Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
File:                     E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft (raw, json)
Hash identifier:          J5Mp9zgk6kT55tbH3t7cAvMj/Jytz9VlkwJrjmPwvXw=
Subject key identifier:   CE:BB:7D:8D:30:5E:75:EA:91:8A:98:BF:66:E9:19:C3:03:93:E0:65
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Certificate issuer:       /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial:       3BC8B9664D5FBFA7DA8F4FDAA4450838B8F40D3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
Manifest number:          05
Signing time:             Fri 27 Feb 2026 02:57:01 +0000
Manifest this update:     Fri 27 Feb 2026 02:52:01 +0000
Manifest next update:     Sat 28 Feb 2026 03:11:01 +0000
Files and hashes:         1: 323830343a383232343a3a2f33322d3332203d3e20323732353031.roa (hash: mpqSu2vppyE85xkR/iis3eQT/RqkjGSn8nwaZovspZw=)
                          2: E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl (hash: PTmpIdGRUGyO19BEH2bEHOTGSQy1E/5cqqDDJvTrMtU=)
                          3: 323830343a383232343a3a2f33342d3334203d3e20323732353031.roa (hash: 3hQcCsI7zJZX+SMlKJByk/VJQP6YBaJKwqZLppFng/0=)
                          4: 323830343a383232343a343030303a3a2f33342d3334203d3e20323732353031.roa (hash: Amuh9GwwhSGuzQJSUvVg3cUWVUnyseSwyxNHEgynj5A=)
                          5: 323830343a383232343a383030303a3a2f33332d3333203d3e20323732353031.roa (hash: P3LTxzeR9l2CXf9s/Wd0vsZAn5m4ayTBbfriXj1M4Xo=)
                          6: 323830343a383232343a3a2f33332d3333203d3e20323732353031.roa (hash: Tez8RMGlbedVxpn+FPIAXz4TgZjlaKhCDZUB91x7a5k=)
                          7: 323830343a383232343a633030303a3a2f33342d3334203d3e20323732353031.roa (hash: lvS+PpChyK+GSXbzlI+LlQ5M3M6sJTIQRlOSnaqvVlk=)
                          8: 323830343a383232343a313030333a3a2f34382d3438203d3e20323732353031.roa (hash: cPp/zLfCAOZWLY4aj906eQ6e223KFduWKf0r7DJT5aU=)
                          9: 323830343a383232343a383030303a3a2f33342d3334203d3e20323732353031.roa (hash: I8XuZ1kWj6D49/eMVA38IuDF8BrFsxLA1nMIo+FFBzw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c8:b9:66:4d:5f:bf:a7:da:8f:4f:da:a4:45:08:38:b8:f4:0d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
        Validity
            Not Before: Feb 27 02:52:01 2026 GMT
            Not After : Feb 28 03:11:01 2026 GMT
        Subject: CN=CEBB7D8D305E75EA918A98BF66E919C30393E065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:eb:c4:62:8c:6c:c7:99:4a:56:e5:47:16:
                    17:2e:49:63:61:5a:60:cf:19:37:63:fc:0b:df:1b:
                    de:66:00:82:20:f6:db:1f:01:71:a7:92:76:00:df:
                    f8:5a:07:53:ed:96:92:0f:53:96:46:9c:9a:0b:3c:
                    29:0b:42:83:f5:01:db:e0:86:de:14:6b:a6:77:24:
                    14:f0:51:d5:67:ad:48:55:ae:32:17:8c:4a:90:ff:
                    99:e3:3d:dc:33:bc:be:11:60:d3:9a:23:ab:ad:55:
                    f6:97:77:c1:be:0b:79:39:3f:14:69:e1:5f:6c:71:
                    e0:c2:f7:ba:8b:8f:c8:ad:6f:26:55:ec:4c:cc:6c:
                    2c:d3:3e:63:aa:61:c2:45:04:21:73:73:cf:02:83:
                    ca:cf:12:86:f2:b3:92:a2:ce:df:c4:0b:1a:47:d6:
                    26:a8:5c:2b:41:37:64:5d:cb:f2:80:86:af:53:c4:
                    d9:2c:d5:17:33:51:f4:b3:c1:6f:98:a2:6c:42:57:
                    8c:b9:16:c7:fa:d4:80:f2:28:15:af:f5:66:1d:52:
                    65:42:60:d3:fb:08:f2:cb:2f:4e:d8:40:f3:40:89:
                    ad:27:9a:cb:52:6a:7d:90:00:06:63:da:eb:2e:7f:
                    9a:72:70:42:1f:7a:bc:50:d7:cb:e9:bf:9c:77:88:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BB:7D:8D:30:5E:75:EA:91:8A:98:BF:66:E9:19:C3:03:93:E0:65
            X509v3 Authority Key Identifier:
                keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:b1:1d:46:85:da:c5:96:b4:10:c2:28:4b:1c:45:47:3d:
         fc:2e:83:13:58:bf:a5:5b:2f:1c:2b:f9:14:18:9b:7b:66:f6:
         47:bc:f4:95:eb:6f:fa:19:46:ee:4d:33:69:cd:5a:a4:af:41:
         f0:8c:7b:15:ff:89:63:8a:77:88:95:f1:2a:2e:ea:a5:ae:f0:
         1c:0d:0d:5d:8a:32:b5:4f:ea:99:40:05:5d:0e:76:fe:3e:05:
         a2:ec:e0:7a:d6:34:ce:d1:fc:2e:20:39:35:6f:e6:f6:42:92:
         45:58:9a:99:62:03:a0:c0:45:17:66:00:49:4f:ee:2e:e2:f7:
         0c:ca:7e:5e:6a:f4:ac:0b:e8:e7:8f:a7:c4:08:0d:57:10:ae:
         28:44:30:10:2f:93:24:9c:1c:70:b9:8b:ac:c1:f8:81:18:f4:
         02:23:af:f0:62:5a:15:b7:22:d2:5a:be:29:b5:44:c4:fc:fb:
         dd:1c:c0:93:cd:d3:cc:db:2b:d4:45:1d:66:11:b0:7c:f8:b3:
         55:8c:8f:35:14:e8:2c:71:ea:3b:58:59:b8:03:a8:d8:8f:bb:
         87:be:3c:71:9a:49:ee:e8:e9:0c:e0:77:9d:2f:18:88:47:5d:
         44:57:8e:cf:ab:5e:0c:df:7f:07:7f:29:aa:9a:1c:c6:b6:1e:
         97:74:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:24 2026 by rpki-client