Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
File:                     A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft (raw, json)
Hash identifier:          KCWA1tYg58it4w1XlL6vJIjjHkI4BCrvbJSs85410i4=
Subject key identifier:   12:E8:5B:30:45:CE:03:08:3E:9F:66:68:D8:2B:47:64:80:D6:35:62
Authority key identifier: A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
Certificate issuer:       /CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
Certificate serial:       105E5965E307F73C5BE1AF6E45940362DFB88D4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
Manifest number:          14
Signing time:             Tue 23 Jun 2026 07:08:33 +0000
Manifest this update:     Tue 23 Jun 2026 07:03:33 +0000
Manifest next update:     Wed 24 Jun 2026 09:11:33 +0000
Files and hashes:         1: 3137302e3233382e3133302e302f32332d3234203d3e20323636333139.roa (hash: uflG3VWldd7fPtyOcuCy4UB4sXfSkzSGBfPSLcbO2A8=)
                          2: 3137302e3233382e3132382e302f32332d3234203d3e20323636333139.roa (hash: d52sLzwBiYn/MIa15sqwEpWRifcQ30zcKTUBhhTvOuk=)
                          3: 323830343a333566633a383030303a3a2f33332d3634203d3e20323636333139.roa (hash: 6yX8CDn8O3dLBKpW8EWOCB/i6WhldqLFjWMO6Vgxugw=)
                          4: A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl (hash: YhrtDNT63K5Y0Xm7jAXx8ruQkytgx8vocWPhO/vZ5lc=)
                          5: 323830343a333566633a3a2f33332d3634203d3e20323636333139.roa (hash: wc+VgV5h3ryOpPf6UfC+YlmRowXBgAGTQcfdwpFKtMA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:59:65:e3:07:f7:3c:5b:e1:af:6e:45:94:03:62:df:b8:8d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
        Validity
            Not Before: Jun 23 07:03:33 2026 GMT
            Not After : Jun 24 09:11:33 2026 GMT
        Subject: CN=12E85B3045CE03083E9F6668D82B476480D63562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:05:90:02:28:9b:50:e0:9a:c4:8f:3a:89:
                    01:20:3b:e0:17:77:75:45:03:16:8b:d7:b9:94:c8:
                    fd:9d:0c:ab:07:ce:37:22:f2:f3:ee:43:68:f3:09:
                    67:42:2a:a2:10:94:0f:26:52:50:0f:96:39:5a:f5:
                    ef:0f:14:cc:4f:5c:a2:bc:5b:da:20:b4:6b:96:de:
                    f6:49:33:07:e1:23:67:56:69:fd:f0:a0:2e:60:29:
                    42:58:2b:45:a8:3c:ba:ac:33:c9:9e:de:a9:91:03:
                    4f:37:4e:22:32:fd:7b:72:99:b2:e8:3c:2b:d5:57:
                    85:76:89:26:a0:c5:0f:cd:14:86:ef:0c:73:0b:14:
                    04:88:ef:78:53:2a:b6:b7:85:c5:ad:63:4b:dc:8f:
                    88:ad:9f:4f:a3:be:2b:60:51:32:5c:42:5c:14:19:
                    3f:81:4e:fb:d5:f4:31:4a:60:02:47:08:19:05:bb:
                    66:71:93:44:5f:c6:38:51:56:1e:c3:cb:31:44:38:
                    8e:29:bc:82:65:2c:86:61:8f:82:b5:9f:f3:38:d3:
                    08:f7:0b:e6:ca:9e:32:26:69:a9:d3:3e:90:19:bb:
                    59:69:c5:94:2a:70:3c:1a:78:09:1f:54:04:6c:5d:
                    9a:7f:8e:87:35:d0:4d:dd:36:ac:c0:30:af:c9:7a:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E8:5B:30:45:CE:03:08:3E:9F:66:68:D8:2B:47:64:80:D6:35:62
            X509v3 Authority Key Identifier:
                keyid:A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:0a:47:1f:61:59:d1:da:42:4d:79:22:29:a4:71:d4:cb:
         67:ec:ab:fd:e9:3c:4c:2e:76:09:ef:25:31:ea:a5:45:7c:e9:
         0e:60:e8:ed:bb:17:11:64:b2:d7:a1:d5:c4:9a:a8:a0:79:ab:
         c4:77:3b:9b:b1:3e:66:38:6a:0e:8f:27:73:27:98:7d:55:62:
         fa:cc:7d:73:40:75:ab:18:36:6b:12:22:93:43:ac:13:73:c6:
         77:45:04:30:be:61:13:f5:fc:86:fe:36:e5:b4:09:cd:3a:75:
         13:88:d6:e8:f9:13:76:20:70:fb:20:0d:a9:1f:83:7d:06:b9:
         a0:61:50:4e:01:1b:d5:6b:ca:d7:d0:4e:bf:2f:7c:22:d6:1a:
         f0:da:e8:e0:69:a2:e0:49:73:47:76:20:32:20:aa:7e:ad:3e:
         c6:ad:6e:0d:c3:cd:22:68:77:d9:53:df:9f:7f:b6:63:cf:fa:
         2d:12:d0:26:e9:f4:2b:e0:2c:12:6c:7d:ea:33:cf:a6:77:d0:
         b0:9d:2f:8c:31:48:99:f3:b4:51:c5:e1:df:20:d2:6a:4c:c4:
         f5:72:4b:7d:11:3b:f1:a9:0b:34:ff:36:47:8d:5b:25:82:66:
         18:bc:23:08:68:ea:c5:ff:af:4b:a3:2b:87:c5:36:a4:3f:cb:
         54:b2:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:11:21 2026 by rpki-client