Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft
File:                     F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft (raw, json)
Hash identifier:          qmUCIm57Fh8UaFXucydc4dakDwfS3BQK8qfRKAESiVU=
Subject key identifier:   A8:2B:CB:6B:76:99:FA:E3:B8:2B:AC:74:8C:0E:20:1B:2C:89:F3:AD
Authority key identifier: F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95
Certificate issuer:       /CN=F60DD5691290F0E1020443A5AA367AB2EA0FF195
Certificate serial:       61A4148156280629609E0B2348562AA9328C12AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft
Manifest number:          45
Signing time:             Mon 21 Jul 2025 21:25:43 +0000
Manifest this update:     Mon 21 Jul 2025 21:20:43 +0000
Manifest next update:     Wed 23 Jul 2025 01:23:43 +0000
Files and hashes:         1: F60DD5691290F0E1020443A5AA367AB2EA0FF195.crl (hash: FKG/kogUv5AVIs3KufAIc8eHWn+UDGcZ6JcVL0b9tb8=)
                          2: 34352e352e3137382e302f32342d3234203d3e20323636313934.roa (hash: k1clxj60SzdXV3MmYOYoHcKXanbXohJ8Myg6YN40+iI=)
                          3: 34352e352e3137392e302f32342d3234203d3e20323636313934.roa (hash: GFat7Isz1oamA9ddihEdtaW62hLDvsUfXMoGV0pRDow=)
                          4: 34352e352e3137372e302f32342d3234203d3e20323636313934.roa (hash: FdYACwTg4NYP1/tFzw5HsBvt03XO5V0lebyCymmkRag=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:14:81:56:28:06:29:60:9e:0b:23:48:56:2a:a9:32:8c:12:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F60DD5691290F0E1020443A5AA367AB2EA0FF195
        Validity
            Not Before: Jul 21 21:20:43 2025 GMT
            Not After : Jul 23 01:23:43 2025 GMT
        Subject: CN=A82BCB6B7699FAE3B82BAC748C0E201B2C89F3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:64:98:b3:91:32:05:48:5f:dd:78:bf:d8:
                    43:21:db:9b:11:42:85:5d:4a:a5:e1:2e:54:b9:99:
                    07:1a:97:4a:a2:f8:6f:a0:1c:06:53:e2:f1:d0:8d:
                    9d:2b:e4:f6:0a:6e:d0:63:d2:8f:6a:86:16:e6:17:
                    2f:30:5f:26:42:83:08:d4:de:6a:9d:c9:1b:11:29:
                    dc:30:fa:d4:62:a1:a8:97:22:17:b6:47:0b:c5:32:
                    50:8e:55:70:c3:bd:8c:b2:e1:9e:1d:e4:3d:f9:e9:
                    bd:8c:aa:b9:b0:eb:ca:cf:60:33:2b:e5:b0:86:70:
                    b9:37:8c:fc:a3:24:ae:65:62:2b:21:a6:b2:30:42:
                    63:4e:90:79:8c:65:64:5e:c5:48:c9:66:21:76:b4:
                    09:ab:9b:76:a5:82:d9:d1:5a:25:22:df:60:a8:83:
                    18:e5:9f:ae:dd:c5:50:41:6e:6c:aa:0c:ea:af:a0:
                    12:b5:d6:25:1a:1e:74:76:b4:51:74:61:d1:3e:9c:
                    6c:9d:07:65:cd:ca:87:ab:eb:ce:a7:ae:89:2d:0e:
                    c8:6d:47:28:31:48:fe:d7:34:0d:d0:b2:99:03:3f:
                    aa:ad:27:06:e0:e6:3d:b0:13:b2:e9:38:14:43:6d:
                    d3:97:a1:fa:b1:5d:c2:1a:e7:04:4a:1f:24:4e:1a:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:CB:6B:76:99:FA:E3:B8:2B:AC:74:8C:0E:20:1B:2C:89:F3:AD
            X509v3 Authority Key Identifier:
                keyid:F6:0D:D5:69:12:90:F0:E1:02:04:43:A5:AA:36:7A:B2:EA:0F:F1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F60DD5691290F0E1020443A5AA367AB2EA0FF195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/F60DD5691290F0E1020443A5AA367AB2EA0FF195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:fd:41:12:56:f5:31:f3:72:02:00:54:91:d6:5c:0f:30:
         76:8f:f4:74:ca:1d:a6:2a:bc:41:44:dc:62:87:4c:fa:e9:12:
         49:5d:e8:51:cd:68:9e:2b:8a:33:a5:a9:0e:3f:83:61:30:9f:
         e5:3c:4a:ee:0a:98:ac:c4:ed:10:7e:d2:c2:81:75:66:d6:c0:
         34:4e:08:2e:cf:c2:4f:c8:dc:be:1a:97:ae:04:a9:8b:bf:3e:
         7a:b7:b6:b3:5a:44:70:a0:9a:18:29:7f:87:1e:dc:4d:3a:39:
         fc:ab:08:95:01:ee:ae:8b:db:6e:44:63:80:72:af:26:79:b9:
         a4:0b:88:77:89:42:9b:3a:77:aa:8a:60:6b:2b:9e:09:a8:5f:
         10:9b:31:0d:7c:b4:7a:c9:f9:3f:12:03:16:17:3d:d5:55:39:
         c9:7f:af:19:e3:f2:c3:52:e3:72:8a:2a:eb:c0:3c:1b:8d:c1:
         fc:53:ed:91:68:50:a5:49:8d:f9:42:2a:f6:ec:b2:32:6d:1b:
         fa:16:b1:31:75:ab:d5:36:0c:d3:8e:24:ee:81:8d:bb:09:6b:
         4e:a4:d8:97:59:b1:11:8d:40:a7:e2:ee:48:83:fe:e0:16:14:
         2a:93:ef:c9:9e:c9:15:d9:73:aa:64:e5:cb:02:d8:3c:27:48:
         d5:15:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----