Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File:                     31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier:          9iz3j+WM6Yvg0tioHcFGTkXpVonVRyVVOrbqG3V4fZY=
Subject key identifier:   0A:0F:F6:63:FD:30:0E:ED:5C:5A:18:8D:FE:C4:58:C2:D8:E1:66:C8
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       161D635220418C4114DEBE81E4B5A76FEC11B82B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number:          03D1
Signing time:             Tue 07 Apr 2026 15:10:39 +0000
Manifest this update:     Tue 07 Apr 2026 15:05:39 +0000
Manifest next update:     Wed 08 Apr 2026 16:25:39 +0000
Files and hashes:         1: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: 1ugbA+JHJ0UN0dA+5+W6+HRnkWQ09ZvsRpQ7oQnkAHg=)
                          2: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: +txQ7D3V+53YM2P4+M24qGq3cqbf2iTB6O2ZGLdm+BM=)
                          3: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: akfvMDTEj0KlktSUjEZBnBnbLW8sTWugPEddB8txm/k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:63:52:20:41:8c:41:14:de:be:81:e4:b5:a7:6f:ec:11:b8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Apr  7 15:05:39 2026 GMT
            Not After : Apr  8 16:25:39 2026 GMT
        Subject: CN=0A0FF663FD300EED5C5A188DFEC458C2D8E166C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:b7:71:61:33:65:d7:6d:80:56:cf:82:45:
                    78:af:12:44:a4:73:03:b7:8c:20:37:62:7d:40:77:
                    32:50:77:7d:8e:cd:44:89:4c:f8:9c:e0:70:82:ed:
                    ac:a5:d3:f5:bf:42:2b:74:a5:8f:b3:38:f0:b8:20:
                    4f:14:f0:90:c3:1d:68:11:99:6b:d5:9f:ff:77:c1:
                    d4:66:7b:76:2f:8c:b5:35:6a:78:20:7e:ae:6a:39:
                    89:0e:08:bb:7a:f6:35:f0:55:8e:02:30:70:84:8b:
                    e0:d2:9b:de:c8:b2:ab:97:2d:24:b0:2e:45:69:8c:
                    6a:91:25:f4:1a:d8:a7:ad:e9:07:19:80:90:ec:2d:
                    52:ee:6e:61:08:63:33:d8:a3:52:51:89:50:0a:cc:
                    ae:9c:68:be:41:be:8f:3a:ad:5d:d0:65:d0:81:30:
                    09:69:8a:db:84:6e:e9:b5:a8:72:cd:0d:bb:15:7e:
                    aa:6f:51:a9:bc:40:f9:3a:8a:ac:b8:f9:82:83:94:
                    d6:00:58:10:41:6a:29:6c:68:c5:5f:24:5d:3b:7e:
                    f2:69:c5:f4:c8:27:d3:89:53:b0:2a:a5:b5:dc:e9:
                    3d:02:7c:1a:88:49:09:f5:01:55:9c:ad:1f:cd:cf:
                    b9:61:82:20:83:01:7e:dd:06:84:1c:ef:1f:c9:66:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:F6:63:FD:30:0E:ED:5C:5A:18:8D:FE:C4:58:C2:D8:E1:66:C8
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:a9:55:25:e8:7e:6e:4f:ec:78:b3:71:22:fa:2a:86:02:
         08:9a:70:01:a4:fb:09:23:c8:45:23:18:cb:9d:14:42:62:93:
         e4:ab:de:64:a4:1e:4b:1f:ee:c2:f1:03:e4:04:88:c8:0d:4a:
         90:c7:4a:1d:e7:6c:27:5d:48:7e:e6:63:62:e4:fc:0f:11:ad:
         30:4f:35:e3:d9:e2:43:c6:c4:29:4d:4d:0e:c8:95:54:ff:b7:
         fd:80:3f:22:df:e5:38:f8:8d:fd:e1:2b:81:dd:96:a5:c3:89:
         1a:61:3b:ac:44:3e:99:d7:64:f5:35:c5:30:dd:bc:ec:55:32:
         1b:91:66:9b:73:57:a2:f9:e6:f9:a7:8a:47:41:29:00:ff:e6:
         c6:3a:91:44:d7:e6:3f:00:53:b0:d0:ac:31:c2:3b:93:c8:8d:
         75:32:0a:82:36:c3:b5:c9:a1:14:6e:b7:e6:ef:9a:fd:dc:b9:
         93:94:71:3c:21:1c:20:3a:88:b4:56:96:d0:16:d5:8c:8f:40:
         48:4e:b5:c2:92:7c:1a:14:5b:af:e7:63:e6:c1:72:75:17:f9:
         67:e5:a2:7b:0c:59:ef:64:72:f0:1d:e8:1f:08:fd:f6:d7:4d:
         66:9a:3e:31:2a:03:ed:2d:fd:0b:17:d9:9d:95:f0:50:5b:08:
         93:e5:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:43:27 2026 by rpki-client