Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
File:                     F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft (raw, json)
Hash identifier:          r0/+TCf/WkeizZ0SyEwPAk1WrtoLdxmBMK1ez34pHC8=
Subject key identifier:   40:43:48:57:B1:BD:A7:FC:A0:4B:05:D5:B5:9B:7A:9C:D2:69:8D:AF
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       3F288D90787D2C0A5B09C78D32118550767D0E43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
Manifest number:          04D3
Signing time:             Tue 01 Sep 2026 15:31:15 +0000
Manifest this update:     Tue 01 Sep 2026 15:26:15 +0000
Manifest next update:     Wed 02 Sep 2026 19:20:15 +0000
Files and hashes:         1: 323830343a326330303a3363303a3a2f34322d3432203d3e20323635313837.roa (hash: l2a8/o589NyI8O3288HNq9riqcsg3NaqxdnyDGzCgww=)
                          2: 323830343a326330303a3130303a3a2f34322d3432203d3e20323635313837.roa (hash: 4a1ILGcx9RdL9abWECf7+GQWas6DlSbpJ2slOtatRzc=)
                          3: 323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa (hash: 2NVXAxRHrhi7F2E2E10hnl89PQrHGvoGuv/5DE7/d9s=)
                          4: 323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa (hash: NHDXvMXqHDD1Q6bl3DhF4gmo9/LvukuNia+J8J4Hqzc=)
                          5: 323830343a326330303a3330303a3a2f34322d3432203d3e20323635313837.roa (hash: o1YgLBA/AzbFozP47CBXoQ8O4JU/ikoqpTA52fTZnGE=)
                          6: F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl (hash: 1Ux4UjnbCYaDRjNygJwBjoDnbvxg8HpXagtC4XkHQ1A=)
                          7: 323830343a326330303a3a2f33332d3333203d3e20323635313837.roa (hash: 8+oCvyDPRHSLjcloVSm8A903tYKLDO2/7SqK26B4i9E=)
                          8: 323830343a326330303a3a2f33322d3332203d3e20323635313837.roa (hash: Jz+k36/pt3jU8iYlVF8LuE2715b7KpNkUCYaI4gIrVw=)
                          9: 3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (hash: 3nnWp4z0u0F/ZBeeps01X/Te4+igufch9fuAk1P89do=)
                          10: 323830343a326330303a3234303a3a2f34322d3432203d3e20323635313837.roa (hash: xlVkEzV0K/Ks1F8tcKrB9Y2FhYUhvAejBjPuMHDuESc=)
                          11: 323830343a326330303a34303a3a2f34322d3432203d3e20323635313837.roa (hash: 7Rny+HoY16fuLygnxOeig+V/7HHExRLWC6aMTYhODZE=)
                          12: 323830343a326330303a383030303a3a2f33332d3333203d3e20323635313837.roa (hash: +aRLfghh9bFOuW/Yg31cfrEkBL6Oj2v5/Jqqmbxcmjw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:28:8d:90:78:7d:2c:0a:5b:09:c7:8d:32:11:85:50:76:7d:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Sep  1 15:26:15 2026 GMT
            Not After : Sep  2 19:20:15 2026 GMT
        Subject: CN=40434857B1BDA7FCA04B05D5B59B7A9CD2698DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:d0:a4:57:da:87:8d:46:df:b8:53:a5:43:
                    dd:2f:df:ad:b2:fb:e7:0f:cf:a6:a9:b5:d8:a5:53:
                    d5:74:35:2b:a9:20:9c:fd:63:83:40:d2:2a:04:7a:
                    4c:a1:9e:2c:11:2a:69:ac:59:f7:ce:62:92:a4:48:
                    f3:41:3c:02:ef:d0:c4:c9:52:85:6d:ff:19:83:22:
                    73:15:0c:96:59:76:8f:52:b7:e1:80:fd:c3:55:84:
                    97:19:16:16:e6:d9:67:57:8a:2e:1c:47:8a:a3:e9:
                    27:3b:a3:1f:0c:9e:04:b0:c9:c9:fd:e5:4e:ed:bd:
                    19:a8:ab:9d:56:dd:d6:0c:31:78:81:ca:24:f5:5e:
                    56:e3:9b:c8:f5:7e:f6:a5:aa:2d:9c:76:df:56:44:
                    4e:bc:3e:db:7c:01:29:93:fc:0c:6a:c5:9e:17:4f:
                    6d:cd:b6:3a:d8:f1:18:7e:c9:5e:5b:70:79:92:5c:
                    32:12:8b:cc:7e:a2:41:36:ad:59:db:80:83:b7:fc:
                    8a:b2:79:5b:a4:e8:18:28:77:6b:ec:2a:8b:78:b7:
                    0c:4e:96:57:89:56:1f:17:d5:f0:d5:07:19:8d:55:
                    54:e9:23:6e:21:35:48:32:66:d6:01:fc:b4:d8:2a:
                    4c:a2:ef:d3:96:87:58:cd:47:b5:8f:05:27:a5:cb:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:48:57:B1:BD:A7:FC:A0:4B:05:D5:B5:9B:7A:9C:D2:69:8D:AF
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:02:4f:2d:1d:66:ce:69:39:36:7a:7e:76:f7:93:ba:af:
         9d:c6:4c:09:bd:92:04:6d:09:53:5e:6c:3b:b4:28:d2:2a:5b:
         b1:fc:f3:cb:eb:56:dc:33:ff:ed:d5:9e:31:65:48:0a:b0:a1:
         e0:26:fc:e6:cd:e5:92:47:05:6b:58:b5:1d:4b:f6:0f:0a:50:
         bb:0e:55:92:05:a3:88:58:f0:a9:46:1c:17:85:31:50:b9:63:
         27:e0:69:8a:6d:90:4f:db:7d:23:ee:05:12:da:38:00:b0:5d:
         a4:b9:14:b3:fc:e7:70:a5:a9:06:df:d6:ca:24:f4:3c:c5:e7:
         38:d0:3f:5e:4e:d0:6d:72:44:57:9a:12:05:7a:cd:42:06:48:
         cf:09:20:81:90:73:07:45:88:fe:c2:86:c9:ac:7c:67:db:cc:
         a2:db:ea:61:88:f7:ba:d1:44:22:ca:62:42:ff:d5:d1:ce:ad:
         1b:4e:21:f5:82:1a:d7:48:0b:d9:26:11:77:18:bf:92:fb:89:
         18:a3:ba:2e:5d:1e:fc:de:27:15:22:91:e2:fc:e5:23:7a:41:
         a3:2d:1b:cb:ab:71:75:21:d6:5c:e5:8a:3c:cf:89:fc:65:fe:
         b6:4b:a9:e4:1c:a4:64:43:23:e5:dd:e7:f0:a0:46:42:b2:6b:
         18:af:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:47 2026 by rpki-client