Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
File:                     F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft (raw, json)
Hash identifier:          49gs8oE+jY1c+ehem6jUScYlRJWINewtEJi4wS58N3s=
Subject key identifier:   BF:6B:F8:C2:CC:DF:0B:3E:9A:F1:D7:22:2F:A0:C5:01:9C:AC:47:1A
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       419881AE4312CA826919B790FCFE2D00908C1045
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
Manifest number:          01F8
Signing time:             Wed 16 Apr 2025 07:39:25 +0000
Manifest this update:     Wed 16 Apr 2025 07:34:25 +0000
Manifest next update:     Thu 17 Apr 2025 08:24:25 +0000
Files and hashes:         1: 3137302e38302e3232342e302f32332d3233203d3e20323636333835.roa (hash: 7ZXxq9OS4WCGt7TX7u4pSqQ5SXc1VMW9ihf2a8YBcIo=)
                          2: 3137302e38302e3232362e302f32332d3233203d3e20323636333835.roa (hash: 8xmCE3bhY7fLzAItc/3mcWm3eYcPgNO/LwJYaw+cL7s=)
                          3: F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl (hash: O0oym2XS1Lkb7TsH6Dl2hzVzWNZe8DaaBGRXTnc/Rh0=)
                          4: 323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (hash: y8LJcjycfY1UJVKQP49+aa5SDzNSNeockL7W7RT1KcY=)
                          5: 3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa (hash: vswYP+Ab0I8IM3pwO+pcSROv2UcJI0NOJ07qrpmdUSk=)
                          6: 323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa (hash: IgOLBR30/zRtvd5taJpCN5D49F7Os56R7bqzu5j9J60=)
                          7: 323830343a333730383a3a2f33322d3332203d3e20323636333835.roa (hash: xB2Hlz8Y5j5gzYEBljWyzu9Gb4SuC6vLpB9lSjCb5z4=)
                          8: 323830343a333730383a3a2f33332d3333203d3e20323636333835.roa (hash: 2ea2zUok3QicjwTRLjyp8YcIwK2t9c4LcSt30zEetgE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:98:81:ae:43:12:ca:82:69:19:b7:90:fc:fe:2d:00:90:8c:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr 16 07:34:25 2025 GMT
            Not After : Apr 17 08:24:25 2025 GMT
        Subject: CN=BF6BF8C2CCDF0B3E9AF1D7222FA0C5019CAC471A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:91:58:50:72:7b:6d:0f:b3:c7:45:35:9e:
                    2a:1b:58:75:70:ad:fb:17:0f:68:6a:6e:40:51:bb:
                    2f:ab:df:62:d1:a2:89:44:0e:f9:63:e9:e5:09:7b:
                    50:05:b1:d4:52:69:03:53:0f:27:b1:9c:50:b8:e1:
                    b9:bb:48:b4:0f:7f:05:c9:18:45:b5:0f:fd:60:1b:
                    46:f7:91:d6:34:ed:5a:16:e7:c4:85:bb:6f:09:92:
                    71:6b:f8:f5:11:16:18:70:e0:09:ef:bd:c0:fe:84:
                    da:e3:1c:f2:43:e0:40:e4:18:ec:ac:e5:96:99:c9:
                    93:09:26:15:72:93:1f:92:68:a4:bd:59:09:ec:85:
                    fc:b8:36:a5:fe:ef:af:b0:8c:c4:67:69:12:cd:57:
                    f2:02:42:cb:dc:e1:ff:99:89:85:0e:c3:24:fd:1b:
                    f3:f2:97:b9:8f:99:e3:50:51:41:09:df:1d:17:1b:
                    a0:75:24:c2:57:d5:67:67:03:d5:37:03:01:9a:f6:
                    2b:0b:f1:d2:26:8c:41:8a:e0:04:26:9a:da:e4:35:
                    36:ac:62:01:e7:52:2d:1b:0f:d6:bf:31:79:79:64:
                    78:b4:24:ec:77:e8:8b:8e:b8:90:5d:e7:44:df:80:
                    c6:95:44:b7:17:fe:ee:2a:d1:cc:df:ff:4f:44:6e:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:F8:C2:CC:DF:0B:3E:9A:F1:D7:22:2F:A0:C5:01:9C:AC:47:1A
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:aa:35:1b:55:34:aa:75:80:1d:47:07:75:96:bd:84:be:
         fe:4e:60:50:18:4b:e2:05:73:04:e9:86:05:da:aa:d6:1c:64:
         bb:0d:da:9b:60:99:2b:77:d5:ca:50:7b:a4:00:2b:e9:ba:a2:
         7b:43:2c:c9:6a:62:52:4b:c5:b9:1a:65:db:15:a0:61:fa:78:
         42:cd:c6:45:99:61:b7:22:d5:39:69:85:cd:96:df:64:44:15:
         f6:57:5e:b6:24:83:dc:76:b1:e4:eb:02:da:4e:3a:f8:53:09:
         8b:b5:44:f0:c8:55:eb:8f:e9:8a:ce:9d:90:2d:b4:ab:1c:6a:
         47:c0:8a:a5:55:bc:0c:1a:b4:cf:bb:ed:31:cf:e8:d7:54:36:
         72:4a:1a:f3:0d:94:b7:57:3e:1c:b0:c7:11:57:6c:37:28:3b:
         b2:00:3f:c6:39:90:de:a2:8c:f9:2b:d0:1f:c7:b7:42:d9:6c:
         c2:d4:4d:13:e7:0d:ed:31:3a:8d:cd:65:46:c3:84:ac:c6:e1:
         4c:39:8b:8c:94:f0:ad:0d:0a:94:db:bb:05:28:9f:6e:3e:94:
         60:d4:f1:73:20:c2:b0:f0:fc:d3:1b:0c:a9:1f:f7:1f:25:c3:
         e9:3f:cb:53:3b:02:fb:15:a0:a3:cc:04:0d:9f:29:63:3c:50:
         53:d4:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:44:37 2025 by rpki-client