Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
File:                     1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft (raw, json)
Hash identifier:          W2jCau/fg54ihmH4sDPXiE7+aiaqa35HU7xlxG1yLw4=
Subject key identifier:   CA:D2:D3:09:BF:C6:7F:BB:BF:0A:7C:1F:E5:76:4E:5B:8D:22:56:EA
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       1AD61E320B9A9BFC5B73DE3ADDCE00F7237592E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
Manifest number:          12
Signing time:             Fri 30 May 2025 19:55:12 +0000
Manifest this update:     Fri 30 May 2025 19:50:12 +0000
Manifest next update:     Sat 31 May 2025 21:13:12 +0000
Files and hashes:         1: 3133382e3231392e3135302e302f32342d3234203d3e20323632383137.roa (hash: MviJ8sSxr8z29TxzVNQUzTJfWYAWDsv8v85J6fMbBF0=)
                          2: 3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa (hash: pd9RaRDkrF9svbMNlNcdk94V0y/ZvODFWsZCf3ojpS0=)
                          3: 3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa (hash: 02xQs6G4BVN+3aFqlQTdEO08OXbFNBIFYNVx41rJMZQ=)
                          4: 3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa (hash: GWBMZonJR+8/h3IkuaoB5J2cooymJjRsyrI1nOKhkr8=)
                          5: 3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa (hash: 4YpLCT8GpOUpx6iKrWcbQEidcutFAglFDahN3X30fyM=)
                          6: 323830343a323765303a3a2f33322d3332203d3e20323632383137.roa (hash: sGsVVyU4zZgJnSxrCWVqZxvQBhBPhxCzp/4NIXd+hzc=)
                          7: 1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl (hash: CNB5zIWsmXLO0EKKo8QA6/a/OPC7VbLaE1g9FDcY+0g=)
                          8: 3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa (hash: McKpGZFhLhfzGXV5I9qvM3aY5XBwFAFFTcwhRjqD0aE=)
                          9: 3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa (hash: lTW7K/DZiSYKWIqLUOK0gqw1MBqLb1hbCG8sJbp/vn4=)
                          10: 3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa (hash: SDlK5X9qh5vMur24oJitJZ9ntDFuQi/5WO2zeem8/C4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d6:1e:32:0b:9a:9b:fc:5b:73:de:3a:dd:ce:00:f7:23:75:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 30 19:50:12 2025 GMT
            Not After : May 31 21:13:12 2025 GMT
        Subject: CN=CAD2D309BFC67FBBBF0A7C1FE5764E5B8D2256EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:46:a6:19:40:48:da:cc:c8:a9:2d:70:95:
                    61:85:ce:e3:d3:b6:96:2d:33:c7:ab:f1:15:f7:34:
                    46:51:d6:23:1a:6b:54:22:2d:32:ce:0b:00:03:11:
                    d6:38:15:16:e4:6b:58:b1:ac:c2:42:6b:24:99:58:
                    ad:e1:1c:2a:d7:c8:a4:a4:c8:0b:8a:b7:36:7a:d4:
                    07:5b:44:58:d3:e4:71:fd:d2:6d:14:d3:2d:6c:25:
                    9a:62:f9:06:e7:07:d6:a2:53:e6:b1:6f:28:13:73:
                    32:33:d5:7b:c5:af:9c:a8:5b:b5:94:90:15:42:3a:
                    d2:e7:70:2c:21:9d:1e:31:3a:6c:e4:65:52:d9:27:
                    e4:33:b7:27:ad:20:15:00:b2:4e:b2:7b:59:bf:c2:
                    e4:72:cc:9c:ed:25:9f:4a:6a:70:14:9f:30:1c:d8:
                    6f:3f:55:86:f4:47:f7:55:43:20:51:ec:7d:81:8d:
                    dc:b6:b2:55:ea:68:73:c7:0b:bd:60:31:aa:ba:f8:
                    81:88:5f:cf:aa:6f:c2:92:b1:0e:9e:27:0f:97:e5:
                    e4:70:ed:8d:05:57:1e:3e:8a:68:db:b2:18:ef:cf:
                    85:1c:27:69:65:8d:c1:c2:0d:96:6a:01:30:05:fc:
                    f5:d4:11:28:0a:e0:ae:b6:44:37:d9:f6:fe:2e:86:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:D3:09:BF:C6:7F:BB:BF:0A:7C:1F:E5:76:4E:5B:8D:22:56:EA
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:28:ec:98:79:93:71:c3:fd:ea:69:ed:dc:59:42:5d:37:
         6e:ed:29:3e:9c:86:07:7b:32:cb:bd:ac:4b:6f:1d:d1:81:3f:
         19:1e:f8:a4:f9:ff:8b:e4:cc:d0:24:02:4b:52:cd:54:18:ed:
         69:4c:12:2b:a7:38:f9:d4:c5:ca:6a:cd:36:e4:b3:7c:b0:c0:
         bf:b9:b7:f4:49:e9:83:2c:52:e6:c9:fa:e2:05:35:20:08:4c:
         45:d9:33:f9:97:36:87:6c:2c:0b:dd:32:14:22:dd:a2:5a:a6:
         48:94:a8:11:42:67:7c:cd:c5:da:95:b5:a9:0f:0d:e2:7f:6a:
         c9:a7:e0:b0:51:fd:35:90:61:7f:76:67:68:df:5d:2e:3d:b1:
         73:87:de:38:d6:1a:df:76:af:99:4a:be:46:21:05:92:14:72:
         28:e9:d8:ba:a4:72:7d:12:8a:05:cf:aa:59:d1:fd:31:86:9d:
         56:a2:4b:ff:f2:29:d1:fe:d1:f3:27:1e:bc:d6:79:30:cc:d2:
         08:df:7f:95:04:c9:c6:8f:81:ab:3c:f7:78:81:0b:b1:24:9e:
         1c:31:0d:7a:c9:ad:05:23:a3:09:d2:70:33:ed:b4:bc:e0:2f:
         02:3d:bc:05:b6:70:da:4b:dd:34:5b:80:41:52:4c:30:4f:5c:
         53:99:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:31:04 2025 by rpki-client