Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
File:                     A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json)
Hash identifier:          RRMg4IofUZ7B4XAZg0ouCqTimTGBZVgSJOtH820lQlM=
Subject key identifier:   BC:C0:5F:4B:73:06:0D:C0:4D:51:72:7F:07:71:25:DB:EC:24:C1:10
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       2F037686DF93C1F87D8988D25667695139F1342E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
Manifest number:          03D6
Signing time:             Tue 07 Apr 2026 05:55:18 +0000
Manifest this update:     Tue 07 Apr 2026 05:50:18 +0000
Manifest next update:     Wed 08 Apr 2026 06:12:18 +0000
Files and hashes:         1: 323830343a333332343a383030303a3a2f33342d3334203d3e20323635333737.roa (hash: KZ08cEXRzGSOY25I558bspSuiE/IdwrRbAX8Y7iRahA=)
                          2: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: ZaA76/DURLjwy2NID3Yq5H0knXvSdFk0cyvCLdrQrkM=)
                          3: 323830343a333332343a3a2f33322d3332203d3e20323635333737.roa (hash: JxDXV9MhiAJKYn9uHOv9NbA3Wu/mNEJYPTr19Os28jk=)
                          4: 3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa (hash: BIH2imkXSWieWKcbpjBXbzQAILFdJjJYlzY36H5j5co=)
                          5: 323830343a333332343a3a2f33342d3334203d3e20323635333737.roa (hash: CDJobeX8y/DiU5Rd3MFkX29byIcXY99u27dC2ClVWZk=)
                          6: 323830343a333332343a633030303a3a2f33342d3334203d3e20323635333737.roa (hash: mRNluWEg1V6LzvIXjgkg4/FK8UwlnU/D1MacQZOvMAA=)
                          7: 323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (hash: 2KqDtMI32trcm+dIc0asyHXKfPxIJIVs8zayQUEnENI=)
                          8: 3136382e3139342e31322e302f32322d3232203d3e20323635333737.roa (hash: /+yp1PfHZWQZfC8mwGGi0AulGaKTrIZ4wUD3Ry55A9k=)
                          9: 3136382e3139342e31322e302f32332d3234203d3e20323635333737.roa (hash: 6ckCPa2dlKKdsBhZSS321FBipViWsRSsq8r3gklI62Q=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:76:86:df:93:c1:f8:7d:89:88:d2:56:67:69:51:39:f1:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  7 05:50:18 2026 GMT
            Not After : Apr  8 06:12:18 2026 GMT
        Subject: CN=BCC05F4B73060DC04D51727F077125DBEC24C110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:61:eb:a8:06:e8:1b:d3:cb:60:91:b9:f0:
                    b9:f5:44:5f:17:bc:59:a8:4b:57:34:91:34:dc:8a:
                    51:11:54:86:96:de:61:45:b8:76:eb:32:2f:15:69:
                    b4:21:1c:54:07:fe:a2:f6:94:9f:94:c0:e4:a0:df:
                    52:26:4c:52:ff:f5:a4:57:0b:c9:8a:c8:f2:0b:61:
                    9d:f4:6c:b9:cf:07:d0:5c:b3:60:db:a9:17:01:6e:
                    b4:6f:2d:29:61:97:08:5d:b6:42:e9:2e:19:18:95:
                    0b:fe:fe:d4:33:ef:e6:c4:c0:9c:2d:df:35:40:ac:
                    34:1a:ed:c1:34:f4:88:50:b1:f9:30:55:2e:57:b1:
                    0c:09:d4:65:e9:47:9a:d3:b4:60:5e:bd:5b:4d:3d:
                    aa:83:e4:c4:f5:94:c1:95:ed:96:10:7d:dc:b3:22:
                    9e:7f:35:c3:6d:9a:23:42:32:be:8f:0d:09:3d:ab:
                    ba:8a:41:ca:40:50:48:9a:51:84:f0:60:6d:83:74:
                    ed:8d:a4:b3:f9:3d:02:32:c5:60:64:ba:e8:aa:d7:
                    81:fc:0b:95:0e:e5:ad:ea:c4:bf:dc:31:68:d0:b1:
                    eb:e3:fd:c7:c0:66:5b:3d:35:e8:a7:3f:e1:e4:2a:
                    98:d0:e3:a0:64:74:7e:a6:23:74:b7:11:dc:fb:d6:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:5F:4B:73:06:0D:C0:4D:51:72:7F:07:71:25:DB:EC:24:C1:10
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:cc:77:a6:84:a9:1f:e0:a8:3d:9d:7f:c1:35:3c:06:b8:
         65:ce:61:92:8c:1c:f2:15:d5:2b:25:87:62:50:19:fa:d5:07:
         e5:f1:7e:df:47:a9:8f:0c:35:a5:a3:bc:21:46:4f:ff:7c:f5:
         e2:49:b6:b7:65:c9:52:3d:3c:8b:ea:10:93:72:c6:49:d7:7e:
         bd:65:5c:0a:7b:3d:b5:1e:d8:f9:ad:50:0d:aa:5c:db:e0:5f:
         fa:a1:f2:d2:5e:17:bb:65:d0:95:28:6f:5e:e0:62:12:90:cf:
         1e:b1:6c:e7:10:da:d6:a9:5f:27:9b:01:81:13:fb:cb:19:60:
         3f:37:20:23:dc:fb:4e:a7:cd:58:87:be:31:57:bf:96:ed:fc:
         f5:06:e5:ea:ca:58:2c:8d:fb:f9:63:35:78:78:0a:a2:6e:7d:
         07:09:5d:7f:5b:b3:49:9f:3a:5c:3b:9f:69:0c:d1:0c:68:fb:
         70:95:46:48:67:ce:7f:10:9a:b5:8f:a8:6f:4a:de:1c:87:b9:
         fb:80:2e:98:a1:73:3d:b4:38:d7:cf:38:c4:ab:fd:a8:0a:da:
         33:42:95:13:67:7e:c9:b0:cc:14:9c:bc:64:a0:04:d1:ad:f1:
         70:de:a9:3f:3f:85:43:81:53:30:d1:48:f4:3f:33:72:87:97:
         f5:4e:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:26:03 2026 by rpki-client