Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
File:                     CA46B42FB0BBF428F33303D970954360F960AD2B.mft (raw, json)
Hash identifier:          aDPlnNW00VHUSfxDXsPR2KBnQh4cKjnfPi6ZuClu1Cw=
Subject key identifier:   03:B9:C7:33:B4:F0:3C:85:CC:DC:0E:42:BD:BE:64:0C:DA:4A:15:71
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Certificate issuer:       /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial:       40E36D1FAB844F7007401C41014B150B60FA5BEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
Manifest number:          0157
Signing time:             Fri 03 Jul 2026 14:23:32 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:32 +0000
Manifest next update:     Sat 04 Jul 2026 17:48:32 +0000
Files and hashes:         1: 34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa (hash: 6NV71V0AYxrnpGbnAP43kbdLvtfm5e/BEdmGARmJlT0=)
                          2: CA46B42FB0BBF428F33303D970954360F960AD2B.crl (hash: U5u28JE3GFM7JtUGXlUe0tyBeHc2juxJ2ius2ACrP+U=)
                          3: 323830343a353936633a3a2f33322d313238203d3e20323638373031.roa (hash: b7CXIsbZNr28fAIIDRDKKYTvdSl4ceaJ4DVvhRxvTsI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e3:6d:1f:ab:84:4f:70:07:40:1c:41:01:4b:15:0b:60:fa:5b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
        Validity
            Not Before: Jul  3 14:18:32 2026 GMT
            Not After : Jul  4 17:48:32 2026 GMT
        Subject: CN=03B9C733B4F03C85CCDC0E42BDBE640CDA4A1571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f5:1c:c9:11:db:fe:af:5d:58:0f:bf:be:eb:
                    54:c0:a4:2a:0f:cf:25:44:c9:2c:85:b7:7d:7c:4d:
                    42:2f:8a:f8:7c:18:8e:f6:81:83:e7:b5:0c:30:30:
                    df:b1:be:c3:59:84:37:5d:ad:aa:ca:c4:c0:04:e4:
                    0d:83:5a:c3:d6:99:ef:81:68:93:00:df:66:2a:c8:
                    f2:05:f2:3c:a4:75:89:33:19:17:de:a3:21:56:30:
                    82:87:e5:ce:37:42:4f:33:5e:2b:63:a0:8b:d4:31:
                    cc:5b:ae:d4:09:9f:06:c3:2c:7d:ff:3e:79:85:ac:
                    3a:1f:c4:15:e1:a9:40:c3:4d:00:11:9d:e2:03:a4:
                    41:0c:09:ff:e9:16:76:f2:ea:28:0b:9f:16:7a:76:
                    f2:21:6d:3d:83:2f:4e:0a:fd:31:de:11:00:5b:f6:
                    56:29:fc:2b:dc:bf:af:34:d2:c7:35:0b:75:e3:3c:
                    e7:4b:9a:51:28:4b:6d:b5:eb:2a:71:8c:b7:6c:64:
                    91:2e:79:80:13:a5:50:71:1e:bd:12:06:81:3c:19:
                    69:c2:01:a0:c7:ef:ca:6e:9d:97:eb:bf:70:39:77:
                    ff:62:62:9b:b7:0c:f5:ec:8e:e1:8b:8e:0d:ea:d1:
                    20:6b:55:89:51:5b:d5:77:60:bc:4f:a4:de:13:88:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:C7:33:B4:F0:3C:85:CC:DC:0E:42:BD:BE:64:0C:DA:4A:15:71
            X509v3 Authority Key Identifier:
                keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:6d:36:f7:27:22:2b:72:06:3a:8e:fe:2d:a6:54:79:ff:
         0d:1a:1a:43:09:04:e4:ff:53:8a:d7:e6:ca:00:10:ab:d8:87:
         38:2f:c7:d5:c2:a2:68:d5:cd:b0:e9:d9:ef:ad:d0:15:5c:ec:
         be:65:31:8f:10:56:c0:4d:cb:ed:8b:51:9d:f0:ad:c6:f8:9d:
         9a:29:52:1d:49:7d:86:9c:8c:be:ff:49:03:bd:4b:4e:97:b0:
         46:45:54:93:b8:b8:95:e9:9b:a6:d7:a1:05:ad:90:e4:29:ff:
         ed:0a:99:d6:b0:66:2e:02:c6:1a:f4:64:1a:05:de:ec:2f:8d:
         1c:8a:e8:f7:22:ea:f0:49:29:56:f1:46:d8:40:18:6a:c3:fe:
         6f:bc:4b:4b:ca:8d:39:91:f8:d4:93:4d:8e:4b:56:8e:60:9d:
         c1:8a:74:9c:01:3e:69:d9:cb:ac:14:03:c8:f2:89:ec:ea:3a:
         66:b1:7e:b9:1b:4d:c4:d4:9c:91:c4:36:ed:c0:6a:9d:99:e6:
         b2:b5:a2:9a:55:fe:7f:a9:75:f2:9d:da:5f:39:1e:17:89:1e:
         4f:92:fc:8e:44:08:ad:7c:8a:93:be:08:2d:b2:1b:22:a1:40:
         fd:84:72:ec:c0:22:ea:66:c1:87:14:8d:46:2e:ea:04:c9:ca:
         9c:8b:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:17:32 2026 by rpki-client