Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
File:                     F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft (raw, json)
Hash identifier:          hUTigX/nZTfHvIMzAS0OHhRE8AIJo1gh/w4Yew1Xcs0=
Subject key identifier:   0D:5C:60:06:9C:B7:99:DF:E8:2A:B8:57:5A:8F:BC:84:DB:2A:D8:4A
Authority key identifier: F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06
Certificate issuer:       /CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
Certificate serial:       0E6B1B89E4886D458E3CF3665769B51134594784
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
Manifest number:          0336
Signing time:             Sun 05 Apr 2026 01:52:45 +0000
Manifest this update:     Sun 05 Apr 2026 01:47:45 +0000
Manifest next update:     Mon 06 Apr 2026 05:23:45 +0000
Files and hashes:         1: 3137302e37392e3132302e302f32322d3234203d3e20323636323931.roa (hash: fuD0BdAWXKhXgKf5Buen/zOgYmhYeib7bYfuwnF4hKk=)
                          2: F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl (hash: hKcpWN0yKisMCzGgi7sC6T3lbzASbmJyZnzUS/d+8Q8=)
                          3: 323830343a333538343a3a2f33322d3334203d3e20323636323931.roa (hash: lkmjvYDPqVkblOjpaEFz4u9Xo2srNA/KNaRy2PPUBr4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6b:1b:89:e4:88:6d:45:8e:3c:f3:66:57:69:b5:11:34:59:47:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
        Validity
            Not Before: Apr  5 01:47:45 2026 GMT
            Not After : Apr  6 05:23:45 2026 GMT
        Subject: CN=0D5C60069CB799DFE82AB8575A8FBC84DB2AD84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:2d:52:33:b3:c6:a4:99:bb:f8:73:7c:4d:
                    36:df:db:54:a5:f9:d2:27:9c:82:d4:6a:65:bb:19:
                    4a:f6:e3:4b:54:07:2e:65:56:b7:2e:bb:88:ea:75:
                    f5:03:8d:e3:2f:74:cb:1c:66:9f:3a:55:cd:ee:39:
                    db:04:1e:ae:59:5c:cb:5f:6f:d6:da:65:c2:7b:d6:
                    c8:30:29:7b:f9:c6:f0:38:f0:e6:87:1d:53:20:7f:
                    44:19:78:b6:48:22:0b:c7:e7:12:38:6a:cc:57:71:
                    bf:21:b8:c6:62:b6:6f:22:af:91:4c:53:ae:1b:d7:
                    bf:fb:77:d0:c7:2d:9c:1c:71:cd:3d:a5:f0:29:af:
                    f4:16:7c:63:12:33:60:bb:d8:76:f3:c3:3a:cc:49:
                    d4:4e:a9:08:f4:7e:2e:8b:ba:b1:8a:6e:d2:ee:34:
                    6d:4e:50:1b:c9:88:2f:48:d7:c5:8c:43:80:9a:f6:
                    a1:28:0a:b4:37:5b:8b:fc:36:c3:a1:ed:43:f1:f7:
                    35:7c:85:cb:47:10:3e:5c:1c:60:7c:51:ff:d1:50:
                    fe:24:98:8c:0f:38:6b:e4:de:cc:9c:3d:98:5b:1f:
                    a1:83:15:8f:07:71:e4:50:ff:f3:52:ca:9c:f1:ae:
                    99:16:b6:cb:fc:32:5b:61:7d:a0:48:94:95:9e:d3:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:60:06:9C:B7:99:DF:E8:2A:B8:57:5A:8F:BC:84:DB:2A:D8:4A
            X509v3 Authority Key Identifier:
                keyid:F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:57:14:1c:11:d1:bf:d7:cb:1c:66:c2:33:47:94:e3:bf:6c:
         9d:f3:87:77:32:35:77:bf:f6:ac:eb:2a:7a:8a:15:54:ac:bb:
         d2:2c:79:16:44:9f:b3:14:52:2b:46:c4:b4:df:ce:bf:7a:75:
         d7:56:c0:76:61:b0:4c:dd:51:86:b4:e9:7a:91:6f:5d:f9:32:
         b6:cf:12:1c:09:84:7f:77:72:38:26:b4:06:88:70:e0:2a:9d:
         64:0b:27:8c:31:6c:be:78:83:60:ba:a8:70:7f:90:ad:f2:19:
         77:2a:65:01:96:10:dc:00:81:0e:d9:fb:49:35:86:e1:97:36:
         58:82:61:cd:1d:02:df:6c:6f:4f:9b:9a:0b:ce:14:50:58:04:
         3c:db:10:f5:98:d1:81:01:c0:22:5f:f2:67:86:0e:b2:51:d1:
         57:6c:b1:3a:4f:97:5b:5b:b1:21:7c:24:fe:f0:3b:d1:58:73:
         08:e4:19:7b:44:f3:e8:93:76:0d:1d:7e:80:34:71:14:57:40:
         f9:f7:a8:f4:9c:37:76:f8:42:df:67:53:96:0a:bd:0c:39:c9:
         63:04:23:95:f3:0f:ac:7a:56:8d:3c:55:fa:a9:ea:22:ca:7c:
         79:2c:ff:3a:35:b3:c5:c1:5f:af:d6:86:6c:89:84:16:5e:64:
         3f:1b:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:40:26 2026 by rpki-client