Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft
File:                     334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft (raw, json)
Hash identifier:          2ncD9YSM2MnE2pKh4G/LwgugSjB/FqFsyA9T1KT5ByA=
Subject key identifier:   FE:B9:88:78:C6:1A:F0:02:0C:C3:4A:D1:0C:16:53:90:4A:C0:DC:EF
Authority key identifier: 33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0
Certificate issuer:       /CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0
Certificate serial:       3FCBC0A911DB4ED54FADC4F03D95303124B42029
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft
Manifest number:          012D
Signing time:             Sun 05 Jul 2026 17:56:14 +0000
Manifest this update:     Sun 05 Jul 2026 17:51:14 +0000
Manifest next update:     Mon 06 Jul 2026 20:31:14 +0000
Files and hashes:         1: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: D9DppFrtJlT7hHTV3DkiAc9Ngx7Jz5WP2m/IH2qpUZc=)
                          2: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 7mw0GkXoVaDbDDT1y79JOed+pwzADcY+g+5vkqR9Qis=)
                          3: 334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl (hash: 4/7XqTjjBo7YO2eFUGmaMOW+WFzp8B3CiE5DZH7T4HE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cb:c0:a9:11:db:4e:d5:4f:ad:c4:f0:3d:95:30:31:24:b4:20:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0
        Validity
            Not Before: Jul  5 17:51:14 2026 GMT
            Not After : Jul  6 20:31:14 2026 GMT
        Subject: CN=FEB98878C61AF0020CC34AD10C1653904AC0DCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:66:f1:8d:bb:c9:14:b4:f8:61:f5:74:55:
                    1b:e7:a2:28:f3:f4:a8:ff:e5:5a:6f:6b:7c:ac:8a:
                    ea:b0:37:18:0e:e2:f3:f4:b7:d4:d1:cf:96:77:d2:
                    e7:69:b0:29:11:8d:6b:0c:5a:d8:29:ca:22:b5:f4:
                    c9:25:aa:7d:e7:74:28:df:38:1c:09:20:d9:45:ef:
                    42:a2:e6:78:62:7e:e2:c3:24:46:a8:24:a8:55:d7:
                    c5:92:67:64:e5:3b:57:cf:7a:a8:c0:ee:d5:c8:01:
                    ba:6a:21:4b:c6:8d:25:84:5c:5e:4c:89:a0:f1:a8:
                    22:bb:0b:6c:a3:c3:ff:86:23:e2:62:fe:82:95:e3:
                    e6:2b:42:5d:58:f2:74:63:fd:cf:60:5b:b2:3f:76:
                    7e:60:8f:61:e5:1e:4f:6f:b6:21:b4:95:07:fe:2a:
                    3c:52:06:a1:ae:2d:f9:df:66:b9:14:c5:22:4f:2a:
                    be:2a:a0:a9:b8:bb:5e:31:87:61:f5:43:7e:64:9b:
                    59:68:66:42:5c:5b:cf:07:96:0d:27:4e:12:bc:6c:
                    b4:17:b6:e8:a8:4d:a9:b3:4a:2c:69:6e:9f:44:eb:
                    29:e5:fb:77:1d:29:51:f9:50:68:6d:12:07:0a:67:
                    f2:46:ff:d6:28:e8:d7:93:a4:c0:67:cc:cb:10:e5:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B9:88:78:C6:1A:F0:02:0C:C3:4A:D1:0C:16:53:90:4A:C0:DC:EF
            X509v3 Authority Key Identifier:
                keyid:33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:a2:7f:e4:f4:1c:df:12:df:d9:f0:fa:8d:0c:70:e6:7f:
         f5:c5:b7:68:0e:21:9e:e1:76:b4:30:f3:c6:95:63:8d:f6:1e:
         79:3e:de:1e:af:c8:e5:ed:0a:9f:69:d7:21:e0:07:db:50:1f:
         72:b0:99:03:24:c2:20:a9:e6:e5:1e:00:95:b5:58:e4:49:7c:
         5f:d7:19:37:c4:5c:24:72:5b:07:58:00:30:2c:53:2f:cc:81:
         79:0b:b6:b6:47:f2:b0:54:ba:ae:51:c7:99:c1:9d:73:8c:d5:
         ae:df:25:25:e8:df:31:bb:1e:49:cb:cd:05:f2:c7:ce:0f:37:
         de:60:50:18:e6:2e:58:35:c9:21:1f:74:26:4e:8c:6c:d1:8b:
         ed:a1:06:0b:5c:38:a4:24:e1:20:25:30:41:fc:e4:c5:eb:18:
         83:9b:4d:1a:41:4b:46:a0:90:75:64:62:29:ac:6e:10:80:03:
         1e:f2:76:4d:42:36:12:27:de:f2:aa:17:bf:02:38:6c:0a:88:
         72:8c:a5:42:ae:a6:d7:b0:72:bb:2e:31:3f:d0:4d:26:e3:41:
         ad:22:c2:33:a6:9f:bf:db:64:74:71:be:b2:e1:e9:0f:05:45:
         fe:d1:aa:f1:a9:36:37:cd:6e:ac:89:f1:de:30:df:8e:3d:ea:
         a7:7e:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:23:05 2026 by rpki-client