Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
File:                     7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft (raw, json)
Hash identifier:          C3wX14KRPffa0rvcHYuYSfZJamkWF1jT62jT8PW+TxQ=
Subject key identifier:   38:01:F6:33:59:5D:B1:E4:88:E9:B8:5F:E1:AF:B9:FF:51:52:06:4E
Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD
Certificate issuer:       /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
Certificate serial:       5E83B2008997A182301843678D499411828F9673
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft
Manifest number:          03D2
Signing time:             Tue 07 Apr 2026 07:10:18 +0000
Manifest this update:     Tue 07 Apr 2026 07:05:18 +0000
Manifest next update:     Wed 08 Apr 2026 11:03:18 +0000
Files and hashes:         1: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl (hash: difT6fGV3kba71KKr7apRep0unRQjf/hB6M7Kiay+l4=)
                          2: 323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (hash: CO0+zII5zC6j1oK3HobVIuZD4C55tau72Fchh/kcOrY=)
                          3: 34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (hash: KETqT+1g1XnTntZ+iBufHqcBjFh/TvQzht8j1Ox7MRw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:83:b2:00:89:97:a1:82:30:18:43:67:8d:49:94:11:82:8f:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD
        Validity
            Not Before: Apr  7 07:05:18 2026 GMT
            Not After : Apr  8 11:03:18 2026 GMT
        Subject: CN=3801F633595DB1E488E9B85FE1AFB9FF5152064E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:7d:6e:ad:c2:90:2e:8f:b5:90:28:c5:cb:
                    57:c1:04:51:2a:d3:a5:33:9d:4a:c0:0a:01:63:53:
                    0b:0f:0e:f3:7b:08:6a:b7:96:06:93:df:79:08:67:
                    ef:67:f2:52:c6:42:94:80:43:77:55:34:cb:45:07:
                    c6:51:d7:15:4a:60:1c:bd:cc:be:27:ca:69:30:65:
                    fb:73:c7:c5:60:e1:7d:0e:b2:38:54:d6:3c:27:80:
                    31:76:84:d2:79:2d:f4:9b:26:94:53:6e:e8:a6:83:
                    1b:d8:6b:03:26:97:5b:45:77:92:7a:af:ff:56:47:
                    fc:61:d6:b9:e7:80:e8:2e:bb:21:f7:e0:93:96:6c:
                    f0:20:2f:93:df:71:29:89:00:e6:12:d8:94:79:63:
                    9d:be:f7:9e:aa:a9:4d:c0:59:26:e7:92:e6:6b:7b:
                    b5:52:69:82:99:65:92:2d:2b:5d:fb:de:fa:23:25:
                    9f:3c:5b:3a:b9:f2:d5:dd:ee:30:b6:9f:41:71:36:
                    a0:dd:30:9b:f5:a8:67:1c:f1:65:51:93:4f:b3:3e:
                    34:27:d4:14:18:1a:bf:6a:55:30:93:c1:f5:78:47:
                    b2:c0:0c:81:ce:55:06:80:3a:7f:53:06:9e:54:e9:
                    78:7a:b2:cd:06:e3:30:c1:52:2b:0c:ec:1a:67:fa:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:01:F6:33:59:5D:B1:E4:88:E9:B8:5F:E1:AF:B9:FF:51:52:06:4E
            X509v3 Authority Key Identifier:
                keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:30:1b:13:4b:dd:8c:37:de:d2:34:46:27:04:1f:6e:65:96:
         64:63:7f:db:34:5a:49:43:df:ff:23:a6:d3:b3:57:08:62:cf:
         d4:4e:33:17:bf:c4:80:af:dc:ba:99:4d:fe:11:cc:04:a1:c2:
         d8:9d:ca:78:67:e5:f5:dc:7f:39:cd:8d:25:de:0e:17:bf:9e:
         3c:e5:02:7d:4d:cd:c0:01:02:5e:a5:aa:0f:02:80:cf:2b:f8:
         69:59:a8:e0:01:63:fd:7f:4a:7a:34:91:32:8d:2e:6c:53:90:
         ef:d3:f3:38:48:d5:ee:84:52:4a:a8:12:b4:d5:a1:16:c8:9d:
         67:33:8e:ff:b3:21:32:64:b0:1e:a1:7e:a4:37:d2:62:01:bf:
         ca:14:d5:94:26:c7:e2:92:d1:79:99:68:9f:95:0d:95:c9:f4:
         b4:ff:44:18:10:6e:28:24:7b:85:3a:2e:dc:fc:09:8d:6e:d3:
         82:c5:9f:cf:44:a2:e0:04:9d:d2:fc:af:23:85:b6:33:cf:3b:
         83:9f:8c:f1:7f:81:12:1a:5a:30:a0:72:fe:a2:2d:87:80:08:
         00:76:df:0d:bc:29:91:63:52:0e:09:7a:8c:64:b8:fa:0f:04:
         b1:90:64:fa:01:b8:fc:60:22:2e:f9:59:6d:4b:30:5c:cf:66:
         2a:de:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:24:42 2026 by rpki-client