Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
File:                     960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft (raw, json)
Hash identifier:          kwfhhWtAIsqxbMKz/u5ifC1BkMJz6bwimEZFzYQAMEI=
Subject key identifier:   8D:A1:4F:E9:0B:E1:E8:F7:79:17:B1:01:72:53:77:B8:21:D4:8F:3F
Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
Certificate issuer:       /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Certificate serial:       3C2C622DB98A3EFFCDC2C880273D0D3E1C972ECF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
Manifest number:          A6
Signing time:             Tue 05 Aug 2025 20:57:31 +0000
Manifest this update:     Tue 05 Aug 2025 20:52:31 +0000
Manifest next update:     Wed 06 Aug 2025 23:47:31 +0000
Files and hashes:         1: 960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl (hash: x6oz1nqlUpjgTRBf+tsOvjed4LTJhAv+7V7kddwIBSo=)
                          2: 323830343a363064343a3a2f33322d313238203d3e20323639313934.roa (hash: LePTxjJBOrm9QYmecp3eRBR2rsruAfQsZj8f0K3tFDA=)
                          3: 34352e3137392e3233362e302f32322d3332203d3e20323639313934.roa (hash: 9Iv0LYK3E8ZPMXk9urzFO8MeiGgrmSbqgdqZMnosYv8=)
                          4: 34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa (hash: JH6ju057H4XS8C46Y60zPc+z91M0/zaBhBfHy+PXe+s=)
                          5: 3136382e3138312e3235322e302f32322d3332203d3e20323639313934.roa (hash: DIsKuSZQPMKwxu8dcHmFONbGN9uTCivJuBHuLNM2g3M=)
                          6: 3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa (hash: 0WANYNk1dYKiKVdK1NzxfG8v8vYE638Zi/TP6vzNNcg=)
                          7: 34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa (hash: wvgfoY9AETz9twOBRuB94S/gLya+Kwk8MDPlUDwjElA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2c:62:2d:b9:8a:3e:ff:cd:c2:c8:80:27:3d:0d:3e:1c:97:2e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
        Validity
            Not Before: Aug  5 20:52:31 2025 GMT
            Not After : Aug  6 23:47:31 2025 GMT
        Subject: CN=8DA14FE90BE1E8F77917B101725377B821D48F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:aa:0e:7a:33:b7:1f:0d:5a:d7:41:d2:c9:
                    3e:fd:27:a7:4a:7d:f9:af:74:88:87:e0:48:91:8c:
                    99:8e:1d:cb:0d:69:11:2d:7e:54:8f:7a:8a:f1:fe:
                    1f:26:7b:2e:7c:6b:64:54:74:25:36:d0:f6:8e:be:
                    02:a0:d2:51:3c:1f:a2:d0:83:d0:8b:06:34:67:c2:
                    84:94:44:b2:d0:32:e5:a3:4c:f1:ac:c0:45:44:bd:
                    51:40:59:8f:9c:68:9c:1a:8f:d4:d0:14:cf:14:98:
                    3f:b8:5f:f0:26:68:3b:e7:7a:5c:bd:61:92:38:39:
                    ef:27:4f:1e:9d:cc:85:49:86:40:d3:ed:f8:01:86:
                    86:82:3d:0a:d4:69:0e:9e:4d:87:28:1f:c4:88:9d:
                    89:f3:42:3d:81:bf:67:28:a5:73:25:00:84:74:14:
                    e8:1f:d5:96:2f:f5:f0:62:a6:40:29:d8:b2:56:4b:
                    75:f2:ac:9d:d5:1e:06:c9:3f:a4:01:f4:1d:75:54:
