Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.mft
File:                     DDD1EC34B31393132B6FA9377712BFCA752E5330.mft (raw, json)
Hash identifier:          vk3RbpNRTBNyINKS5UdnuYRWJKhioP8Mh1QIrm067Ko=
Subject key identifier:   FD:D0:1B:FA:82:D4:A1:0D:A1:95:B1:1F:6A:9E:90:93:E6:F1:4C:70
Authority key identifier: DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30
Certificate issuer:       /CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
Certificate serial:       762DF8DAA4E5BC14E65A264A9874735CA3E01128
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.mft
Manifest number:          43
Signing time:             Fri 03 Jul 2026 14:23:32 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:32 +0000
Manifest next update:     Sat 04 Jul 2026 16:57:32 +0000
Files and hashes:         1: 3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa (hash: EugsbBf6ack50ZTLvKW/oPIK0zoOkPXinMrBe074W1I=)
                          2: 3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (hash: BsZe1jE3uF7fFXVHAMf822fU2sg9pWzUHDmrY9Uv94w=)
                          3: DDD1EC34B31393132B6FA9377712BFCA752E5330.crl (hash: Qcksm1QgoStM6WfgRKQR8OUA/fYzT6FyIxU3jtUAgok=)
                          4: 323830343a316338383a3a2f33322d3438203d3e203631363630.roa (hash: Ti7kc+lzMpyaw1xueP/yMvpA6jaFkdpMIQMYWv+wsKY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2d:f8:da:a4:e5:bc:14:e6:5a:26:4a:98:74:73:5c:a3:e0:11:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
        Validity
            Not Before: Jul  3 14:18:32 2026 GMT
            Not After : Jul  4 16:57:32 2026 GMT
        Subject: CN=FDD01BFA82D4A10DA195B11F6A9E9093E6F14C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:21:7a:3d:56:dd:93:10:5d:3e:3d:5a:42:
                    25:e9:95:c0:33:99:14:c3:db:5f:80:43:80:2d:c6:
                    cb:ea:e9:16:d4:a6:4e:b2:d7:ff:9b:08:36:9e:b7:
                    c8:11:b1:35:bf:5b:75:d8:87:49:69:09:1e:38:6f:
                    47:fa:94:c6:e3:42:54:ff:88:98:6f:a2:f5:77:1a:
                    59:31:2b:07:39:62:75:f4:56:d0:20:50:c3:8b:df:
                    ce:1b:c8:8d:7c:91:90:ef:c8:3f:9e:18:a6:2b:2d:
                    06:42:c5:42:03:a8:bc:48:d7:38:7d:2d:4d:ac:ee:
                    ac:15:3a:26:68:55:9a:f5:9e:69:d5:74:29:b2:41:
                    f5:80:3c:48:9a:25:4f:58:0a:33:bb:9c:97:0d:28:
                    2c:e2:92:a8:44:de:96:1c:13:bc:c8:30:d4:47:df:
                    a7:3f:da:2d:2b:6c:ec:c9:f6:e0:32:7e:c4:5e:33:
                    b9:b6:56:31:e4:8b:7a:b1:b0:67:e1:57:9d:33:37:
                    da:9f:48:d9:1f:df:80:07:bf:0a:ad:45:74:dc:96:
                    a8:bd:2a:4d:02:82:af:89:80:7a:0c:bb:8b:6f:39:
                    89:73:38:83:cf:9f:5c:76:4e:05:3e:9b:a8:21:34:
                    2c:87:f5:b5:ee:ed:f2:b0:2a:6f:f4:36:b6:46:88:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:1B:FA:82:D4:A1:0D:A1:95:B1:1F:6A:9E:90:93:E6:F1:4C:70
            X509v3 Authority Key Identifier:
                keyid:DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:3f:62:5d:7a:46:a9:3e:e4:99:32:16:bf:50:df:00:e2:
         49:47:cb:64:44:a4:b6:cd:23:6e:5e:89:57:87:b8:6e:e2:67:
         1b:1c:bd:bc:3b:87:d7:17:13:5f:46:39:d1:8b:21:4d:d3:88:
         48:4e:4b:29:60:d9:2e:c3:00:b6:7d:fc:73:d8:23:8c:5b:30:
         4e:2c:45:f8:2e:c7:00:7b:d6:dd:23:e5:80:19:80:f3:ba:44:
         a4:4a:36:05:92:fb:1b:f8:7a:39:17:71:35:21:d5:ef:0a:97:
         64:29:77:97:94:eb:7b:97:82:50:42:ce:0e:c8:75:05:53:82:
         90:a1:02:c0:62:d2:84:78:70:76:0e:1d:98:6f:fe:f8:8c:44:
         52:42:58:e6:6e:ce:7e:fd:c7:3f:03:58:fe:9a:f4:b4:fa:75:
         84:65:f5:df:d7:34:0a:37:03:3d:54:db:9d:33:0b:d2:05:35:
         1f:04:8e:4f:4d:06:a9:c8:da:4f:49:4e:80:df:33:99:c3:4e:
         d9:28:7f:0a:0f:b8:d7:5e:67:0e:79:9e:db:56:38:5e:e5:30:
         13:81:3b:93:33:9e:8d:3b:c8:34:77:70:b9:0e:f0:8f:1c:ad:
         78:01:31:3d:27:3c:bc:f6:5f:fa:bf:78:6d:a8:a8:93:ce:30:
         36:3f:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:18 2026 by rpki-client