Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
File:                     DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft (raw, json)
Hash identifier:          ES+h/pZmbrR0mYS362cnCfEGh0bv4YbcCPPvRKtqQPA=
Subject key identifier:   03:E9:3A:A2:C6:8B:86:D6:59:0B:F8:BD:05:18:A6:FA:88:C8:C5:2B
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Certificate issuer:       /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial:       3D26B05AF3520B7FE2EC3E59192398FDE7535BB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
Manifest number:          0139
Signing time:             Wed 20 May 2026 23:58:27 +0000
Manifest this update:     Wed 20 May 2026 23:53:27 +0000
Manifest next update:     Fri 22 May 2026 01:56:27 +0000
Files and hashes:         1: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl (hash: vlxgFDQ47L0DT1BCselLfm7n/lEFF6GWWjyRn88iJAs=)
                          2: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=)
                          3: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=)
                          4: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: 78gnsip7r3qOi/EZ5Pk33H7zC5HcnHgzJbHz8JD3Mxs=)
                          5: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: afCsZwiPB5N2fDqRaLCKFhpsL0Zx4SiwNNU+IFHfbU8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:26:b0:5a:f3:52:0b:7f:e2:ec:3e:59:19:23:98:fd:e7:53:5b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
        Validity
            Not Before: May 20 23:53:27 2026 GMT
            Not After : May 22 01:56:27 2026 GMT
        Subject: CN=03E93AA2C68B86D6590BF8BD0518A6FA88C8C52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:9f:cd:78:73:08:a5:b9:e1:e5:e6:c3:3e:
                    f8:a1:a4:ac:bb:a9:1d:8b:7f:b5:03:f3:00:55:bd:
                    a8:1a:ca:15:9d:65:60:c3:f0:d9:b5:29:5b:f8:b7:
                    cd:58:16:2c:07:86:d7:18:3e:70:a2:af:1c:5a:86:
                    94:2e:e2:03:42:54:e2:e7:fd:a5:95:e4:2b:76:25:
                    00:ea:13:66:19:e7:59:aa:9b:dc:ab:1b:69:b3:dd:
                    6f:17:05:23:4b:bd:25:98:54:70:f9:ed:56:06:7d:
                    de:aa:8d:bc:6f:ed:7d:8d:8c:6c:e4:7c:1e:db:fb:
                    63:42:f8:2a:27:17:ce:f6:a8:f1:32:37:01:06:db:
                    d5:90:ea:40:99:68:dc:6f:00:c1:d9:1e:97:4b:6f:
                    51:45:32:3a:b0:5b:c9:5d:64:73:23:3c:28:9a:b7:
                    1e:6e:5c:d9:57:2c:29:e7:95:8d:8e:b6:3b:d3:f6:
                    c4:31:4e:57:86:9c:01:d0:2c:87:9f:7c:22:17:0c:
                    7f:73:c7:ff:98:95:bd:85:f6:a4:d7:a0:b2:a6:66:
                    6d:76:df:a1:f8:b0:15:13:ff:bb:c6:a1:ed:8f:cb:
                    24:36:7c:c8:ec:4f:e9:a8:49:1c:23:aa:dc:d0:38:
