Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.mft
File:                     CB14FE80265F8727559A5009292EBBC26EE55F31.mft (raw, json)
Hash identifier:          sjUP5AOgVSmV7UAk9Ilwi9z4iav4MP4FMMNN5vAIgUs=
Subject key identifier:   B9:B9:58:4F:77:4A:88:39:58:C2:B5:38:E5:7F:70:6C:09:9A:A8:BD
Authority key identifier: CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31
Certificate issuer:       /CN=CB14FE80265F8727559A5009292EBBC26EE55F31
Certificate serial:       47AC8AE1E7C3CE45596EF00F4872C061A7BCBAD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.mft
Manifest number:          0119
Signing time:             Tue 15 Apr 2025 23:04:01 +0000
Manifest this update:     Tue 15 Apr 2025 22:59:01 +0000
Manifest next update:     Wed 16 Apr 2025 23:13:01 +0000
Files and hashes:         1: 323830343a6531383a3a2f33322d3438203d3e203532353434.roa (hash: NYBc29pxmECkTnB1ngvikcdECEEU1VyN3REN2qPvwOY=)
                          2: 3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa (hash: SMq7REAfKN3kHPnXDhQf1CgT9d1dAZVh0OyyCLDlV/Q=)
                          3: 3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa (hash: lDj5b1b7ECosiH2jE6r26YinrSDSsL3FXB/0lH7tHtY=)
                          4: 3137302e3234372e37322e302f32322d3234203d3e203532353434.roa (hash: kgvzf3sOp908Q0j8shtM3xTdfFIVXKQAORMJ7h/nY3g=)
                          5: CB14FE80265F8727559A5009292EBBC26EE55F31.crl (hash: sMUt1UY2U2EnBURFB72JMES2894cCavO3srlpP8fMyk=)
                          6: 3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa (hash: vMttvbSSig6C9+rQK3k03Aw1dtGKOZkz9QwHROe0jOU=)
                          7: 3137372e3135322e3135322e302f32312d3234203d3e203532353434.roa (hash: l7PTe8ODJbdw8w93P3wfMViD8FB/hLAp2YW3cDAE+/Y=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ac:8a:e1:e7:c3:ce:45:59:6e:f0:0f:48:72:c0:61:a7:bc:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB14FE80265F8727559A5009292EBBC26EE55F31
        Validity
            Not Before: Apr 15 22:59:01 2025 GMT
            Not After : Apr 16 23:13:01 2025 GMT
        Subject: CN=B9B9584F774A883958C2B538E57F706C099AA8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:37:7c:b2:a7:5c:52:45:8a:c0:b5:9e:a9:
                    49:0f:7f:a5:fe:e8:23:5c:1d:10:ae:a6:98:76:43:
                    5c:2e:d1:cc:8a:db:4a:43:29:b2:80:9c:7e:4b:ca:
                    c6:19:be:fa:4b:6f:5f:5d:db:78:90:c9:9c:74:ee:
                    2c:65:db:d2:ed:89:0e:9f:da:53:30:98:15:20:fa:
                    d3:09:db:c5:be:1b:62:3a:53:b0:ef:ad:0f:17:db:
                    6e:d3:d8:ef:1e:77:cd:15:03:71:97:b6:fe:9b:33:
                    0c:4f:36:98:ee:09:bc:61:a8:2e:35:b6:88:5a:51:
                    e6:53:0f:f4:95:d2:dc:aa:90:68:7e:6e:46:fd:9a:
                    a1:a0:da:ed:66:f8:14:01:af:19:c5:97:13:8c:45:
                    35:13:30:27:4d:f7:56:c5:7e:8b:a0:ce:2d:bb:3e:
                    47:7f:b1:fe:30:3d:26:c7:bd:01:b6:d3:62:d5:c2:
                    2f:ce:22:91:31:42:f3:25:c7:d6:41:e5:de:c1:9f:
