Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.mft
File:                     2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.mft (raw, json)
Hash identifier:          zxkhI7x8A1UCcLhrNoawigNWeaojikAkkPidRHnJs6k=
Subject key identifier:   FC:60:54:75:8E:36:7F:3C:19:63:79:3F:BF:F2:F4:77:8B:07:D8:3C
Authority key identifier: 2B:84:15:C8:2A:5D:FB:6F:48:CA:44:79:B7:9C:BE:DF:DE:52:A4:3B
Certificate issuer:       /CN=2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B
Certificate serial:       6ECA23B38B028E5C6FE0FDB52E80F5270EEA992B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.mft
Manifest number:          02BD
Signing time:             Sun 14 Sep 2025 21:49:25 +0000
Manifest this update:     Sun 14 Sep 2025 21:44:25 +0000
Manifest next update:     Tue 16 Sep 2025 00:13:25 +0000
Files and hashes:         1: 3137372e38362e3135322e302f32322d3332203d3e20323731363339.roa (hash: RaT7CUP+zVGW5CKTDGu5YJzyjXLHjGSZAFQ6WpkUkgc=)
                          2: 323830343a376561633a3a2f33322d313238203d3e20323731363339.roa (hash: zl/+/73sNQbFeUleoWZpHR0YrV3Hk3TJ1AsDKMmuUS0=)
                          3: 2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.crl (hash: TM3Aoj67j7lTfCE7SUT+j+G552FLpv0rgTIWy2L1YR4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ca:23:b3:8b:02:8e:5c:6f:e0:fd:b5:2e:80:f5:27:0e:ea:99:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B
        Validity
            Not Before: Sep 14 21:44:25 2025 GMT
            Not After : Sep 16 00:13:25 2025 GMT
        Subject: CN=FC6054758E367F3C1963793FBFF2F4778B07D83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f9:70:c8:ec:b4:09:0e:1c:38:b2:d7:ab:7d:
                    cb:eb:9a:4a:62:7b:6b:87:53:f8:1f:aa:0b:af:01:
                    07:7e:1d:a5:4d:b6:ac:06:86:a4:8b:cf:c8:59:7d:
                    ad:f5:35:53:1a:ae:54:fa:da:ed:6c:ea:ac:f7:d0:
                    d4:b1:76:40:70:d6:84:f5:1c:9f:50:72:ad:59:29:
                    69:a6:9c:6d:79:fd:cf:33:7a:33:3e:5f:c2:a3:61:
                    1e:0a:f4:b0:96:f6:73:02:77:86:d5:3e:4b:63:20:
                    20:eb:db:43:98:2f:bc:a0:38:a1:33:04:a2:0e:cc:
                    2e:6a:12:4d:d0:54:c1:0e:72:70:3a:96:c6:c8:8c:
                    9e:5b:15:28:2b:ba:ea:e5:15:65:05:ac:df:0f:cd:
                    df:eb:e7:88:b6:c1:6f:fa:47:33:8a:59:9a:bc:fe:
                    cd:fa:b4:73:55:75:c4:72:87:2d:b9:46:d9:36:71:
                    bf:71:f2:2d:4c:3b:0a:12:59:bb:b0:3a:34:46:ae:
                    51:75:e1:65:35:48:cc:2a:74:5f:9a:d6:26:eb:99:
                    10:bb:0d:2a:96:77:ba:c5:de:4b:b3:77:57:10:76:
                    07:cc:cf:31:d2:82:8b:00:72:3b:73:81:eb:db:ef:
                    c6:9d:76:15:95:31:18:05:17:c9:0f:8f:72:29:14:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:54:75:8E:36:7F:3C:19:63:79:3F:BF:F2:F4:77:8B:07:D8:3C
            X509v3 Authority Key Identifier:
                keyid:2B:84:15:C8:2A:5D:FB:6F:48:CA:44:79:B7:9C:BE:DF:DE:52:A4:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xtCewyEERy8cTBAx23BVJQbkFKSQkyYhY4JqqeQADjP/1/2B8415C82A5DFB6F48CA4479B79CBEDFDE52A43B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:46:4e:42:f0:48:01:06:45:f1:1a:99:ed:e8:8e:c5:22:
         89:b3:45:e9:57:1e:24:d3:61:b6:9a:a0:91:4f:53:8e:42:db:
         5a:0a:93:c5:c2:1e:a7:22:ca:d3:38:30:12:77:bc:92:c1:93:
         64:ad:59:24:7a:58:9c:9b:b8:76:a2:1a:fc:b0:6c:be:96:fa:
         3a:ef:52:42:3f:18:a6:25:42:f8:40:0c:a5:3c:51:8e:dc:ca:
         c2:f6:0f:a1:68:c3:ee:a8:af:3f:6d:7e:7d:9f:23:d2:22:0f:
         a5:84:d4:64:04:61:49:a6:3c:30:48:48:6d:dd:ff:c9:9a:f8:
         5d:34:6c:0c:62:40:53:02:f7:1e:c0:f8:23:e5:30:e6:b7:d2:
         26:04:dd:86:6e:80:ab:9d:fe:79:fb:3f:d1:c5:95:07:99:21:
         54:19:2c:f3:b3:dc:9d:90:2b:28:91:09:75:69:dd:bb:47:a0:
         ba:88:12:dd:fb:e8:29:41:47:db:e8:97:d3:ab:8b:35:a0:a4:
         dd:33:a2:d3:91:41:49:88:e0:d8:b7:35:4c:15:ba:67:46:10:
         e0:36:17:26:80:44:ba:e2:71:f4:c7:4f:f9:d6:8c:c7:53:d8:
         e9:97:80:be:f8:40:cb:6e:df:46:d9:50:a7:5a:00:4c:53:5e:
         1c:57:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:11:10 2025 by rpki-client