
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
File:                     CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft (raw, json)
Hash identifier:          YHugy6v+/hnHz0I7y9naq1Mb07ZYPLSmmTQAnPWrZr8=
Subject key identifier:   B0:7C:32:5E:BE:37:98:FD:4F:AC:D3:48:9D:9F:44:3A:AA:BA:0C:58
Authority key identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
Certificate issuer:       /CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
Certificate serial:       451DE55BA77B980D1CED8454534E26DA725D2E6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
Manifest number:          0149
Signing time:             Sun 02 Nov 2025 21:03:11 +0000
Manifest this update:     Sun 02 Nov 2025 20:58:11 +0000
Manifest next update:     Mon 03 Nov 2025 21:07:11 +0000
Files and hashes:         1: 323830343a373334383a3a2f33322d3332203d3e20323632363930.roa (hash: ZETWz9B1XsvXE3LNR6Qez4qvCwG8K0rSb9shyRIBvpo=)
                          2: CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl (hash: TTRK21SYi3nJ+UT0DmFmEY+1TgkWy45j2o5htzGMwjg=)
                          3: 3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (hash: R1WjUp/i2SEyHbR3H/pC5wqVSIyixKVkfBPPmkVfNTk=)
Validation:               Failed, CRL has expired
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1d:e5:5b:a7:7b:98:0d:1c:ed:84:54:53:4e:26:da:72:5d:2e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC
        Validity
            Not Before: Nov  2 20:58:11 2025 GMT
            Not After : Nov  3 21:07:11 2025 GMT
        Subject: CN=B07C325EBE3798FD4FACD3489D9F443AAABA0C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:dc:6f:4d:eb:b1:b3:c4:75:94:df:52:43:
                    16:ee:4b:a7:93:37:cb:3f:67:e0:ac:d9:b9:0e:08:
                    d6:a5:dc:91:fb:2c:2e:16:64:ae:c3:e6:c8:74:73:
                    c6:7a:e4:6c:25:b9:bf:68:45:5b:a8:8a:e3:14:53:
                    d4:4b:a3:9c:d0:3d:35:74:8e:8c:4a:8b:e7:14:fe:
                    d4:a6:83:ea:02:c5:9d:0b:f6:6c:12:77:0f:99:9a:
                    8b:fa:b2:7d:ce:49:7b:a1:4d:39:3f:fe:0d:8a:d5:
                    55:fe:a5:c9:10:48:2d:0f:bf:ff:1c:ce:3c:7a:e4:
                    93:73:e7:bf:e0:68:eb:c5:52:ea:8f:3e:39:05:e8:
                    ee:cb:77:ee:59:67:ce:5f:95:4b:a9:e0:6f:16:91:
                    d1:0b:92:83:f1:3d:a8:05:1f:ee:4d:0e:96:ca:98:
                    62:1f:96:ba:db:72:76:2d:35:5e:df:c7:fc:ac:a7:
                    51:f6:4c:8a:9c:6a:47:d5:19:df:e1:30:03:82:d5:
                    ff:c3:de:56:8e:2b:e2:d2:e5:4c:37:9a:44:aa:43:
                    86:81:57:65:6c:7d:26:f3:13:03:2e:2a:0e:f1:a5:
                    a8:16:4a:36:63:ca:fb:7a:66:88:fd:50:82:fe:d7:
                    b9:c9:f2:bf:2f:c0:21:8c:d8:8f:ca:0b:48:17:49:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:32:5E:BE:37:98:FD:4F:AC:D3:48:9D:9F:44:3A:AA:BA:0C:58
            X509v3 Authority Key Identifier:
                keyid:CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         05:ac:1b:17:a0:39:97:06:06:26:ed:94:1a:7e:06:59:4f:9c:
         f3:5f:7a:04:c0:34:b6:15:5e:c8:cb:0e:27:62:f6:1d:2e:0b:
         b3:d9:bd:97:0f:32:93:47:57:35:c9:8c:9d:66:68:28:5d:35:
         27:a8:18:c1:53:06:f4:5b:85:c4:c7:de:24:cc:5d:ef:c1:08:
         c6:4a:13:9e:44:3b:d7:91:15:bc:44:74:68:d6:1c:5b:7c:d3:
         d8:90:57:4f:f8:72:19:53:ae:8a:03:3e:93:eb:1a:d6:f8:2b:
         5d:58:0b:29:e3:bc:0b:7a:ca:9e:6f:6d:07:da:82:d1:fa:2b:
         64:30:97:84:a7:e4:8b:23:6d:24:e5:53:23:f4:46:0b:83:88:
         c8:8b:e3:39:85:ba:54:43:e0:94:6e:c3:09:88:57:ab:b0:13:
         9c:a1:dd:3d:b0:0e:7b:a7:93:54:27:67:ad:3b:b0:a0:e6:0f:
         3c:e6:e8:ba:25:ab:ae:8c:ab:19:82:e8:7c:e7:13:3f:e6:c7:
         9f:ea:10:c5:0c:9b:89:74:28:5c:c9:2a:5c:dd:f4:cf:61:68:
         ef:e5:51:e6:e8:e1:0b:60:cf:ad:8d:4b:aa:d7:00:99:5f:32:
         6d:c8:98:1b:89:2c:03:09:46:f6:7d:31:2b:a8:36:db:48:cd:
         c9:31:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:28:36 2025 by rpki-client