                    f3:03:c5:df:a7:e4:5d:5b:f5:fd:b5:e9:f0:19:98:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E9:3A:A2:C6:8B:86:D6:59:0B:F8:BD:05:18:A6:FA:88:C8:C5:2B
            X509v3 Authority Key Identifier:
                keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:03:e1:f6:09:e7:af:11:19:83:fd:c7:b1:9f:59:ef:0d:70:
         25:cb:cd:2f:04:dc:1d:4d:04:3c:d7:1c:54:15:a1:e9:1e:30:
         1a:ae:ef:37:4b:0c:dd:38:69:57:f7:fb:aa:37:a2:45:b0:dc:
         35:99:91:3e:0a:7e:56:15:7d:db:17:24:b9:e4:78:53:84:64:
         0d:57:93:c0:a3:49:55:cf:62:dc:d0:59:9d:ab:06:4b:57:55:
         79:0a:0e:bb:cc:86:c1:0e:83:a3:d7:c1:a1:eb:f5:05:6b:2c:
         fc:8f:3d:53:ca:95:86:3b:cc:6b:42:af:ce:6f:7d:30:10:94:
         21:8b:1b:7d:a3:23:96:01:b7:98:23:eb:23:32:b1:8e:25:c4:
         21:0c:78:31:06:0e:f9:c4:89:d7:08:6e:d7:44:b2:d4:de:dd:
         33:3f:f9:5e:4f:35:ab:58:24:97:4d:7a:9f:76:d6:dc:6a:f9:
         ee:91:6c:82:aa:88:84:9e:3f:a6:03:1d:e8:1a:80:25:72:fa:
         9f:aa:95:88:eb:49:9a:bf:6f:10:7b:63:68:b5:84:00:9e:67:
         bc:f2:f9:be:d4:c9:5c:3a:2b:58:e7:64:f6:eb:d7:0a:ec:15:
         9d:cb:e0:17:67:02:41:75:43:73:30:53:89:1b:5f:97:f3:81:
         0c:9d:1a:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPSawWvNSC3/i7D5ZGSOY/edTW7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEyQzNCMjU3MkMzQkNBOTIyNUU4NzJCNzdEN0VCRUM1
MUU0QTAxQTAeFw0yNjA1MjAyMzUzMjdaFw0yNjA1MjIwMTU2MjdaMDMxMTAvBgNV
BAMTKDAzRTkzQUEyQzY4Qjg2RDY1OTBCRjhCRDA1MThBNkZBODhDOEM1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8z5/NeHMIpbnh5ebDPvihpKy7
qR2Lf7UD8wBVvagayhWdZWDD8Nm1KVv4t81YFiwHhtcYPnCirxxahpQu4gNCVOLn
/aWV5Ct2JQDqE2YZ51mqm9yrG2mz3W8XBSNLvSWYVHD57VYGfd6qjbxv7X2NjGzk
fB7b+2NC+ConF872qPEyNwEG29WQ6kCZaNxvAMHZHpdLb1FFMjqwW8ldZHMjPCia
tx5uXNlXLCnnlY2OtjvT9sQxTleGnAHQLIeffCIXDH9zx/+Ylb2F9qTXoLKmZm12
36H4sBUT/7vGoe2PyyQ2fMjsT+moSRwjqtzQOPMDxd+n5F1b9f216fAZmPxZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUA+k6osaLhtZZC/i9BRim+ojIxSswHwYDVR0j
BBgwFoAU2iw7JXLDvKkiXocrd9fr7FHkoBowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG
WW8vMC9EQTJDM0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkMzQjI1NzJDM0JDQTky
MjVFODcyQjc3RDdFQkVDNTFFNEEwMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMC9E
QTJDM0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJAPh9gnnrxEZg/3HsZ9Z7w1wJcvNLwTcHU0EPNccVBWh6R4wGq7vN0sM3Thp
V/f7qjeiRbDcNZmRPgp+VhV92xckueR4U4RkDVeTwKNJVc9i3NBZnasGS1dVeQoO
u8yGwQ6Do9fBoev1BWss/I89U8qVhjvMa0Kvzm99MBCUIYsbfaMjlgG3mCPrIzKx
jiXEIQx4MQYO+cSJ1whu10Sy1N7dMz/5Xk81q1gkl016n3bW3Gr57pFsgqqIhJ4/
pgMd6BqAJXL6n6qViOtJmr9vEHtjaLWEAJ5nvPL5vtTJXDorWOdk9uvXCuwVncvg
F2cCQXVDczBTiRtfl/OBDJ0atw==
-----END CERTIFICATE-----
Generated at Sun May 24 15:30:46 2026 by rpki-client