Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          A6njQgA24lNctYjCqW2Zs7UhDTeoysQFw9nHVmpr/Mo=
Subject key identifier:   BE:2D:8F:63:DB:EA:4F:9A:DC:EE:D5:BE:F2:AF:AE:CB:CA:C4:37:65
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       4F40C1464E44F72FBEF350771B8F7F6F22B6BA1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          03D0
Signing time:             Tue 07 Apr 2026 08:20:18 +0000
Manifest this update:     Tue 07 Apr 2026 08:15:18 +0000
Manifest next update:     Wed 08 Apr 2026 11:45:18 +0000
Files and hashes:         1: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: BqkYLyBxvTGEXuuKaNe0hCrZShiFjwNiN3EINSPi9hE=)
                          2: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: VhwcChLSdWBLpD4v0h7bTJ1INyODsP8BpIUpRtsNK+k=)
                          3: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 6s/FaMp/ZsnjfWVOnc+p3rx+8q4B91cm3tN3x0FOAT0=)
                          4: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: kNQyptScBPhOVsc6iYNFNNYrMeiT5oA8elRJU8gbwlA=)
                          5: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: E27vs+GAWSDObmR9Obk/OsX4UMjydHaznQQcHH8601E=)
                          6: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: C+gMF8lR3dvR8vTd8qNvjw4RVU0dpwxHmuV+a5uGA+w=)
                          7: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: +1+oMBpgCkBNiZ2x7MPRwvfY/7eE5w6u6cRP93HFfe0=)
                          8: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: xWNhvp/3QMZOspSzF3KUpPc7sE2tiQbL/ve7NBZtTYE=)
                          9: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: bpz7dRfYsJpsWE7ZeeZLq9Glnz+1+YxMYGaFxzM2AVA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:40:c1:46:4e:44:f7:2f:be:f3:50:77:1b:8f:7f:6f:22:b6:ba:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr  7 08:15:18 2026 GMT
            Not After : Apr  8 11:45:18 2026 GMT
        Subject: CN=BE2D8F63DBEA4F9ADCEED5BEF2AFAECBCAC43765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:17:5f:c2:9c:9b:67:f9:c1:e2:fa:b2:9f:
                    16:47:43:b9:08:a6:10:8b:47:a8:77:94:7f:86:f3:
                    1c:26:2d:52:bc:0d:07:fe:c8:22:dd:8f:bd:e6:c7:
                    0e:fa:11:b2:01:44:50:6f:20:02:49:fb:52:fa:c4:
                    99:57:58:77:63:04:16:3a:6b:0f:3e:61:e6:30:8a:
                    e1:09:c7:f6:dc:0f:88:3d:6d:0a:18:f5:31:07:08:
                    0c:e4:28:fe:c1:01:71:73:54:c2:6f:25:a9:26:57:
                    cd:e2:b1:f5:b3:6d:8c:35:d0:00:9f:b3:60:5f:c2:
                    e4:b1:1a:31:69:28:e1:76:3d:c5:3a:66:74:01:83:
                    0a:7d:52:6d:e2:95:ce:d0:18:fc:ab:2e:3a:4e:9e:
                    ce:f4:bb:60:2c:a3:a9:a4:32:ed:bb:5f:6b:c1:c9:
                    b1:ee:76:c7:16:d7:1f:90:97:0b:e3:65:59:33:d2:
                    ea:f6:a6:a2:65:a7:6c:ce:f7:d4:4e:01:c3:36:26:
                    2e:66:25:75:60:dc:73:97:a8:cf:d8:3f:94:e7:91:
                    99:c1:a1:0c:2b:8c:4d:3b:27:1b:28:f1:c5:f2:5d:
                    d3:34:c3:e1:de:b7:32:73:99:15:6c:1c:8f:9a:c0:
                    22:49:df:2c:82:d1:63:61:53:6a:d1:54:8e:d2:9d:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:8F:63:DB:EA:4F:9A:DC:EE:D5:BE:F2:AF:AE:CB:CA:C4:37:65
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:95:be:bf:df:3c:50:6d:ee:a9:f9:5d:3b:d2:0e:8b:7a:
         35:47:d1:63:47:e7:5f:25:ef:a6:54:9b:e7:0f:29:54:87:1e:
         48:c3:5a:83:9d:55:ba:72:a9:5f:ac:c6:c5:cc:c6:2b:1b:04:
         5f:ff:5e:56:b3:d1:bd:24:d6:fe:71:8b:14:10:37:2e:a2:c3:
         a1:4e:6c:7f:f0:3b:93:28:89:88:00:a4:5e:0f:cc:20:6c:be:
         65:37:19:7b:12:de:52:17:67:3b:82:d3:24:76:92:e0:4f:28:
         af:13:ca:af:7c:3e:39:5e:63:3f:41:7f:88:3f:b0:35:e9:c5:
         ef:7d:f3:ab:81:53:cc:14:b0:14:a4:43:78:f8:b8:1a:93:95:
         6b:1c:02:ce:70:0c:bd:76:29:03:32:93:f5:73:f7:00:5d:f1:
         a5:a5:48:89:4a:11:ae:33:13:52:ac:84:e9:ec:99:bf:f5:8c:
         fa:6c:12:3c:6f:2a:7e:cb:ea:dc:2b:00:4a:3a:ae:d3:83:5d:
         6d:ad:ef:a4:db:f5:98:67:f3:4b:ca:b0:cb:64:53:80:aa:9d:
         18:1e:9c:f4:3f:1e:87:04:1f:0b:51:b5:9f:fb:67:2f:3a:69:
         cd:69:b4:ba:e1:a9:95:bf:e3:8d:7c:36:91:a8:7d:e9:63:b7:
         dd:fc:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:24:36 2026 by rpki-client