Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft
File:                     7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft (raw, json)
Hash identifier:          h6LSfq8uaRFjyfpatM7WEod9qQls2sw9AE30Uh4YXgk=
Subject key identifier:   11:F9:04:32:0A:54:41:91:CC:49:BC:C1:6C:1B:CD:F2:04:1E:25:B1
Authority key identifier: 7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70
Certificate issuer:       /CN=7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970
Certificate serial:       2BCFD0C578CF9F1E8FBC73506909C665327222A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft
Manifest number:          3F
Signing time:             Fri 03 Jul 2026 14:23:32 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:32 +0000
Manifest next update:     Sat 04 Jul 2026 16:37:32 +0000
Files and hashes:         1: 323830343a326230303a3a2f33322d3438203d3e20323635313330.roa (hash: t/yPsyWr+DEgX+Xth5cjCFhM8uXjkahW/FRs1cxrRyo=)
                          2: 3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa (hash: BCVUmeYSg9tyy+ROfSNP15BThoImGlCwByEVd6naUAs=)
                          3: 3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa (hash: pR8jviB+Yidc1yRn6uUNTTGnPEfu307njx82Ik27IMg=)
                          4: 7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.crl (hash: Rk2DTeZXRIynvF1VyFjGKSkEld4m7LHkeRM+9rg2tco=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cf:d0:c5:78:cf:9f:1e:8f:bc:73:50:69:09:c6:65:32:72:22:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970
        Validity
            Not Before: Jul  3 14:18:32 2026 GMT
            Not After : Jul  4 16:37:32 2026 GMT
        Subject: CN=11F904320A544191CC49BCC16C1BCDF2041E25B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:68:07:66:b6:04:8c:cf:b2:b2:32:bc:1c:
                    33:57:bc:bf:63:d7:f8:8b:58:f5:95:c4:0d:59:ab:
                    56:b7:45:7a:85:ee:45:cf:8f:20:14:5d:2d:25:97:
                    f1:4c:bf:5e:c5:8b:7b:ad:25:ca:d4:4c:08:8f:f1:
                    14:17:f9:2e:36:02:da:2c:43:c6:94:d3:80:c3:67:
                    f9:d4:ec:7a:a5:a2:ee:fc:75:4b:04:12:45:25:28:
                    f1:ea:4c:7b:09:93:1d:30:ce:ed:69:15:04:a1:5f:
                    6b:57:74:04:aa:8b:f5:a5:5b:30:e4:a5:74:1d:6f:
                    45:1f:86:03:2b:0b:18:4f:4a:ce:8b:7d:bf:d1:50:
                    dc:60:83:a5:86:7d:90:91:e8:af:f9:11:e8:3c:5c:
                    93:32:10:4e:ca:4f:c6:33:26:b8:70:c5:28:9a:2f:
                    c2:5b:d0:fe:4c:50:d9:73:05:f0:81:c3:83:a9:0d:
                    31:f5:28:44:cb:e3:23:ae:84:8a:fd:7b:9e:77:82:
                    ca:bd:28:01:b8:83:ce:2d:2a:75:c1:96:9b:dc:5a:
                    bd:c4:f7:f6:d2:4e:be:85:f4:95:62:64:0c:52:94:
                    a8:21:10:99:a1:97:3f:07:30:bc:b7:87:61:e0:02:
                    be:62:3f:06:75:6c:2f:bc:59:4c:41:ab:cf:7e:27:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:04:32:0A:54:41:91:CC:49:BC:C1:6C:1B:CD:F2:04:1E:25:B1
