Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft
File:                     F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft (raw, json)
Hash identifier:          NnYeXCUaKoPjGOM8FDtYfUloigr2P1OdPfhcDJOfyu8=
Subject key identifier:   55:5A:FF:4A:79:42:89:B4:2E:75:4A:1C:2B:10:9A:A9:5C:51:6D:F2
Authority key identifier: F7:7F:C9:D5:05:4F:C1:6B:B7:3C:04:D4:C7:86:94:19:FD:D6:C9:BF
Certificate issuer:       /CN=F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF
Certificate serial:       2A241E3F12658809BF0217438C284769B6366B69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft
Manifest number:          C8
Signing time:             Wed 23 Jul 2025 20:17:05 +0000
Manifest this update:     Wed 23 Jul 2025 20:12:05 +0000
Manifest next update:     Thu 24 Jul 2025 22:41:05 +0000
Files and hashes:         1: 3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa (hash: oA+hQNqCJ36H+HwgKXbxf98u2zTL/v+S5yyiklCcaho=)
                          2: F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.crl (hash: ulGcTUrzIDKcXBBGBZjt3ruYGxjUBYypCLrC2uZ5Nxk=)
                          3: 323830343a336337383a3a2f33322d313238203d3e20323636323134.roa (hash: ciE9rfuAOB/j26hgoWw36xbqGfI5nXl/BunKV3l6vdg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:1e:3f:12:65:88:09:bf:02:17:43:8c:28:47:69:b6:36:6b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF
        Validity
            Not Before: Jul 23 20:12:05 2025 GMT
            Not After : Jul 24 22:41:05 2025 GMT
        Subject: CN=555AFF4A794289B42E754A1C2B109AA95C516DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:2b:db:b9:5b:ab:30:39:33:ac:26:cf:ab:
                    ae:de:14:af:a0:1c:52:5b:06:27:80:69:8b:98:cf:
                    45:a4:71:97:3f:de:6f:a1:5c:db:9d:c2:4b:83:30:
                    97:25:01:86:7e:ee:89:7b:ee:45:e2:b4:39:f0:2e:
                    b7:7b:d4:b9:1e:1c:b7:03:6d:bf:8e:27:0d:0f:7f:
                    47:ac:5e:e4:54:cd:97:d3:53:9c:b3:9f:3f:2d:e6:
                    7f:d1:44:96:1f:42:70:17:fe:3e:92:4e:3f:5c:e8:
                    4a:52:48:bd:46:60:3b:aa:5d:83:27:92:a7:02:b6:
                    b2:c2:f5:02:e9:30:f4:17:14:ce:b2:fb:ad:38:37:
                    aa:20:40:de:d5:ff:5f:d3:32:f7:60:3a:80:de:54:
                    85:da:42:82:7c:1f:6f:15:50:5f:89:fb:99:89:25:
                    39:0c:84:ab:47:dd:f7:d4:38:27:a1:ea:11:01:17:
                    74:05:43:e4:70:62:d1:c2:64:4c:83:1a:a2:06:22:
                    f0:d4:b7:df:84:9d:2f:cf:91:a7:68:f2:d6:fe:49:
                    12:3f:29:c9:dd:59:e5:23:64:be:a0:85:33:a3:68:
                    cd:f2:fd:aa:38:c1:1f:d3:3f:6b:f5:6c:a3:bf:96:
                    92:3e:09:24:37:26:a7:ff:4a:e1:c0:a4:6c:2a:71:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:FF:4A:79:42:89:B4:2E:75:4A:1C:2B:10:9A:A9:5C:51:6D:F2