                    d5:06:ac:38:a5:3b:4a:cb:25:91:87:ed:41:55:3d:
                    55:cd:45:d3:b5:15:98:35:26:46:61:22:4e:6f:bc:
                    6d:d3:de:b3:8e:27:2c:9e:62:8f:ff:75:7f:3f:72:
                    c4:cf:7e:75:b6:df:92:a4:81:43:f8:8e:23:da:e4:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:58:4F:77:4A:88:39:58:C2:B5:38:E5:7F:70:6C:09:9A:A8:BD
            X509v3 Authority Key Identifier:
                keyid:CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:86:5d:46:8c:39:f0:3c:ec:fd:95:06:f8:95:a8:c8:a0:
         72:e1:5f:47:07:83:6f:df:32:ca:5e:b2:94:42:7b:31:77:06:
         11:ee:d3:01:13:0b:7e:c6:a8:eb:b7:71:e0:ee:34:eb:81:9c:
         f5:72:43:26:9d:61:94:96:11:ce:8f:c1:90:69:61:71:88:18:
         63:c4:2e:9c:b1:38:4b:4c:29:2b:f7:1a:08:0a:ed:06:70:99:
         53:ba:41:6c:c2:b4:9d:e0:09:58:62:51:f7:8c:65:56:90:55:
         87:9d:7d:bb:6a:a4:4c:f1:cd:82:0c:3e:39:38:a4:42:79:63:
         67:ff:84:9e:5c:29:b3:50:e3:c0:4c:26:85:c3:fc:21:9a:7e:
         1c:21:09:17:e5:f8:28:d4:ed:2f:ee:17:80:8a:e9:b4:26:6c:
         62:d8:91:35:a7:1a:e8:56:c2:18:89:22:d2:47:f5:95:ff:d6:
         26:99:df:53:6b:9e:1c:9d:16:d2:f8:a8:d7:24:03:18:a0:c4:
         cd:95:cc:bf:36:08:7d:3a:ce:27:e2:d2:19:b4:f2:59:91:35:
         a8:b5:83:9e:3d:fc:26:1e:dc:21:db:d1:25:bc:9a:0b:16:49:
         29:25:6a:84:13:95:f8:d7:d0:25:31:36:54:d5:22:5f:98:48:
         c9:04:e4:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR6yK4efDzkVZbvAPSHLAYae8utMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IxNEZFODAyNjVGODcyNzU1OUE1MDA5MjkyRUJCQzI2
RUU1NUYzMTAeFw0yNTA0MTUyMjU5MDFaFw0yNTA0MTYyMzEzMDFaMDMxMTAvBgNV
BAMTKEI5Qjk1ODRGNzc0QTg4Mzk1OEMyQjUzOEU1N0Y3MDZDMDk5QUE4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnETd8sqdcUkWKwLWeqUkPf6X+
6CNcHRCupph2Q1wu0cyK20pDKbKAnH5LysYZvvpLb19d23iQyZx07ixl29LtiQ6f
2lMwmBUg+tMJ28W+G2I6U7DvrQ8X227T2O8ed80VA3GXtv6bMwxPNpjuCbxhqC41
tohaUeZTD/SV0tyqkGh+bkb9mqGg2u1m+BQBrxnFlxOMRTUTMCdN91bFfougzi27
Pkd/sf4wPSbHvQG202LVwi/OIpExQvMlx9ZB5d7Bn9UGrDilO0rLJZGH7UFVPVXN
RdO1FZg1JkZhIk5vvG3T3rOOJyyeYo//dX8/csTPfnW235KkgUP4jiPa5LCjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUublYT3dKiDlYwrU45X9wbAmaqL0wHwYDVR0j
BBgwFoAUyxT+gCZfhydVmlAJKS67wm7lXzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1
YzkvMS9DQjE0RkU4MDI2NUY4NzI3NTU5QTUwMDkyOTJFQkJDMjZFRTU1RjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMTRGRTgwMjY1Rjg3Mjc1
NTlBNTAwOTI5MkVCQkMyNkVFNTVGMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1YzkvMS9D
QjE0RkU4MDI2NUY4NzI3NTU5QTUwMDkyOTJFQkJDMjZFRTU1RjMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATRCGXUaMOfA87P2VBviVqMigcuFfRweDb98yyl6ylEJ7MXcGEe7TARMLfsao
67dx4O4064Gc9XJDJp1hlJYRzo/BkGlhcYgYY8QunLE4S0wpK/caCArtBnCZU7pB
bMK0neAJWGJR94xlVpBVh519u2qkTPHNggw+OTikQnljZ/+Enlwps1DjwEwmhcP8
IZp+HCEJF+X4KNTtL+4XgIrptCZsYtiRNaca6FbCGIki0kf1lf/WJpnfU2ueHJ0W
0vio1yQDGKDEzZXMvzYIfTrOJ+LSGbTyWZE1qLWDnj38Jh7cIdvRJbyaCxZJKSVq
hBOV+NfQJTE2VNUiX5hIyQTkcQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:53:55 2025 by rpki-client