            X509v3 Authority Key Identifier:
                keyid:7B:30:5A:9D:81:FB:2A:95:A0:9E:E2:8E:22:F3:FE:FE:1E:E3:D9:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/7B305A9D81FB2A95A09EE28E22F3FEFE1EE3D970.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:1d:5f:93:3c:a4:84:5c:8d:c0:ff:19:26:f9:c1:ae:ef:
         25:09:cf:6f:df:17:db:93:ba:29:fa:9e:85:d5:e4:f5:67:4d:
         3f:33:86:43:23:7e:c7:96:ee:a3:65:7f:9b:c7:2c:3b:3b:f3:
         9e:1c:e5:eb:12:4e:f4:26:7c:16:92:5d:6e:fe:5a:fd:24:74:
         77:56:dc:d7:7b:40:65:3d:81:ff:83:3f:12:b6:c5:bb:72:b3:
         df:1c:06:09:37:ad:48:88:d6:7a:29:5d:9f:17:fb:3e:7d:74:
         0f:5f:18:d4:63:35:31:3f:15:43:ad:49:57:87:e9:a5:5c:97:
         47:4b:d6:ce:f3:8f:c6:65:e5:fd:15:1d:ad:a4:d5:74:0e:38:
         27:0e:59:ed:a5:bc:00:a0:46:0e:7b:f3:fa:f5:a0:39:6b:59:
         13:3b:a2:80:ae:66:5d:aa:b6:ec:5e:bf:e9:c6:79:1c:4e:75:
         de:9b:05:e7:40:f0:18:39:c7:88:7d:2c:cb:5e:59:7c:68:68:
         1c:3d:20:65:76:c3:35:63:dd:37:72:34:3d:0a:7c:21:6a:09:
         8e:9f:04:33:09:b3:d4:29:61:b2:6c:d2:bb:8c:8e:28:8f:bf:
         f4:4b:68:54:93:c6:e8:b9:9f:0e:a3:5e:2f:b3:42:e6:c6:23:
         03:91:02:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK8/QxXjPnx6PvHNQaQnGZTJyIqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzMDVBOUQ4MUZCMkE5NUEwOUVFMjhFMjJGM0ZFRkUx
RUUzRDk3MDAeFw0yNjA3MDMxNDE4MzJaFw0yNjA3MDQxNjM3MzJaMDMxMTAvBgNV
BAMTKDExRjkwNDMyMEE1NDQxOTFDQzQ5QkNDMTZDMUJDREYyMDQxRTI1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bGgHZrYEjM+ysjK8HDNXvL9j
1/iLWPWVxA1Zq1a3RXqF7kXPjyAUXS0ll/FMv17Fi3utJcrUTAiP8RQX+S42Atos
Q8aU04DDZ/nU7Hqlou78dUsEEkUlKPHqTHsJkx0wzu1pFQShX2tXdASqi/WlWzDk
pXQdb0UfhgMrCxhPSs6Lfb/RUNxgg6WGfZCR6K/5Eeg8XJMyEE7KT8YzJrhwxSia
L8Jb0P5MUNlzBfCBw4OpDTH1KETL4yOuhIr9e553gsq9KAG4g84tKnXBlpvcWr3E
9/bSTr6F9JViZAxSlKghEJmhlz8HMLy3h2HgAr5iPwZ1bC+8WUxBq89+J9UJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEfkEMgpUQZHMSbzBbBvN8gQeJbEwHwYDVR0j
BBgwFoAUezBanYH7KpWgnuKOIvP+/h7j2XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERkMnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1
eHcvMC83QjMwNUE5RDgxRkIyQTk1QTA5RUUyOEUyMkYzRkVGRTFFRTNEOTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCMzA1QTlEODFGQjJBOTVB
MDlFRTI4RTIyRjNGRUZFMUVFM0Q5NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OERkMnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMC83
QjMwNUE5RDgxRkIyQTk1QTA5RUUyOEUyMkYzRkVGRTFFRTNEOTcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh9QdX5M8pIRcjcD/GSb5wa7vJQnPb98X25O6KfqehdXk9WdNPzOGQyN+x5bu
o2V/m8csOzvznhzl6xJO9CZ8FpJdbv5a/SR0d1bc13tAZT2B/4M/ErbFu3Kz3xwG
CTetSIjWeildnxf7Pn10D18Y1GM1MT8VQ61JV4fppVyXR0vWzvOPxmXl/RUdraTV
dA44Jw5Z7aW8AKBGDnvz+vWgOWtZEzuigK5mXaq27F6/6cZ5HE513psF50DwGDnH
iH0sy15ZfGhoHD0gZXbDNWPdN3I0PQp8IWoJjp8EMwmz1ClhsmzSu4yOKI+/9Eto
VJPG6LmfDqNeL7NC5sYjA5ECyA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:04:32 2026 by rpki-client