            X509v3 Authority Key Identifier:
                keyid:F7:7F:C9:D5:05:4F:C1:6B:B7:3C:04:D4:C7:86:94:19:FD:D6:C9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/F77FC9D5054FC16BB73C04D4C7869419FDD6C9BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:85:31:73:5e:cb:ed:81:80:84:bc:c0:81:33:fa:2e:a4:d1:
         61:1e:d7:73:a7:9c:24:f5:2b:b8:36:7c:ee:d6:cb:99:5c:59:
         aa:e5:cc:21:88:a4:e1:7e:ab:e7:fe:23:5c:db:de:94:fa:08:
         12:2d:f5:17:d9:7a:b7:ea:51:02:97:3c:d8:f4:39:4f:59:4f:
         65:ff:f6:6c:f8:6d:cd:6c:79:ca:01:18:ca:2b:a9:74:09:41:
         6c:72:4d:60:b6:ed:75:1b:f1:14:ce:2e:ed:0b:c8:91:c7:e3:
         48:8a:00:d5:97:94:26:95:88:4c:c9:7e:3b:e8:45:07:30:71:
         3a:b6:a8:96:68:09:66:8f:cb:b2:e0:10:fd:93:fc:7b:30:11:
         2e:85:4b:4f:1a:fb:cf:3c:f8:87:10:93:bd:94:79:85:4d:50:
         5b:1d:3a:ad:58:1d:53:27:44:91:cb:79:22:19:41:57:37:b3:
         09:23:10:58:ef:b9:de:be:b8:11:2a:db:97:48:29:fd:02:25:
         0f:2b:2a:00:e0:f8:d9:0a:2a:c6:85:a8:12:f0:a7:59:49:3c:
         84:fe:9f:c0:9c:1d:79:cb:f7:a2:9f:dd:88:b9:ad:9d:ff:76:
         38:3f:fa:80:61:2e:ba:99:3c:88:d6:79:7a:c7:c7:b1:b7:53:
         ff:4d:af:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKiQePxJliAm/AhdDjChHabY2a2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc3RkM5RDUwNTRGQzE2QkI3M0MwNEQ0Qzc4Njk0MTlG
REQ2QzlCRjAeFw0yNTA3MjMyMDEyMDVaFw0yNTA3MjQyMjQxMDVaMDMxMTAvBgNV
BAMTKDU1NUFGRjRBNzk0Mjg5QjQyRTc1NEExQzJCMTA5QUE5NUM1MTZERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0syvbuVurMDkzrCbPq67eFK+g
HFJbBieAaYuYz0WkcZc/3m+hXNudwkuDMJclAYZ+7ol77kXitDnwLrd71LkeHLcD
bb+OJw0Pf0esXuRUzZfTU5yznz8t5n/RRJYfQnAX/j6STj9c6EpSSL1GYDuqXYMn
kqcCtrLC9QLpMPQXFM6y+604N6ogQN7V/1/TMvdgOoDeVIXaQoJ8H28VUF+J+5mJ
JTkMhKtH3ffUOCeh6hEBF3QFQ+RwYtHCZEyDGqIGIvDUt9+EnS/Pkado8tb+SRI/
KcndWeUjZL6ghTOjaM3y/ao4wR/TP2v1bKO/lpI+CSQ3Jqf/SuHApGwqcb5BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVVr/SnlCibQudUocKxCaqVxRbfIwHwYDVR0j
BBgwFoAU93/J1QVPwWu3PATUx4aUGf3Wyb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1
RE4vMC9GNzdGQzlENTA1NEZDMTZCQjczQzA0RDRDNzg2OTQxOUZERDZDOUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3N0ZDOUQ1MDU0RkMxNkJC
NzNDMDRENEM3ODY5NDE5RkRENkM5QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1RE4vMC9G
NzdGQzlENTA1NEZDMTZCQjczQzA0RDRDNzg2OTQxOUZERDZDOUJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOIUxc17L7YGAhLzAgTP6LqTRYR7Xc6ecJPUruDZ87tbLmVxZquXMIYik4X6r
5/4jXNvelPoIEi31F9l6t+pRApc82PQ5T1lPZf/2bPhtzWx5ygEYyiupdAlBbHJN
YLbtdRvxFM4u7QvIkcfjSIoA1ZeUJpWITMl+O+hFBzBxOraolmgJZo/LsuAQ/ZP8
ezARLoVLTxr7zzz4hxCTvZR5hU1QWx06rVgdUydEkct5IhlBVzezCSMQWO+53r64
ESrbl0gp/QIlDysqAOD42QoqxoWoEvCnWUk8hP6fwJwdecv3op/diLmtnf92OD/6
gGEuupk8iNZ5esfHsbdT/02vzA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:12:21 2025 by rpki-client