Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
File:                     D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft (raw, json)
Hash identifier:          YHMw32ztLz39qN1msPM4elchOaOLUxilBdckiup12ng=
Subject key identifier:   67:A0:29:56:45:39:3F:4C:CE:B7:A0:2D:97:51:BB:8C:13:31:02:26
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       7F2744136BDC5FE4CE24D4FADE479F6428F5C974
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
Manifest number:          013F
Signing time:             Thu 24 Jul 2025 20:27:46 +0000
Manifest this update:     Thu 24 Jul 2025 20:22:46 +0000
Manifest next update:     Fri 25 Jul 2025 20:51:46 +0000
Files and hashes:         1: 3137392e34382e3130312e302f32342d3234203d3e20323731303732.roa (hash: NWGaby+sw9nLGadITkx3AnbOb1cKq6lFk7uCvR6GtPs=)
                          2: 3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa (hash: FGgrdPf+SQBQSWJDbC+N3GBKjLWnUhu45Bei0Gek56g=)
                          3: 3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa (hash: DQRCNeq2qrni6VNoXnoYnhsIBZ1X7ca8d6gUp0dzvDA=)
                          4: 3137392e34382e3130322e302f32342d3234203d3e20323731303732.roa (hash: h/oHBtUjGQpdxg/mRFO2THjSruVmF6xQtH3NO4gCBCI=)
                          5: 3137392e34382e3130332e302f32342d3234203d3e20323731303732.roa (hash: 3+arhAjaUxOVjMsphoEQe/21QInQxRLhJ4MA/z/zbo0=)
                          6: 323830343a373564343a3a2f33322d3438203d3e20323731303732.roa (hash: gZABhcIIj3zj1i0lRsb/GXhkfmwPqSUrhvrZ7Xg8I/w=)
                          7: D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl (hash: xWoN9y3p3lS41x59bRcmi8KSvs3HLCn8RqNPTqUQ8vI=)
                          8: 3137392e34382e3130302e302f32322d3232203d3e20323731303732.roa (hash: 9oTuIb/H6MITwhQvesDoaO/22T2cMrUGhl4WMdowddg=)
                          9: 3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa (hash: 7MasVKEFLVqzrDSLBSn/VMDsqgpmW530i/xVnkAdVnA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:44:13:6b:dc:5f:e4:ce:24:d4:fa:de:47:9f:64:28:f5:c9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Jul 24 20:22:46 2025 GMT
            Not After : Jul 25 20:51:46 2025 GMT
        Subject: CN=67A0295645393F4CCEB7A02D9751BB8C13310226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:c7:80:d6:93:0c:82:04:51:42:61:5a:4f:
                    f2:2d:fc:ac:6b:14:a0:d3:e3:a9:7f:ff:2e:a3:20:
                    12:a2:c0:39:fb:91:16:56:32:90:fc:43:56:b1:cd:
                    20:af:54:1a:4b:88:76:7c:19:da:c4:60:45:80:5c:
                    db:ff:a5:d1:89:30:a2:8c:14:59:bc:76:14:ef:1d:
                    b0:30:44:60:3a:5c:54:f7:60:b0:8f:4f:13:4a:d3:
                    1f:4c:7c:12:00:aa:16:0c:4d:b9:2d:07:bb:05:16:
                    c4:8b:0f:9d:69:b4:f1:7e:f2:9b:75:97:cb:78:b1:
                    95:d7:0f:85:4e:d8:36:d4:6b:ed:35:41:8c:87:fc:
                    b3:01:3a:72:79:95:42:be:03:34:af:cd:70:69:74:
                    50:f0:5e:41:2f:1c:12:c1:bd:5b:5e:e7:36:e0:c1:
                    9f:b0:6a:e3:d3:24:f5:6f:7e:1b:93:5a:7a:34:44:
                    14:fa:80:a1:15:da:ab:77:5b:cb:f1:8b:30:67:b6:
                    80:4a:99:1e:81:f6:bf:8a:53:b1:9c:bc:14:cf:04:
                    e2:8e:05:13:38:c9:a3:86:c2:b3:9b:0d:7f:2d:ab:
                    69:87:dc:0a:5a:97:a8:3e:03:2a:64:a9:4a:1f:97:
                    99:46:84:af:3e:59:9e:d0:88:66:33:d1:89:fd:1c:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A0:29:56:45:39:3F:4C:CE:B7:A0:2D:97:51:BB:8C:13:31:02:26
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:a9:05:7f:b0:be:8a:96:3b:ea:4d:5d:95:e4:6f:d6:62:
         e4:e9:ab:af:a0:79:89:66:2a:e6:dc:87:6c:a9:ac:c8:bb:60:
         86:0d:2a:e6:a8:cb:13:11:a5:24:ae:22:a4:d7:d4:ca:9a:66:
         a6:77:88:30:5f:83:f4:6b:3d:4c:06:8d:1f:f2:27:93:04:14:
         13:e3:05:44:bf:9f:fe:9e:b0:56:57:5b:ce:97:8a:6d:39:67:
         9f:ee:6d:be:30:75:fe:19:67:3a:17:2d:a7:b8:16:0c:37:cf:
         c9:09:82:a1:fa:d8:38:c8:4f:1a:e5:06:99:33:ec:ed:b3:da:
         f9:ec:64:9f:64:6d:ca:90:6d:45:14:9e:e5:ff:60:df:1c:e2:
         84:de:9d:9b:5a:be:27:51:ab:01:32:aa:ee:4a:5f:69:e6:22:
         64:ff:f1:8a:e6:d1:5a:9a:cf:38:5f:97:8d:bc:ac:fe:a7:0e:
         eb:29:67:31:0a:16:a3:4f:f1:8c:f5:90:05:cb:3c:a9:b0:d8:
         98:35:06:3f:22:94:15:97:de:80:52:2b:42:b8:81:e8:aa:4b:
         70:75:51:78:7f:ac:ee:ac:85:6d:3f:6f:5d:8a:f6:12:06:4b:
         56:79:7a:ec:7e:db:fd:3e:7e:55:2c:55:3b:b4:47:9f:26:7b:
         b0:91:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:54:45 2025 by rpki-client