                    1f:c2:0a:b0:73:fd:cc:1c:b1:14:c8:91:5f:ac:cd:
                    6d:11:69:1a:d6:18:7f:77:1f:55:7e:ef:2f:62:d6:
                    dc:01:4e:a9:79:79:ad:c8:ef:18:d3:3f:89:12:21:
                    1f:25:e1:30:b0:3e:5f:ff:e6:3b:bc:7b:8b:fd:a0:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:4F:E9:0B:E1:E8:F7:79:17:B1:01:72:53:77:B8:21:D4:8F:3F
            X509v3 Authority Key Identifier:
                keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:25:6f:b7:04:1a:03:77:1f:91:ba:3b:da:49:1f:cc:ad:
         e5:fd:84:c6:09:72:4c:05:54:a8:e3:62:75:4f:95:0e:99:71:
         1f:d5:27:f6:a8:aa:bd:71:61:ee:5e:e1:0a:d4:70:d0:c9:5c:
         d7:b0:a0:30:1d:59:61:ce:be:a8:69:6f:b7:75:d8:eb:71:be:
         2d:42:cd:a4:82:9d:3b:56:2c:de:fd:66:e9:ba:25:d9:73:03:
         56:61:5b:72:5d:67:91:10:89:ed:48:05:c1:e7:17:9b:82:14:
         d5:c5:75:98:09:19:6b:ee:25:8e:fa:24:8d:d7:16:86:43:e2:
         e5:f0:de:ef:25:32:88:8e:39:06:42:ad:78:4a:c2:0b:9a:fe:
         22:3e:86:2a:7f:0c:aa:4e:bf:cc:45:62:eb:77:04:e6:dc:a4:
         78:9c:d0:68:3d:97:45:ed:0c:e4:29:b4:f2:82:b0:db:5d:da:
         ca:a1:c3:d3:74:72:63:22:54:87:49:92:a7:7a:e1:17:9a:8c:
         66:9f:bc:7f:1f:8c:28:df:c4:91:de:c3:1d:27:ec:88:8a:5f:
         3c:71:a4:e9:a1:31:b9:87:e0:e6:5e:eb:d1:b4:5b:b1:f1:77:
         ee:f3:07:fe:7d:8b:69:c7:ef:0b:78:87:d1:60:0c:16:63:4c:
         70:0c:f4:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPCxiLbmKPv/NwsiAJz0NPhyXLs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwQ0NBMkI0MkY4OUEyQTlBQkRDQzU0NkRFMjJFQkI5
QkRCNDExMjAeFw0yNTA4MDUyMDUyMzFaFw0yNTA4MDYyMzQ3MzFaMDMxMTAvBgNV
BAMTKDhEQTE0RkU5MEJFMUU4Rjc3OTE3QjEwMTcyNTM3N0I4MjFENDhGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8qoOejO3Hw1a10HSyT79J6dK
ffmvdIiH4EiRjJmOHcsNaREtflSPeorx/h8mey58a2RUdCU20PaOvgKg0lE8H6LQ
g9CLBjRnwoSURLLQMuWjTPGswEVEvVFAWY+caJwaj9TQFM8UmD+4X/AmaDvnely9
YZI4Oe8nTx6dzIVJhkDT7fgBhoaCPQrUaQ6eTYcoH8SInYnzQj2Bv2copXMlAIR0
FOgf1ZYv9fBipkAp2LJWS3XyrJ3VHgbJP6QB9B11VB/CCrBz/cwcsRTIkV+szW0R
aRrWGH93H1V+7y9i1twBTql5ea3I7xjTP4kSIR8l4TCwPl//5ju8e4v9oHUBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjaFP6Qvh6Pd5F7EBclN3uCHUjz8wHwYDVR0j
BBgwFoAUlgzKK0L4miqavcxUbeIuu5vbQRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC85NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MENDQTJCNDJGODlBMkE5
QUJEQ0M1NDZERTIyRUJCOUJEQjQxMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1ZlTDQvMC85
NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAePUlb7cEGgN3H5G6O9pJH8yt5f2ExglyTAVUqONidU+VDplxH9Un9qiqvXFh
7l7hCtRw0Mlc17CgMB1ZYc6+qGlvt3XY63G+LULNpIKdO1Ys3v1m6bol2XMDVmFb
cl1nkRCJ7UgFwecXm4IU1cV1mAkZa+4ljvokjdcWhkPi5fDe7yUyiI45BkKteErC
C5r+Ij6GKn8Mqk6/zEVi63cE5tykeJzQaD2XRe0M5Cm08oKw213ayqHD03RyYyJU
h0mSp3rhF5qMZp+8fx+MKN/Ekd7DHSfsiIpfPHGk6aExuYfg5l7r0bRbsfF37vMH
/n2LacfvC3iH0WAMFmNMcAz0nw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:36 2025 by rpki-client