Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft
File:                     8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft (raw, json)
Hash identifier:          cY1nXTQtVuCAC6glKH2YRsxZuVsCAgZFzhtdJTrHcJ0=
Subject key identifier:   5F:B6:32:CA:3A:F6:8F:A9:85:66:40:FD:E7:AC:C8:13:E2:23:92:03
Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
Certificate issuer:       /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Certificate serial:       532EC916CDC0B9AB06AE07B70E5115470F99ABB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft
Manifest number:          B7
Signing time:             Thu 05 Jun 2025 11:11:18 +0000
Manifest this update:     Thu 05 Jun 2025 11:06:18 +0000
Manifest next update:     Fri 06 Jun 2025 12:22:18 +0000
Files and hashes:         1: 8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl (hash: bo518sWaP2QNp07kfS9iF8zJfAeFCtO4v+T4/ewN5iY=)
                          2: 323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (hash: 8AAR0xUIu4J+HKbCCX/zgMfpXO/F9BzLHhea6iVl+3g=)
                          3: 3137392e36332e38342e302f32332d3233203d3e20323732363737.roa (hash: WN4ZwA2nx+3cTSwAdC3vDweZNp/7N7K6iIiOfadQL5k=)
                          4: 3137392e36332e38342e302f32342d3234203d3e20323732363737.roa (hash: O0F7UTGkKMI7AvMGD+A8PQ50At8u6krvXx3k0rHyiD8=)
                          5: 3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (hash: pv8uGn8LrrkiDHRUYYjBcI4mbf6DGk0WV0wqC8WtV2A=)
                          6: 3137392e36332e38372e302f32342d3234203d3e20323732363737.roa (hash: DFY/FSL2pAfu+JmC8QwwfRt+dB+l0veKzydzEOWLAMY=)
                          7: 323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa (hash: GXBmtfeZe589AKYXYDIZmj8w5w7lB0A2LszXm8/A8E0=)
                          8: 323830343a383666343a343030303a3a2f33342d3334203d3e20323732363737.roa (hash: k8osUm4P75pnPijgAVqyHJekVPFfGsN94INVDQYK0to=)
                          9: 3137392e36332e38352e302f32342d3234203d3e20323732363737.roa (hash: xNp5tEvN+nChFr/FehwVAcuPNFdglKKwFzasegKy7ZU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2e:c9:16:cd:c0:b9:ab:06:ae:07:b7:0e:51:15:47:0f:99:ab:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
        Validity
            Not Before: Jun  5 11:06:18 2025 GMT
            Not After : Jun  6 12:22:18 2025 GMT
        Subject: CN=5FB632CA3AF68FA9856640FDE7ACC813E2239203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:13:df:44:d2:44:a8:46:ea:6c:38:72:63:
                    1a:47:47:0d:95:d2:6c:18:11:ee:b4:4e:70:29:32:
                    9e:d6:1a:66:fa:a1:9b:73:71:b1:5a:a0:ab:15:5a:
                    14:81:12:82:64:71:d8:fb:41:f5:7f:10:eb:d5:28:
                    08:05:e2:14:8f:9d:90:03:6e:2b:03:bb:a5:d4:60:
                    99:e3:6f:44:61:04:e5:24:d7:63:ac:c9:0a:2c:2a:
                    aa:77:1c:72:f8:4b:d3:71:4b:8f:85:6e:38:7d:2d:
                    86:44:f7:09:35:3a:da:99:9f:c9:3a:0d:5f:af:db:
                    46:f5:3d:95:5e:f4:8b:b1:b3:89:85:5e:2d:5b:b2:
                    95:9b:8c:93:0a:3f:17:e9:40:93:29:cb:ea:8f:86:
                    97:8c:5a:b3:cf:0d:69:45:f1:e3:53:24:ec:bd:c1:
                    94:a3:a2:5a:90:3c:7b:f8:ff:3a:a2:1c:b4:a9:a1:
                    38:b6:96:13:eb:39:0b:0f:a1:5f:a8:49:07:2d:88:
                    a6:19:74:d3:5a:2b:90:10:35:8e:f1:a5:88:b2:a8:
                    94:31:e7:3c:ce:36:64:83:45:21:d0:fc:13:07:18:
                    eb:2c:39:2a:ee:3d:90:24:3e:17:c2:9b:47:88:0b:
                    d0:dd:42:e5:e1:b6:a7:22:13:9d:49:8d:22:fe:00:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:32:CA:3A:F6:8F:A9:85:66:40:FD:E7:AC:C8:13:E2:23:92:03
            X509v3 Authority Key Identifier:
                keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:be:98:21:7e:77:2b:50:2e:17:7c:0f:91:99:4c:d5:65:df:
         3c:3e:8e:5e:52:89:4c:fc:5b:e3:b1:cd:a3:b4:5a:bd:84:d6:
         5c:00:5e:30:bc:98:29:ec:f8:24:93:ad:c1:17:85:12:ec:81:
         fb:92:f8:ae:03:6d:b3:c3:70:a5:44:de:23:d8:b3:2b:73:3a:
         20:48:52:c7:83:41:f5:1e:ba:79:7d:5e:be:b5:ff:b5:ac:6c:
         32:c9:95:df:70:41:47:2e:d7:3b:d7:f9:e9:c9:b9:55:0b:22:
         5e:5d:a0:38:a7:57:7e:3a:c5:f6:97:9a:dc:ad:5d:16:e8:6c:
         fa:da:6e:be:e4:14:97:b3:b0:bc:c8:2f:70:c0:0e:b2:0a:54:
         cb:94:71:1c:57:e4:21:bb:61:09:2f:19:23:18:df:b4:35:6f:
         10:4b:05:7b:4f:da:0e:98:74:8f:ac:b1:ae:00:86:36:4c:c5:
         11:4a:cf:bc:a4:5d:8e:b9:2d:32:21:e7:27:d0:ef:a9:73:bd:
         ed:7d:7c:e7:51:31:63:56:bd:60:33:9c:b9:3f:74:58:ba:53:
         bd:90:b1:95:c6:9d:2f:41:f0:71:5b:a6:f3:d8:30:d9:07:88:
         7a:36:b8:d7:a7:fb:12:a2:cf:f5:d8:4e:05:61:55:3e:89:78:
         85:2c:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:04 2025 by rpki-client