Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
File:                     614EF54DCD6F303805D5996E2C956F5A6154005E.mft (raw, json)
Hash identifier:          zECLMei3Fd+LmcN3bMzbQdkFa6NXnaeBi22acyzirKw=
Subject key identifier:   1A:21:0B:04:43:23:6F:62:A7:55:D9:13:52:58:9A:79:5D:27:7C:A5
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Certificate issuer:       /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial:       4ACA67D6CFC3ED75FCC47F58FDCD7E60FBEF4AD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
Manifest number:          27
Signing time:             Sat 02 Aug 2025 20:11:21 +0000
Manifest this update:     Sat 02 Aug 2025 20:06:21 +0000
Manifest next update:     Sun 03 Aug 2025 22:51:21 +0000
Files and hashes:         1: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: UdZT3Z8ev2GLZArI+ovPxhxxFoPSDeF3xL3EevP2VgY=)
                          2: 323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (hash: zUD8uqd6uittgR5PWSbgkrPlAbzFb/Kx/40Lbq9YDXw=)
                          3: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: /Mtsp4g7qk08CXrjewNoBqbuX9hkEiUx+YEVhVhnqdI=)
                          4: 3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (hash: EcWhsGBEyrxRGE0ptJvEFZQphtJFD8XAczjy8uYmwDQ=)
                          5: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: AIn4FLTJdPCW5wdGLKV+S21Qle29a3vSxmhBr7SFUmk=)
                          6: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: K1lcHBBbdkthPlR7YaN3SRcwPg2gGF9G6DZDw1KxElY=)
                          7: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: SNXXb/g6faoaWJsqyK/eyOfjCa3Z9s5ux8rZsDSkMg0=)
                          8: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: KPFsJwP681bwFuDIYCf+KNEj5DHNcwmZ22LUwOciiZA=)
                          9: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: 4KNuw3KrhokAp07epZbqKXvturdr87y4wuDmG7XhaGQ=)
                          10: 614EF54DCD6F303805D5996E2C956F5A6154005E.crl (hash: LvcKT0r6P9ufBCfClOSrUMNd7GZcM8q6lbshZBWmXlc=)
                          11: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: UoK4ansdy/Vqz+biwynMr5yVCoy/NJnSbemU5jsHxbU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:67:d6:cf:c3:ed:75:fc:c4:7f:58:fd:cd:7e:60:fb:ef:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
        Validity
            Not Before: Aug  2 20:06:21 2025 GMT
            Not After : Aug  3 22:51:21 2025 GMT
        Subject: CN=1A210B0443236F62A755D91352589A795D277CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:92:6d:76:af:8b:78:20:f9:d1:2e:48:c7:
                    bf:95:e6:91:29:13:33:ad:e3:87:8e:7a:9f:d5:3d:
                    8c:94:26:85:68:df:f0:51:18:ab:38:f9:60:29:1a:
                    55:25:06:38:4b:83:56:85:b7:20:78:44:4d:23:7c:
                    80:18:3f:b8:97:51:5d:39:50:f0:12:9f:39:01:a5:
                    cf:29:1b:55:24:c0:f5:28:57:8a:ae:5d:2b:0a:e5:
                    b4:dc:1e:58:76:52:ed:cc:b8:7e:9a:9f:46:d4:e7:
                    e0:60:b8:95:cd:6a:aa:b8:03:d2:e0:42:b0:15:50:
                    dd:ed:c9:12:4e:84:77:60:db:e0:12:a0:06:09:f6:
                    a5:53:65:46:b6:69:c6:51:30:fc:c8:f3:db:6d:c3:
                    2a:89:49:e6:3a:c7:a5:9c:b0:52:ef:35:34:3b:c2:
                    4b:28:46:76:44:d3:22:56:06:03:ab:68:d6:55:3e:
                    b3:fb:be:94:dc:54:04:e4:41:84:0d:fc:af:0a:1b:
                    ae:2b:4c:b0:eb:0c:12:0e:f6:d5:cf:91:d9:d2:2a:
                    79:b9:dc:86:85:4f:96:d1:00:76:d8:d1:22:0f:e4:
                    2d:ed:46:7e:bd:f8:b7:cd:ea:77:e9:e7:88:aa:21:
                    a9:a0:e7:b4:37:27:d1:dd:43:15:1d:56:d5:83:19:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:21:0B:04:43:23:6F:62:A7:55:D9:13:52:58:9A:79:5D:27:7C:A5
            X509v3 Authority Key Identifier:
                keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:32:8d:f2:1d:73:ba:0b:ea:1d:0c:ac:65:77:67:39:fb:5b:
         34:f4:56:52:01:e1:86:5d:3d:75:d1:f8:09:be:69:eb:08:78:
         90:be:69:5a:ad:3d:9e:35:6c:ff:c3:57:e3:d4:f1:44:30:17:
         9f:a2:e7:f7:67:0d:54:f6:20:64:95:91:dd:e8:12:cb:92:21:
         c9:2b:f3:eb:a5:98:5d:6a:a6:33:7e:06:9f:8c:c1:80:e1:32:
         cb:51:1a:1c:ad:88:b9:52:76:e7:4f:5f:68:88:af:37:ce:79:
         80:76:61:10:7e:f2:d3:16:40:c3:c8:eb:5c:ad:e7:fb:40:b2:
         8d:23:e9:e2:4c:1e:4d:85:b0:f0:9d:ac:2f:61:da:dd:eb:97:
         e8:bb:56:8f:d4:0a:77:03:72:91:51:b1:0e:80:bd:c4:56:60:
         4a:4d:49:61:46:00:cb:25:e6:07:7b:b3:06:8f:a1:18:f8:41:
         44:a0:f4:99:ce:42:da:af:ed:85:88:a7:a0:fb:01:0a:0c:92:
         f5:63:2d:cc:94:ad:d3:d1:ea:c5:b5:d4:87:62:f0:f7:d4:08:
         dd:07:25:0f:62:49:70:8e:2f:3c:22:a7:6e:3e:2d:18:93:72:
         dc:d3:ff:0d:9d:a5:de:b8:05:03:1c:a4:b0:c9:ac:24:b9:16:
         55:16:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:11 2025 by rpki-client