:0f:8a:87:63:71:
                    9c:ba:01:29:d1:df:5d:54:3a:c2:08:f4:83:3e:9b:
                    ec:ff:37:ca:70:9c:5e:fe:6a:e9:58:a8:06:da:9d:
                    c1:7d:bc:2f:1a:8a:83:7f:e4:e4:d6:47:d6:4e:96:
                    7e:d5:35:12:e6:ef:17:bc:0c:71:ee:98:a0:68:d3:
                    bf:6d:08:33:1d:7e:2f:fe:32:d3:fd:c9:48:4f:03:
                    04:6f:5e:45:8b:b5:86:15:72:71:56:37:95:64:52:
                    17:02:14:88:c9:d5:37:40:49:87:03:a0:8b:03:08:
                    c6:a0:b6:df:38:d8:82:1b:88:ce:1c:ac:a5:7a:b2:
                    60:35:6d:57:f3:df:f6:14:df:4d:d1:fd:7c:80:2f:
                    fb:16:f9:3c:a8:d6:a8:ef:5f:25:cf:c9:ce:6b:7f:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:0D:6E:1E:AC:8B:D5:C5:45:C6:C4:99:BB:94:51:F6:41:93:09
            X509v3 Authority Key Identifier:
                keyid:D2:D8:55:C6:33:05:1A:76:48:7A:82:C1:ED:0D:B5:87:A1:8C:F1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D855C633051A76487A82C1ED0DB587A18CF1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/D2D855C633051A76487A82C1ED0DB587A18CF1C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:91:61:97:22:c8:58:10:51:d1:fa:97:e7:2d:5d:dc:07:
         21:c1:37:49:16:18:ec:07:bc:3b:75:e0:48:2e:21:97:09:1a:
         62:31:7b:01:1c:9a:be:eb:d6:ac:e4:94:a6:86:8e:b6:ff:32:
         56:c4:a4:97:bb:5f:7e:3f:0b:2f:96:2c:fe:ca:c9:45:1e:ca:
         c8:92:41:d3:3a:23:58:ca:4e:98:6f:c8:b8:e4:50:ca:8f:9d:
         e7:04:63:6d:b0:f7:26:30:5b:80:d8:b5:f9:f3:e2:c7:e7:d1:
         ae:22:be:41:91:b7:a9:2d:e9:5b:7b:fb:38:a3:38:46:e4:ab:
         80:62:36:4b:84:2c:78:be:62:3b:cc:e3:42:2a:ff:ed:86:f5:
         e0:7f:96:10:83:82:4c:66:0b:66:1f:36:72:49:e2:11:c7:43:
         e8:2b:b6:1d:b6:a8:3a:b3:78:24:63:1f:40:74:25:03:6c:f2:
         18:23:08:76:4b:9c:b7:54:e0:2e:d0:39:93:02:46:37:13:8d:
         a5:5c:69:f1:74:22:d3:fc:3a:a1:07:27:59:05:9b:25:81:bf:
         d4:d8:d7:05:47:5c:0b:1a:e8:51:20:14:c1:37:29:09:fa:fb:
         0b:0a:6c:20:e1:0d:0c:c8:db:88:bc:17:7a:ed:9c:0b:31:29:
         05:82:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:22 2025 by rpki-client