Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
File:                     966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft (raw, json)
Hash identifier:          SZ3VWNa4gaSnXu2Domyi9+AVB8jeMEm4BhsK8/hqOfw=
Subject key identifier:   58:9D:DD:9E:EF:F8:79:D5:11:33:EF:68:BD:DF:64:27:B5:7D:5C:6E
Authority key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29
Certificate issuer:       /CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
Certificate serial:       060B320DEF413E68A7F2E927B28B1FB112E934B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft
Manifest number:          0102
Signing time:             Sat 04 Apr 2026 04:02:46 +0000
Manifest this update:     Sat 04 Apr 2026 03:57:46 +0000
Manifest next update:     Sun 05 Apr 2026 05:29:46 +0000
Files and hashes:         1: 323830343a326563343a3a2f33322d313238203d3e20323635333635.roa (hash: H63jKCVxvmkQQ3aMkx/LepjKsbCBpKcsiVsNBAOyuH0=)
                          2: 3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa (hash: UTHo9EEFQO4ipEo8t4TSyRqw0gIG4N/wl0NEzcGwaTQ=)
                          3: 966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl (hash: ACocYLKvFH5U/MSnaugnJ1jRawu5lf+Gl28/YV/MTh0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0b:32:0d:ef:41:3e:68:a7:f2:e9:27:b2:8b:1f:b1:12:e9:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29
        Validity
            Not Before: Apr  4 03:57:46 2026 GMT
            Not After : Apr  5 05:29:46 2026 GMT
        Subject: CN=589DDD9EEFF879D51133EF68BDDF6427B57D5C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:67:01:d1:7a:73:dc:fe:fd:51:f7:c6:d1:
                    e5:66:d9:77:0d:c0:04:40:2d:7f:1e:91:6f:e4:88:
                    f5:e1:9c:76:76:f4:2a:d4:1a:03:4e:7a:f3:43:bb:
                    16:b5:ea:ce:49:77:df:62:51:1f:8a:b6:15:93:57:
                    34:3c:b0:32:db:e6:24:5f:03:02:f2:3b:5a:f0:67:
                    68:97:4e:4b:83:21:11:07:60:8d:78:b2:2c:b4:48:
                    6d:56:bf:94:50:ad:b1:e2:8d:9c:2e:1a:2d:81:d0:
                    c5:67:be:95:e6:c2:48:59:13:30:be:96:34:b5:42:
                    ad:4b:6a:0a:52:55:39:5c:c5:8c:56:0b:26:22:7f:
                    7c:c7:7e:e2:56:ca:b5:d9:7e:95:24:34:77:36:db:
                    df:d6:d6:7e:a0:19:de:ef:34:ac:cf:43:1e:2d:1f:
                    23:be:ed:d9:68:14:ec:57:94:6b:d6:34:1f:53:6e:
                    7b:82:f4:e0:21:68:e4:b4:79:4c:38:29:1c:86:77:
                    ce:5a:37:d2:fc:5d:9a:e2:a1:3e:9e:87:eb:67:a2:
                    fa:6f:32:52:9c:90:f1:e5:6a:81:12:7a:47:84:d6:
                    6d:0e:9a:18:fc:89:7e:16:55:ad:98:04:a4:5b:be:
                    1c:2f:cb:2b:70:d4:b0:87:3b:25:64:ae:66:a1:91:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:DD:9E:EF:F8:79:D5:11:33:EF:68:BD:DF:64:27:B5:7D:5C:6E
            X509v3 Authority Key Identifier:
                keyid:96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:e0:43:f7:d4:ab:76:db:97:d2:23:71:30:6b:9a:69:11:
         e7:b0:42:b7:4b:25:86:b2:e6:72:85:78:5c:16:0d:17:de:94:
         67:be:73:59:5e:37:eb:5c:80:d4:a9:e0:02:2d:c9:11:4c:5b:
         a2:8e:5c:7b:a4:2c:a4:48:eb:24:79:ee:e7:f2:00:e2:2f:89:
         f1:52:5f:1c:7f:b9:8d:0c:82:2c:f3:2f:c6:c6:96:2e:f2:92:
         91:99:34:18:bd:12:c0:95:73:b6:ef:ca:31:62:ab:f8:46:8c:
         1e:d6:a3:1b:7f:c2:6c:1e:a6:c5:e5:2f:32:a9:51:cf:bb:8e:
         23:fa:d8:ca:ae:c6:75:8a:f7:3c:12:62:47:04:17:c4:bf:ba:
         8b:54:e9:94:ed:cb:1d:82:0e:2e:f4:fe:ac:07:67:ee:45:c6:
         62:13:36:3e:a2:71:12:37:60:c8:8b:9e:49:4e:61:3a:1d:d1:
         d2:50:01:7c:a0:0c:b5:66:55:f8:0b:9e:4b:f6:c0:88:99:f3:
         a0:ac:f3:6b:47:a2:77:96:2e:6f:03:c5:f3:8e:7f:fa:58:45:
         3e:88:20:b6:27:56:e9:e4:1c:15:1a:b4:c8:11:4f:a3:ec:92:
         70:eb:71:e2:0f:d3:32:dd:34:ec:7e:87:e8:dc:27:e3:9a:a3:
         f4:42:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:24:59 2026 by rpki-client