Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft
File:                     DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft (raw, json)
Hash identifier:          opWkDncX4jMs1S6+uoaWpUsgayGArzuc7kqJg0zIhRk=
Subject key identifier:   89:1F:39:F7:26:C2:DE:20:0C:FB:66:31:E1:57:6C:BD:50:10:E6:D4
Authority key identifier: DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C
Certificate issuer:       /CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
Certificate serial:       0CB44C6190D39479C566B892F24C3D2C19D0FF5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft
Manifest number:          40
Signing time:             Sun 15 Jun 2025 08:24:07 +0000
Manifest this update:     Sun 15 Jun 2025 08:19:07 +0000
Manifest next update:     Mon 16 Jun 2025 08:43:07 +0000
Files and hashes:         1: 34352e3136382e38382e302f32322d3232203d3e20323638303536.roa (hash: 7CA3XbPHXJoV8/fnqVy8ESeeIw7AJpqkl9ZhrNnjePM=)
                          2: 34352e3136382e38382e302f32332d3234203d3e20323638303536.roa (hash: 2Bf1BHlEhwWtbqxLEqpRT7a9vUqxxCNUvznm7MuvOck=)
                          3: DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl (hash: XymE3R7e3wEKc8j8FuD4/xK4C1UwBUNeHVrKcv1XDds=)
                          4: 34352e3136382e39302e302f32332d3234203d3e20323638303536.roa (hash: lwNOoVfAEnOCR5mGAjNdfdUogstMGsdd4lQkM6s0BO8=)
                          5: 323830343a353734383a3a2f33322d3434203d3e20323638303536.roa (hash: UwUAawmYwCZ6FL7NtXbeRtl1T5DeQc1/+ZRlKcwM8DM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b4:4c:61:90:d3:94:79:c5:66:b8:92:f2:4c:3d:2c:19:d0:ff:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
        Validity
            Not Before: Jun 15 08:19:07 2025 GMT
            Not After : Jun 16 08:43:07 2025 GMT
        Subject: CN=891F39F726C2DE200CFB6631E1576CBD5010E6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:68:4f:06:14:b2:4f:ef:83:70:31:23:16:
                    43:11:e8:43:74:f3:9a:d2:a6:11:71:61:2e:fb:1c:
                    7f:97:3b:6b:89:d5:35:01:9f:12:8c:ae:65:3f:e6:
                    0f:2d:19:d7:1f:5f:2f:42:cd:b8:1d:5b:3f:d6:0b:
                    c0:37:e6:68:22:f5:ac:48:ae:a4:11:3f:36:a8:e6:
                    59:de:f9:8c:1e:47:2e:a8:c9:52:ff:21:18:b6:2e:
                    ef:50:42:09:e0:a7:7c:7d:21:c2:d7:67:6b:56:4c:
                    b8:f2:09:67:98:6c:c1:e4:64:90:d8:1f:c8:ca:c2:
                    ac:ba:b8:c5:d3:a3:c1:af:78:9f:0c:84:44:54:b6:
                    f7:17:74:27:f0:a1:0b:fc:d5:45:03:e2:c5:09:7a:
                    22:f8:ef:f7:e6:23:2f:b7:a1:6e:72:10:3c:f9:93:
                    c0:9c:c3:14:3d:af:32:a3:5c:10:e5:f9:2d:35:07:
                    d8:ef:ec:5a:11:e7:b3:34:30:d9:43:97:f4:e2:66:
                    cc:16:19:49:1c:dc:66:de:66:d5:4b:27:11:ba:3d:
                    3c:f2:9e:d4:f0:75:79:ff:16:e6:f1:06:1c:40:d2:
                    74:22:60:94:f0:c6:5c:6c:4e:61:08:cb:1d:c5:ac:
                    75:09:a6:83:29:19:f2:fa:35:e0:32:41:78:b4:55:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1F:39:F7:26:C2:DE:20:0C:FB:66:31:E1:57:6C:BD:50:10:E6:D4
            X509v3 Authority Key Identifier:
                keyid:DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:34:1d:ab:16:e4:94:76:e4:30:2b:b9:79:3d:ae:83:36:
         0d:c2:89:01:91:c1:3c:e6:bc:ed:b8:68:e5:7f:a6:44:75:89:
         a4:f7:a6:dc:66:ea:db:d1:85:99:ec:ce:83:75:45:ea:d5:c4:
         68:29:76:33:6a:87:24:dc:59:41:0e:5d:a1:af:60:e4:1f:a9:
         65:eb:6c:0c:e5:e4:7e:bd:52:43:a0:17:96:dd:62:5c:90:e9:
         e9:83:4e:bf:01:9c:3f:87:fa:f2:fc:8f:c8:37:d8:66:50:25:
         a4:5f:f6:72:b8:26:07:32:9f:c0:92:01:b2:b2:0d:8b:14:b9:
         d7:c6:c5:e4:94:0d:b1:e2:5e:ab:3a:75:34:68:04:72:db:36:
         e6:34:97:af:b1:ea:f2:b0:6f:35:4a:e7:dc:3d:91:87:2e:6d:
         da:6c:54:4c:5c:eb:7a:19:0e:04:ec:47:81:f1:56:97:18:2c:
         27:d1:78:3f:21:66:b4:1c:35:7e:76:c0:8f:40:d7:0b:d6:9d:
         21:c2:d9:d3:0a:3d:74:00:f7:f8:32:2a:0b:e4:8a:d9:c7:6b:
         5e:41:7a:7e:f2:09:71:c9:06:57:a3:8d:a9:86:56:c7:79:2d:
         73:70:9c:84:2c:ed:5d:49:8a:80:1f:c8:1c:59:27:a9:eb:41:
         bc:eb:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:54:41 2025 by rpki-client