Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/976548DCB86821B5A58752B680D5BE91262FEB7B.mft
File:                     976548DCB86821B5A58752B680D5BE91262FEB7B.mft (raw, json)
Hash identifier:          lyq8Pxd5YQw4EaReyxKD2oXShOv0Sf4I4WM+HdbhUOc=
Subject key identifier:   E4:FB:12:BB:56:5A:D9:D7:49:99:4D:4E:41:9F:A2:D1:35:7A:3A:8C
Authority key identifier: 97:65:48:DC:B8:68:21:B5:A5:87:52:B6:80:D5:BE:91:26:2F:EB:7B
Certificate issuer:       /CN=976548DCB86821B5A58752B680D5BE91262FEB7B
Certificate serial:       4264969CFAECCFDC8F48453D7D5BF18A0705758D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976548DCB86821B5A58752B680D5BE91262FEB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/976548DCB86821B5A58752B680D5BE91262FEB7B.mft
Manifest number:          0136
Signing time:             Fri 03 Jul 2026 14:23:32 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:32 +0000
Manifest next update:     Sat 04 Jul 2026 17:49:32 +0000
Files and hashes:         1: 3137392e34382e3234302e302f32322d3332203d3e20323731303630.roa (hash: bnFUjcDCmg6UGwdsnbg7cwBZNofL9RiGFsKiiCIHMV4=)
                          2: 323830343a373561343a3a2f33322d313238203d3e20323731303630.roa (hash: ecaZ+VtF0bjSvmW7d7oO42v+nzY8i3LqJS5/nDvSUQE=)
                          3: 976548DCB86821B5A58752B680D5BE91262FEB7B.crl (hash: Kq4QxXPq22nsUx6WRZfCYUlUXhiiYdv0Y0UBWPatNRM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:64:96:9c:fa:ec:cf:dc:8f:48:45:3d:7d:5b:f1:8a:07:05:75:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976548DCB86821B5A58752B680D5BE91262FEB7B
        Validity
            Not Before: Jul  3 14:18:32 2026 GMT
            Not After : Jul  4 17:49:32 2026 GMT
        Subject: CN=E4FB12BB565AD9D749994D4E419FA2D1357A3A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:e3:7e:b8:f5:43:66:cb:5e:90:8b:5f:1e:
                    01:5a:09:0a:56:49:65:e6:47:5c:ef:f2:c2:fc:39:
                    82:84:65:fa:cd:e2:5d:57:0e:c7:86:98:71:01:c5:
                    3e:6b:2b:39:de:89:a3:b9:96:b7:3c:a0:5c:c3:97:
                    7d:ff:95:00:57:82:e6:0d:8b:ff:78:1d:e8:c2:24:
                    c1:ef:97:b6:03:29:8a:b3:bf:b4:4c:c7:47:7c:13:
                    41:9e:67:dd:bf:bc:cb:d9:26:9f:12:37:95:55:36:
                    ed:90:e4:27:bd:e6:5c:24:9c:71:82:c5:df:f9:5d:
                    8e:11:23:88:15:b5:70:7a:4c:2a:e7:e5:2b:c9:38:
                    42:86:04:02:35:f4:f3:17:e8:93:86:df:ea:87:d5:
                    72:1f:39:4b:0f:cf:ed:50:5e:e6:e4:c0:ab:a8:9f:
                    88:86:f2:de:f4:22:06:52:53:9f:2b:f4:f8:9d:98:
                    6f:04:b7:ac:d6:3b:8b:c1:97:e4:e1:53:4f:76:29:
                    a0:d4:0b:f6:17:7c:0d:c9:84:03:e0:30:74:c2:15:
                    d9:88:27:93:13:5c:e6:60:f4:89:74:0c:20:7e:52:
                    ad:31:1c:08:08:f9:80:12:0e:b5:04:ba:e7:7f:07:
                    14:b5:fe:15:dc:2d:0b:5e:b9:f8:e1:17:a0:27:12:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:12:BB:56:5A:D9:D7:49:99:4D:4E:41:9F:A2:D1:35:7A:3A:8C
            X509v3 Authority Key Identifier:
                keyid:97:65:48:DC:B8:68:21:B5:A5:87:52:B6:80:D5:BE:91:26:2F:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/976548DCB86821B5A58752B680D5BE91262FEB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976548DCB86821B5A58752B680D5BE91262FEB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2YLArYCJA7ZVYvDMFHN18RfvsLTE8HVvHhx2MTwsRjWr/0/976548DCB86821B5A58752B680D5BE91262FEB7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:bb:74:b4:be:cc:36:d4:00:1d:b8:e9:cd:b7:98:1a:ac:
         a7:61:7e:d3:9d:05:8e:30:f4:86:87:59:63:68:8a:d1:66:8d:
         9a:27:26:e7:ea:bb:22:b3:71:8e:6b:2b:a2:69:c6:8f:f5:9d:
         14:6c:94:31:18:2a:8d:73:5d:a6:be:6e:3d:06:b6:a9:9f:11:
         38:4f:ea:42:e8:8f:ac:0b:60:7c:70:b1:0e:e7:d4:58:a4:3c:
         47:03:3d:47:6a:f7:44:80:41:53:54:cb:dc:be:e1:e3:32:e8:
         bb:79:0d:b4:2e:79:1d:3e:f8:b6:85:3c:3c:52:48:c2:7f:d3:
         5a:5d:39:81:99:6e:73:f2:e8:0c:fd:60:e0:44:2d:bb:a4:ce:
         9d:d6:4a:b3:71:0b:61:e6:ea:62:8e:80:b0:b0:c2:ba:d4:fa:
         22:a8:af:07:ae:c5:e1:92:85:d8:75:9f:e0:11:47:c9:47:d2:
         17:9c:24:0d:7f:f6:21:3f:a5:35:48:d7:81:e7:28:6c:24:51:
         54:a3:57:aa:09:67:b1:81:fd:3c:37:c9:27:96:e6:6e:ce:08:
         5b:df:c1:5c:47:3c:84:1b:76:fd:85:e8:76:0f:fa:ec:4d:2c:
         52:36:c6:f3:cd:05:a3:e2:25:a8:9a:66:46:84:7c:47:89:15:
         19:23:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:22:59 2026 by rpki-client