Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
File:                     5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft (raw, json)
Hash identifier:          2VHiTKWs4fWSoq7rydXJOwV++E1lsyMZ8Y1yYTeBOCw=
Subject key identifier:   45:C3:5C:67:B7:22:C4:E4:A6:05:8B:0F:DF:B8:62:88:A1:7B:85:4B
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Certificate issuer:       /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial:       348EE07DE7956A09884409C2031C1AC91FA37501
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
Manifest number:          03D1
Signing time:             Tue 07 Apr 2026 08:35:18 +0000
Manifest this update:     Tue 07 Apr 2026 08:30:18 +0000
Manifest next update:     Wed 08 Apr 2026 10:37:18 +0000
Files and hashes:         1: 323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (hash: 1KP1H1wmk0vqfIE02PxWHShx4Jujrg5XTjlNjBEKhCA=)
                          2: 3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa (hash: fywAj1bnhRJmRsgN0Mf3WPSJCCod6hqGB+vH03+KmCU=)
                          3: 5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl (hash: Bu+HYwlWquUWw61trRSUffN+RuACyuPB+8Dx/xDFahU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:e0:7d:e7:95:6a:09:88:44:09:c2:03:1c:1a:c9:1f:a3:75:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Validity
            Not Before: Apr  7 08:30:18 2026 GMT
            Not After : Apr  8 10:37:18 2026 GMT
        Subject: CN=45C35C67B722C4E4A6058B0FDFB86288A17B854B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:97:d5:c1:63:c3:a9:b2:4f:c1:54:c9:70:
                    3b:20:57:ac:ce:cb:51:3e:95:9e:7e:1c:7b:3c:81:
                    18:78:7e:78:d1:6d:69:c2:27:95:11:71:40:ae:e6:
                    9b:6d:fd:90:8e:db:ef:80:73:cb:e4:b2:fd:6b:6e:
                    b0:ae:6e:49:17:4d:94:93:1d:82:12:95:bd:a9:06:
                    2e:bb:b4:7f:5e:e7:3e:f8:a8:4c:29:57:df:88:27:
                    02:09:a2:0e:62:4b:ba:95:34:25:f5:12:25:d1:3c:
                    a3:4e:5a:b6:7c:9a:2c:6a:76:b6:c5:bb:20:68:94:
                    06:5c:b8:f1:c6:34:e7:74:07:a0:83:1d:f5:78:c0:
                    f4:9b:29:13:d0:34:28:cc:e1:1b:b7:54:f1:91:44:
                    fb:b0:26:87:a9:85:c5:6b:eb:5e:bf:d6:87:ce:b4:
                    ee:e7:85:14:88:60:fd:f9:1e:52:d8:a8:8c:e5:1d:
                    86:45:c4:61:21:f6:16:0f:b3:72:a3:ed:1b:48:78:
                    76:52:c7:4f:56:9c:ce:27:75:34:61:f5:b1:3c:e8:
                    7b:66:66:6d:c6:28:ce:3e:f6:cf:09:b6:bb:a8:4d:
                    86:a1:7d:bb:0c:13:40:9e:dd:34:90:5c:cc:e3:ac:
                    da:c9:55:37:d7:1f:02:cd:4c:78:7a:97:5d:e8:3e:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:5C:67:B7:22:C4:E4:A6:05:8B:0F:DF:B8:62:88:A1:7B:85:4B
            X509v3 Authority Key Identifier:
                keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:3b:e3:89:0d:a4:46:47:92:9f:80:c3:44:57:04:a8:da:
         2b:77:b3:52:0a:d2:1d:75:73:90:43:8d:7d:65:c3:e8:5c:1f:
         ca:c3:0d:9c:c5:e7:cf:67:8a:11:29:2d:9a:ae:cb:f7:e7:20:
         50:5d:d8:c4:bc:85:da:4b:47:ad:77:2b:36:97:cb:d1:d4:94:
         d1:4e:4f:1f:76:e8:48:15:89:ff:0e:1c:a3:d0:36:a0:fc:c0:
         6f:2e:5e:14:77:35:2e:da:18:be:5d:23:5a:ed:d6:a2:70:ae:
         0d:00:24:9e:8a:d8:dd:cc:8a:ab:59:4a:48:c4:df:bf:28:55:
         f9:ff:f2:44:6f:24:bd:b2:01:60:09:f0:f2:8d:59:d1:78:29:
         54:8f:67:35:b6:90:ce:41:dd:b7:f9:32:35:8a:3b:b8:00:b6:
         42:5f:d8:e9:b2:6a:33:c1:d6:91:01:cb:c7:55:4f:9b:0d:c9:
         95:dd:00:13:c5:b6:ff:85:c6:07:8e:b7:14:46:87:6f:cf:c9:
         ba:4a:ee:7f:c1:1c:cd:60:90:1e:5d:69:a0:7a:9c:15:9f:da:
         9b:4f:01:e8:82:c9:af:4a:00:13:4f:c9:fc:20:bb:dc:31:92:
         0b:5b:86:8a:f7:13:0e:04:cb:30:fa:68:a7:e3:6f:a2:25:38:
         ff:c6:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:49:00 2026 by rpki-client