Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.mft
File:                     FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.mft (raw, json)
Hash identifier:          kYhxHSlQSP6yKq5UGi8N+dHnTyGNBrKvkgngEbKt51c=
Subject key identifier:   B1:3E:28:83:6B:AC:9C:1B:46:3B:18:F2:59:D3:7F:A3:7E:29:0B:26
Authority key identifier: FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85
Certificate issuer:       /CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
Certificate serial:       1F6E924631F555CB1458850FE197D72E39DB418D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.mft
Manifest number:          12
Signing time:             Tue 03 Jun 2025 07:29:05 +0000
Manifest this update:     Tue 03 Jun 2025 07:24:05 +0000
Manifest next update:     Wed 04 Jun 2025 09:02:05 +0000
Files and hashes:         1: FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.crl (hash: 0UOvnmeOYt5SYYcKglQRw5KE6uS4WsVZw3GTyErSW6M=)
                          2: 323830343a356263383a3a2f33322d3438203d3e20323638383639.roa (hash: LYRJB/cMQJjFPGjuWg7bLzognOa/2n/mwnXF5/+KR1E=)
                          3: 34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa (hash: trkZ3nPBcmPAxkhlUTE3yzgqmAcDQpxSrf3TfDMx3w0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6e:92:46:31:f5:55:cb:14:58:85:0f:e1:97:d7:2e:39:db:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
        Validity
            Not Before: Jun  3 07:24:05 2025 GMT
            Not After : Jun  4 09:02:05 2025 GMT
        Subject: CN=B13E28836BAC9C1B463B18F259D37FA37E290B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:d2:90:f4:1b:db:17:ce:02:eb:c8:43:2c:
                    27:91:e7:35:76:a3:e0:00:47:0c:70:d6:c7:6d:58:
                    20:50:a1:27:80:64:d5:83:12:54:bb:bc:12:cf:e8:
                    50:43:51:a9:c6:74:0c:dd:df:c3:6e:1b:7f:39:e0:
                    cc:8f:53:f8:93:75:54:2a:43:b5:f8:41:52:72:3d:
                    b5:bd:77:45:e6:85:3f:3a:72:51:e2:6a:2f:3e:b9:
                    48:10:f1:f7:07:56:cf:5a:9f:0b:41:ba:f0:0a:d7:
                    6d:fd:90:f7:5b:c1:db:b8:12:8b:cf:0b:90:0e:de:
                    77:62:bd:7c:c6:95:70:07:75:e8:f3:fa:6a:5f:55:
                    95:bd:34:df:5f:ce:c3:1a:48:12:e5:4c:4b:a1:94:
                    e4:3a:67:53:c7:ab:83:18:a0:ed:95:8f:17:5f:37:
                    c0:50:e4:a8:25:b0:d9:43:82:91:f7:4d:3f:21:7e:
                    0e:c9:ee:33:d2:ce:c5:77:6c:85:11:a4:9d:8d:d0:
                    19:4d:8c:19:84:f3:ad:b1:aa:af:fe:f9:bd:2b:9a:
                    23:0b:45:d1:40:0d:6e:15:2c:cb:02:39:56:9d:cc:
                    6a:b2:72:0e:d3:1b:4f:3c:07:fd:9d:aa:a6:06:62:
                    70:eb:cb:98:7d:5f:b2:be:7a:f5:a5:a1:5b:2f:41:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:28:83:6B:AC:9C:1B:46:3B:18:F2:59:D3:7F:A3:7E:29:0B:26
            X509v3 Authority Key Identifier:
                keyid:FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:66:16:06:ca:2f:bb:85:75:c9:f7:f4:b1:69:65:21:05:4d:
         97:0b:81:44:3e:96:28:8e:2a:3a:91:d9:80:d1:2f:9e:aa:3c:
         bf:c3:1b:d0:a6:6c:5d:11:8f:9d:a3:0e:0e:1d:75:bb:68:2a:
         d7:d6:ff:80:45:e1:f6:f4:c4:c0:7f:a7:71:0c:71:74:b5:0d:
         0b:9f:15:e5:96:e3:ab:d5:b0:e3:f6:81:4a:32:99:a6:a7:55:
         37:9a:47:b1:bd:15:81:4d:dd:93:e1:09:c1:da:fc:6e:cb:9b:
         e3:4a:1f:9e:8d:19:6f:fa:a0:33:8e:c4:e2:96:71:53:a4:65:
         be:fc:2b:69:16:29:70:40:4e:74:fb:55:20:5e:75:44:3b:81:
         e0:fb:aa:41:69:c4:9f:b0:61:e5:35:73:0a:da:a2:31:a9:cb:
         30:47:1e:23:77:b2:14:09:48:42:e3:2c:2f:a2:01:9f:de:8e:
         30:fc:b7:6d:2e:aa:70:db:15:36:7a:97:67:cb:23:20:c4:1f:
         d3:65:aa:e9:6d:86:13:d3:ea:05:e0:01:75:01:52:96:d9:59:
         4c:67:e4:5e:5c:60:d4:e0:22:2a:e8:37:10:a2:e7:8d:32:ab:
         70:72:8a:1f:b9:16:5a:d7:e2:c2:61:e7:87:d1:7d:3e:f2:df:
         03:35:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:30:08 2025 by rpki-client