Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.mft
File:                     190A6797EAE214D286B07B3B50908CBAA0C857F9.mft (raw, json)
Hash identifier:          fVkkUOrS210CzXb9paOOeQB5G7V48Am9uxLdNqi0TD4=
Subject key identifier:   EB:F3:64:32:BE:26:B1:E0:D9:37:C8:6F:B3:10:7E:B4:A1:5F:61:6F
Authority key identifier: 19:0A:67:97:EA:E2:14:D2:86:B0:7B:3B:50:90:8C:BA:A0:C8:57:F9
Certificate issuer:       /CN=190A6797EAE214D286B07B3B50908CBAA0C857F9
Certificate serial:       18BC05FF3E6E89A0E8DACF6EB10DBDCCF74A2C85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190A6797EAE214D286B07B3B50908CBAA0C857F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.mft
Manifest number:          67
Signing time:             Wed 16 Apr 2025 14:10:16 +0000
Manifest this update:     Wed 16 Apr 2025 14:05:16 +0000
Manifest next update:     Thu 17 Apr 2025 17:21:16 +0000
Files and hashes:         1: 3138392e38342e3130342e302f32342d3234203d3e20323730393034.roa (hash: 0/ZXpSYntdZK63DuaG8qpdm4YAUElKWKQqLTpzmeMjQ=)
                          2: 3138392e38342e3130352e302f32342d3234203d3e20323730393034.roa (hash: KULetAS+QO4zNj1SyBj2gE6d2sx3x+L/x+e72zdnP0Y=)
                          3: 190A6797EAE214D286B07B3B50908CBAA0C857F9.crl (hash: sO1nMN8xLs+tvhV3bag/wyTOffWeQyX3+5C7t6vxPFQ=)
                          4: 3138392e38342e3130342e302f32332d3233203d3e20323730393034.roa (hash: Usamf9ea5RAmv5fdmz5h5mICuci8W/HBUNiXS+SGHPw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bc:05:ff:3e:6e:89:a0:e8:da:cf:6e:b1:0d:bd:cc:f7:4a:2c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190A6797EAE214D286B07B3B50908CBAA0C857F9
        Validity
            Not Before: Apr 16 14:05:16 2025 GMT
            Not After : Apr 17 17:21:16 2025 GMT
        Subject: CN=EBF36432BE26B1E0D937C86FB3107EB4A15F616F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:94:4a:e2:5c:30:3f:99:fe:f1:e5:94:0f:
                    14:bc:c8:63:7c:f4:57:df:33:f6:93:05:08:bf:0d:
                    a9:eb:c9:ba:47:da:85:07:f7:64:73:93:ef:2b:56:
                    9a:06:5b:b9:28:ca:3f:0b:bb:ee:43:6e:fa:f6:19:
                    53:0b:bc:3a:5d:be:45:d6:cf:3c:c7:40:5d:81:74:
                    ad:73:c6:48:40:d3:99:90:8e:e9:f2:25:96:d3:49:
                    90:93:28:37:2b:bd:c4:71:25:6c:36:c1:7a:e9:f1:
                    9f:9c:76:0a:3f:52:e9:d2:d7:a4:cc:cd:2a:7f:47:
                    49:35:0d:fb:0a:58:81:0d:3b:92:68:cb:b3:3c:cb:
                    43:2c:5e:7f:f3:03:b2:43:d9:de:17:a6:f0:fb:88:
                    e0:d8:f6:49:6f:4e:71:8c:7b:81:5f:f1:84:e3:3d:
                    aa:05:76:3b:24:9b:36:2a:cf:6f:0e:27:a7:be:9c:
                    52:a8:0f:02:63:c1:81:6d:66:63:dd:3c:e7:4f:50:
                    a5:cf:86:6b:22:a8:d8:3d:c3:b5:5a:fc:c2:c1:e3:
                    81:0d:3e:5a:3c:8e:7f:87:8b:11:c9:11:93:55:b6:
                    aa:ce:30:fc:b1:82:ab:d7:3b:ed:39:66:ff:0d:cd:
                    20:68:7a:c1:cf:96:ac:40:1c:f4:df:94:f7:28:66:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:64:32:BE:26:B1:E0:D9:37:C8:6F:B3:10:7E:B4:A1:5F:61:6F
            X509v3 Authority Key Identifier:
                keyid:19:0A:67:97:EA:E2:14:D2:86:B0:7B:3B:50:90:8C:BA:A0:C8:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190A6797EAE214D286B07B3B50908CBAA0C857F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bbLLJG6U9eWtuny3Lry2aErc3dCgheBEcgB95eGYHhJ/0/190A6797EAE214D286B07B3B50908CBAA0C857F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:a3:d1:ee:82:ac:42:bb:8c:2c:f1:6c:a1:2d:d4:84:c7:
         d9:ae:84:7a:63:87:3a:88:72:e4:d6:c4:91:62:28:c5:9f:6e:
         9c:bb:77:70:24:d7:05:39:86:b7:7f:2e:7c:2a:dc:2b:e4:6c:
         73:35:6e:07:20:b0:48:3d:46:c9:d1:56:53:1b:4d:7b:fe:89:
         9a:66:59:c7:85:57:8c:0b:62:c1:a2:48:68:46:66:85:6e:33:
         d1:0f:b8:f3:d4:10:5a:fa:ef:18:23:44:36:a3:c6:8f:dc:d0:
         7d:56:cf:24:9a:9e:ae:ee:65:9a:23:c9:65:70:1b:1d:a8:3e:
         a4:57:51:8c:ce:ef:e3:94:de:6b:5f:97:51:bf:9f:01:57:52:
         9d:9a:53:bd:ee:78:66:67:5a:d3:a8:73:36:a5:49:91:e8:42:
         c7:46:32:75:64:46:ab:7c:23:13:a7:37:b1:e9:0d:23:f5:80:
         21:35:cf:69:23:b7:92:fe:2b:c3:7c:c1:a8:cd:37:a4:a8:90:
         5e:3d:90:56:c7:80:77:2b:11:4f:04:4c:8a:7e:c1:e7:99:d0:
         3c:cf:6c:2e:31:91:f0:37:a6:f5:76:8d:27:07:82:14:db:8c:
         b5:af:bd:6d:6c:ad:8c:c8:7c:38:ee:8e:dc:26:43:78:c0:fd:
         87:dc:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----