Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
File:                     E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft (raw, json)
Hash identifier:          Gte7AJ2G6+lRv4Qw1L+gk/LXtD4Vf9KYQBNLKXmNZnE=
Subject key identifier:   33:10:28:68:BA:51:24:6E:E5:E8:27:CF:FC:0E:98:18:FD:60:46:8B
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Certificate issuer:       /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial:       42BF9F0A840EAE3B15AFF34463E427CB7E688B67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
Manifest number:          029E
Signing time:             Tue 19 Aug 2025 15:49:34 +0000
Manifest this update:     Tue 19 Aug 2025 15:44:34 +0000
Manifest next update:     Wed 20 Aug 2025 17:10:34 +0000
Files and hashes:         1: E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl (hash: O4MuZp3FKqYjnidwXt1USKZQVVDTeo5sXpBAOovV4wQ=)
                          2: 323830343a316139343a3a2f33322d3438203d3e203631383639.roa (hash: mpL6GhGK6J+O2fxRiEFeXck7mCBVnlY9RqzfrvGdhoc=)
                          3: 3133312e302e33362e302f32322d3234203d3e203631383639.roa (hash: qqmoc/mCwk8/qZmMrgPgadFk5hcj1oFTVBnQuSivKHc=)
                          4: 3133382e39392e32342e302f32322d3234203d3e203631383639.roa (hash: WgI8Zhb1GLe/K5Bakvg6hlLt+5T+jD5n4GEb0PPSpVQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bf:9f:0a:84:0e:ae:3b:15:af:f3:44:63:e4:27:cb:7e:68:8b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
        Validity
            Not Before: Aug 19 15:44:34 2025 GMT
            Not After : Aug 20 17:10:34 2025 GMT
        Subject: CN=33102868BA51246EE5E827CFFC0E9818FD60468B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:60:11:cd:01:1a:87:91:6b:7d:38:28:32:
                    40:b0:6e:74:3a:c2:e7:ea:bf:9b:e1:60:cf:f2:8c:
                    46:05:7f:48:eb:2f:5e:c5:af:7f:3b:3c:cb:1a:29:
                    20:54:3c:d7:15:96:fc:84:70:49:55:67:ee:c0:57:
                    8f:bc:2b:ab:8d:fb:af:48:d5:6c:4b:40:b2:d4:32:
                    fe:bd:de:55:cb:8b:be:5d:fe:d0:d3:1d:af:03:63:
                    2f:cf:5c:8e:d0:30:6f:91:25:0b:ac:51:77:da:8e:
                    cb:78:89:ef:e5:0c:cd:ae:8e:be:fd:89:85:47:ad:
                    57:b1:d6:bd:b3:70:14:df:93:f8:59:f1:99:a5:2a:
                    67:82:30:14:6a:11:a8:ef:34:b7:bc:39:2b:10:ea:
                    c1:cb:55:0e:70:0e:23:f7:f5:f3:6a:6d:96:e5:4f:
                    82:61:5d:ab:b5:67:6f:24:d4:9e:66:ec:ae:5a:29:
                    44:d0:61:52:c6:d7:fc:0a:76:ab:0c:94:a2:b8:8e:
                    6d:b0:f9:07:76:ae:7f:e8:e7:49:92:50:06:b1:0f:
                    3a:8f:6d:b5:5f:fc:3d:40:84:61:7a:9e:4c:0f:e9:
                    9d:6a:ac:7a:79:fe:3a:7c:0b:32:dc:df:40:3f:24:
                    79:e6:ed:e6:76:b0:fa:08:0d:22:cb:dd:34:62:85:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:28:68:BA:51:24:6E:E5:E8:27:CF:FC:0E:98:18:FD:60:46:8B
            X509v3 Authority Key Identifier:
                keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:76:b2:a2:11:89:8a:3f:1e:32:09:ad:6f:df:99:d9:10:
         37:14:a1:fc:d3:68:6e:86:e9:59:50:3b:6b:d6:e1:d3:1a:08:
         2c:92:76:26:72:7b:04:66:9c:14:b1:a3:86:f2:be:b5:0a:07:
         d0:5d:6d:a0:3b:cc:1d:71:ca:e2:90:35:9f:aa:2a:4a:58:ea:
         fc:89:ed:2b:4f:d3:7f:f9:82:ec:be:06:2d:4f:af:02:75:d3:
         73:26:12:49:21:0f:f4:b7:0b:ab:1b:7c:a1:e8:8b:41:68:66:
         3f:e0:27:cf:b8:8f:bc:85:69:58:51:cf:db:31:4c:85:02:1f:
         56:3a:d4:5a:a4:5f:de:2d:71:3e:bb:6e:c1:9d:74:4b:37:45:
         7a:4e:37:4c:cf:97:d8:21:81:bd:f6:c7:33:44:79:8b:ac:65:
         cc:f9:f4:a6:50:93:72:3a:f6:34:1b:72:6a:92:a6:30:0a:0f:
         3f:e3:f5:ec:af:e2:ee:77:cb:84:74:f5:2b:f8:09:0f:04:5d:
         ce:eb:14:1d:5c:05:77:13:c9:32:25:94:74:0b:80:b0:88:bd:
         cc:7a:b2:9e:6b:72:0d:af:21:12:3a:bb:39:0a:18:b2:a3:5d:
         29:b6:4e:5d:37:78:6d:4a:1f:29:4a:74:22:39:e2:37:6a:26:
         5f:9b:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:20:54 2025 by rpki-client