Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
File:                     7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft (raw, json)
Hash identifier:          qkPgPtjZ4VjRyourSYH024co/0SmhsCIUHIUDSi/K0U=
Subject key identifier:   34:1D:2D:E9:BE:F4:8F:3E:43:6E:C2:C8:E7:1A:97:37:9A:56:A5:FD
Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD
Certificate issuer:       /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
Certificate serial:       7DB05471C5307098086C0EBBBF83D7350CF4BD50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
Manifest number:          03DE
Signing time:             Thu 16 Apr 2026 17:48:27 +0000
Manifest this update:     Thu 16 Apr 2026 17:43:27 +0000
Manifest next update:     Fri 17 Apr 2026 21:40:27 +0000
Files and hashes:         1: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl (hash: B+mrig2PtPZR54WUmkB7muRPtg9XE5pZpQLSvAocIbY=)
                          2: 323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (hash: CO0+zII5zC6j1oK3HobVIuZD4C55tau72Fchh/kcOrY=)
                          3: 34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (hash: KETqT+1g1XnTntZ+iBufHqcBjFh/TvQzht8j1Ox7MRw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:54:71:c5:30:70:98:08:6c:0e:bb:bf:83:d7:35:0c:f4:bd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
        Validity
            Not Before: Apr 16 17:43:27 2026 GMT
            Not After : Apr 17 21:40:27 2026 GMT
        Subject: CN=341D2DE9BEF48F3E436EC2C8E71A97379A56A5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:1c:01:24:c7:4d:c8:28:00:54:19:36:c6:
                    b7:ad:fa:39:36:e2:56:9a:aa:58:4d:49:f1:a7:f7:
                    cc:90:14:be:6c:23:74:97:44:ba:97:af:7c:08:23:
                    01:bc:7d:04:dd:03:2b:da:8e:9e:a1:8e:1d:1d:b6:
                    19:01:49:5e:f6:92:32:c1:3a:50:2a:4e:a0:f3:aa:
                    b3:29:d3:3b:61:de:92:57:fe:a4:ac:35:0e:2b:f9:
                    9b:31:57:c8:0a:37:a3:cf:f8:a2:f4:97:5c:eb:98:
                    cf:d7:ff:2a:22:13:13:82:a0:6f:e6:62:8b:0f:a1:
                    88:a4:a0:2b:36:1d:6f:d2:ba:dd:e8:d0:c1:8d:6f:
                    4f:2b:45:1e:88:c5:2f:07:c7:10:b2:6f:b4:33:45:
                    cd:16:2c:d1:de:f3:58:7e:36:2f:9e:40:95:9c:38:
                    e5:83:57:0c:65:42:35:5d:81:c0:a2:73:81:be:a3:
                    5b:e8:bc:8b:ee:99:39:67:4e:fa:10:e9:7c:67:60:
                    82:22:12:40:fa:23:14:79:c0:11:21:06:7b:08:d2:
                    84:a4:35:50:f4:5c:9b:b3:5c:9a:b1:50:ac:74:ae:
                    b4:0e:fd:bc:53:a9:29:8b:78:59:00:f5:79:9b:34:
                    c8:7d:8b:39:af:24:b3:18:30:a8:ca:fe:18:4a:25:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:2D:E9:BE:F4:8F:3E:43:6E:C2:C8:E7:1A:97:37:9A:56:A5:FD
            X509v3 Authority Key Identifier:
                keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:27:92:69:cb:c2:11:3f:12:ea:39:0b:a0:98:f3:d5:38:
         73:0e:c1:97:4e:45:4c:8d:d1:31:45:93:29:5a:53:24:70:9c:
         a6:77:a7:a0:e0:41:14:c2:88:f6:72:b0:54:28:a8:0e:e7:a9:
         61:ed:16:36:cd:d0:a3:e0:dd:b1:c6:94:7f:ba:71:59:f4:20:
         fd:55:71:83:19:9a:cd:a7:98:38:b4:2e:2b:81:5e:aa:e8:6e:
         33:b1:52:64:6c:af:62:8f:5b:1a:e6:c4:b4:a4:16:1c:f2:66:
         7c:1e:3c:ff:12:bf:5d:c3:98:04:7d:c8:40:66:86:d8:27:99:
         5c:3d:ff:42:5d:70:6e:f8:bd:a7:8e:da:cc:72:53:ba:38:e4:
         0f:f8:e1:f3:6d:27:10:e8:1b:70:a0:02:dc:78:9a:b9:bf:4e:
         2a:7f:70:08:f4:50:23:88:09:c8:42:4f:ab:15:0f:37:35:d5:
         84:62:fc:d7:cf:1d:a8:f7:fe:11:10:70:c6:94:a9:d2:13:e9:
         a5:b8:de:7e:51:1d:79:73:12:f4:b5:79:52:57:16:9a:59:88:
         fa:8f:4f:36:4c:af:da:47:d5:1c:1a:d7:4b:9e:58:fb:d7:12:
         39:e7:40:4d:a2:bc:9f:a5:e2:c3:20:fa:ba:76:3c:33:ed:c3:
         b3:8c:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:37 2026 by rpki-client