Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
File:                     8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft (raw, json)
Hash identifier:          CRqctcMvuAW/3MON0BVd45RML4BkYeqSH8GGwfPjE5I=
Subject key identifier:   66:A3:5C:71:53:26:81:B1:65:C8:05:A0:96:3F:7A:BD:F8:B1:B1:4D
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Certificate issuer:       /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial:       71F1723645E819580D9B26154EAC79EA95C16424
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
Manifest number:          0214
Signing time:             Fri 09 May 2025 04:40:01 +0000
Manifest this update:     Fri 09 May 2025 04:35:01 +0000
Manifest next update:     Sat 10 May 2025 07:50:01 +0000
Files and hashes:         1: 34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (hash: AiNcVQFfZgWd8dGCw2ko8vwv9luVzGDu+wktLGEeGVo=)
                          2: 34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (hash: Fa85jA5DU/wIkt0B9EFiV16OZ/1n57IfI8Havg+ERaQ=)
                          3: 34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (hash: AvQIu+2ZD8s7O2S5EHel72qSNVZujiQ9w9LpDVpl2qw=)
                          4: 34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (hash: pqpYz/gr40hJx5mnqTxuIdlhLrLApOl7y0T3ugId9lU=)
                          5: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (hash: DLviYB443NJNzkyFdbnnO25tV+YMPcNfPY4t8i02NFY=)
                          6: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl (hash: WijEtd6dHZGIj9/zwqMB0GGNXa1bPSxatTsChCyYZQ0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f1:72:36:45:e8:19:58:0d:9b:26:15:4e:ac:79:ea:95:c1:64:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
        Validity
            Not Before: May  9 04:35:01 2025 GMT
            Not After : May 10 07:50:01 2025 GMT
        Subject: CN=66A35C71532681B165C805A0963F7ABDF8B1B14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:2e:95:54:9f:5c:7d:03:3f:0d:66:f3:ce:
                    a9:ef:5f:8d:bd:5f:ff:75:77:bb:36:92:24:3d:c4:
                    0e:ff:57:17:3c:4a:95:ea:c4:e6:cd:ee:92:9a:7b:
                    e2:99:0b:c8:e4:3b:fd:27:65:a9:ac:8b:6a:65:15:
                    b7:27:67:3b:d8:84:5a:89:cb:0c:64:46:06:ab:18:
                    32:a2:a6:28:ea:29:4f:10:64:4f:20:aa:a9:55:61:
                    73:0d:20:12:ed:df:0b:5f:ed:a4:f2:3e:96:37:99:
                    45:6e:3c:72:7b:49:7a:e9:25:72:99:eb:fb:82:7a:
                    0c:a8:41:e4:14:c4:68:dc:b5:ad:9c:a3:16:dd:78:
                    fa:f4:04:48:1b:c3:fa:48:b3:8f:21:b7:46:1c:bc:
                    88:66:3f:aa:ad:1b:da:d6:2b:5f:0e:06:66:b4:07:
                    d3:fe:de:0a:05:af:70:ba:ba:45:99:a5:7d:15:99:
                    c1:93:ee:60:57:9b:29:28:1f:fb:a4:c6:2b:73:2a:
                    f2:81:8d:d7:35:0b:78:fd:74:db:45:d8:ef:e7:8e:
                    c8:ef:56:1d:6b:ae:c9:ed:3e:b6:21:7a:58:bf:ac:
                    67:a1:bf:98:93:c3:ad:b4:ba:b2:aa:00:be:20:97:
                    8f:eb:29:44:1b:a3:d0:a9:67:46:df:31:ef:46:a9:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A3:5C:71:53:26:81:B1:65:C8:05:A0:96:3F:7A:BD:F8:B1:B1:4D
            X509v3 Authority Key Identifier:
                keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:59:1a:ee:f9:72:66:7b:a4:2a:e4:49:0b:79:34:4c:74:85:
         70:1f:a5:5b:a6:4e:4b:dd:62:dc:68:16:2b:ef:d5:32:41:cb:
         d6:e7:13:31:cc:10:4a:e4:b2:e3:af:6d:b8:22:97:24:aa:eb:
         b0:79:1d:10:84:9a:88:52:5b:4a:1b:1f:d5:f0:25:c9:f3:61:
         6e:0c:9d:1b:ff:0a:d7:34:bf:e9:b7:6c:07:b6:ed:81:99:ba:
         fe:d3:28:d2:e9:f5:a7:d7:cb:49:8f:07:3f:a4:98:e4:ce:54:
         3c:12:d0:ac:f3:f6:77:52:d5:4f:49:de:00:2b:0a:1f:b9:b9:
         6b:05:04:24:20:2f:2d:ad:63:32:30:d3:56:9f:df:fc:f6:a3:
         1e:ef:73:9b:00:f1:0b:fe:28:ab:a0:49:88:4e:21:be:2f:bd:
         55:ed:e0:cb:b1:35:24:a4:ae:ff:74:18:20:4e:81:b5:d8:ce:
         0b:ec:27:07:af:5c:a4:3e:22:df:1f:81:ee:7f:13:43:d8:61:
         46:24:c1:e6:6d:6b:83:8d:11:71:7b:3b:d4:01:5d:7c:ae:c9:
         5e:bd:8d:26:ba:be:64:75:78:f5:b4:e2:57:43:4f:c6:53:31:
         98:66:19:a8:3e:70:25:e4:5d:a6:08:04:cb:b5:f3:e2:49:c8:
         5c:88:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:38:23 2025 by rpki-client