Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.mft
File:                     ADE8A200ADB998852CD6198EECB50CA1079EB2A6.mft (raw, json)
Hash identifier:          00GT3MGryH5GNiGipny2+ZmI+CudOHOGy1SOZY7wwxM=
Subject key identifier:   62:F1:74:AD:ED:6E:A9:17:A6:F8:0F:71:3E:EA:E9:B5:5A:77:53:57
Authority key identifier: AD:E8:A2:00:AD:B9:98:85:2C:D6:19:8E:EC:B5:0C:A1:07:9E:B2:A6
Certificate issuer:       /CN=ADE8A200ADB998852CD6198EECB50CA1079EB2A6
Certificate serial:       1068613520B66130DCE1D6A2D32990C13ED0311C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.mft
Manifest number:          0A
Signing time:             Sun 16 Feb 2025 16:01:28 +0000
Manifest this update:     Sun 16 Feb 2025 15:56:28 +0000
Manifest next update:     Mon 17 Feb 2025 17:54:28 +0000
Files and hashes:         1: ADE8A200ADB998852CD6198EECB50CA1079EB2A6.crl (hash: A8mzByNg9csj2fHHJQm55rHSvQvNzd5msK9i3aTieVo=)
                          2: 3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa (hash: qju7AzMX51shyPb3pltQVHRCgs2Wdvqi8xhtrze9x0s=)
                          3: 3139312e33372e3133362e302f32342d3234203d3e20323633333630.roa (hash: NWIxqAPJHhU7mJCud19vdAHhPitLFaLedfrNrM+ek7k=)
                          4: 323830343a313466303a3a2f33322d3332203d3e20323633333630.roa (hash: DzWogS7nZiFKwaesPJzT+b/OS0cCmFwY0A/2XH/+mI4=)
                          5: 323830343a313466303a3a2f33332d3333203d3e20323633333630.roa (hash: 01BV8HvT4meSgeZCY5FMyd5nZ11KdAFstwzIlbwZDrU=)
                          6: 323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa (hash: 1M+dr1q+MDfKlthd7wZpO676zh6LPqvPOCTxi2eoHKA=)
                          7: 3139312e33372e3133382e302f32332d3233203d3e20323633333630.roa (hash: RCUd+hDnwseayGwzmaudxPqD+6ukNbhPkM9WcfEEStM=)
                          8: 3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa (hash: Dry6bRAfyx5uwv8ff0H3YRUhN5VEm+gpBxyqTZzvYpM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:68:61:35:20:b6:61:30:dc:e1:d6:a2:d3:29:90:c1:3e:d0:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE8A200ADB998852CD6198EECB50CA1079EB2A6
        Validity
            Not Before: Feb 16 15:56:28 2025 GMT
            Not After : Feb 17 17:54:28 2025 GMT
        Subject: CN=62F174ADED6EA917A6F80F713EEAE9B55A775357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:94:17:1f:9b:61:ba:fa:fd:5f:91:19:bb:
                    0b:c7:47:4c:9e:de:2f:3a:e4:f0:2e:c6:e9:28:c8:
                    9c:d9:9e:5f:bd:92:60:be:2d:08:8a:34:53:8f:a2:
                    6a:fb:1d:84:e2:4b:e7:2e:03:5d:3a:3e:9a:45:20:
                    5b:88:3c:54:c8:3a:6c:cd:f6:3b:e4:39:42:00:c0:
                    35:3b:8f:66:68:80:16:c0:a0:3f:a4:56:a1:6e:40:
                    a4:16:8d:5d:1b:9e:87:56:87:06:e2:ae:13:8c:68:
                    df:54:0a:1f:1d:79:2d:b4:d2:dc:a1:d9:b5:c6:50:
                    4c:cf:d2:b3:6e:88:52:f2:26:5e:04:6b:11:2f:d5:
                    36:75:5e:a6:bc:26:c4:72:fd:15:fd:5a:5a:aa:c1:
                    65:c0:cc:42:08:7f:1f:97:84:0a:ce:30:90:d7:d9:
                    fc:19:3f:3d:89:32:8f:b5:07:2b:ab:ed:fc:f2:a7:
                    a3:0a:7e:de:a3:14:a7:c2:14:2c:81:88:ea:c1:be:
                    4c:98:1f:57:21:d1:df:e9:11:82:0d:fb:6e:ef:d8:
                    aa:d4:b9:3f:68:6d:c4:43:36:ab:8a:be:ae:04:ec:
                    e6:eb:fd:44:fe:3d:45:8d:0f:63:f1:4a:8b:c7:17:
                    a8:2c:74:97:0e:da:d4:47:a8:8b:21:ea:90:fa:61:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F1:74:AD:ED:6E:A9:17:A6:F8:0F:71:3E:EA:E9:B5:5A:77:53:57
            X509v3 Authority Key Identifier:
                keyid:AD:E8:A2:00:AD:B9:98:85:2C:D6:19:8E:EC:B5:0C:A1:07:9E:B2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:6d:05:9f:39:42:71:41:f6:44:3b:58:b1:30:3f:27:5e:
         f1:3c:b8:1f:79:fd:d2:3a:28:39:4a:fb:e5:44:6b:55:1d:92:
         88:74:fd:29:d7:72:98:41:af:52:d7:8a:9a:e1:fb:c3:bf:cc:
         79:26:dd:4f:3e:e5:2c:65:1d:40:9c:60:5b:fa:14:04:59:98:
         ce:f6:e9:e8:f6:7b:39:60:93:f0:b5:c9:d8:07:fd:f6:05:3b:
         ea:ae:99:8d:df:2f:53:22:2e:17:92:f3:74:e3:0b:5d:8e:7d:
         e0:73:76:21:82:8d:ef:d6:dc:c9:17:15:ff:6e:dc:be:03:1e:
         34:ed:2c:1d:a8:2d:2e:81:36:a3:85:92:15:c8:50:39:fd:f1:
         2f:9c:ea:3d:28:68:89:99:38:34:c6:8a:e3:68:00:51:12:f0:
         5c:97:7b:1c:cd:65:99:db:1a:18:71:b1:80:dc:1d:a4:b1:b9:
         82:a7:7a:9c:ce:ad:22:66:c1:f1:b6:9f:eb:0f:0e:73:14:f8:
         b7:98:eb:89:94:dc:83:97:7e:d1:b8:b1:bf:92:10:db:f5:41:
         cb:e7:d4:95:58:25:04:a1:95:e6:fa:1f:a8:9d:3e:29:35:8c:
         f9:04:08:de:cc:c8:d0:22:13:45:f5:32:ce:23:70:d1:bc:7a:
         f9:67:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:44 2025 by rpki-client