Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
File:                     38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft (raw, json)
Hash identifier:          K2QYaXQcsz5779TrJTyHxwOSGXhD8miyTMYdnjnGBiw=
Subject key identifier:   44:79:12:2D:B0:82:DD:D7:B7:77:99:8C:E9:EB:F4:31:BC:86:4E:DF
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Certificate issuer:       /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial:       14ECFDB0C435D9488F6A98F6F3F9E3DCC6F154FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
Manifest number:          6A
Signing time:             Wed 19 Feb 2025 16:00:02 +0000
Manifest this update:     Wed 19 Feb 2025 15:55:02 +0000
Manifest next update:     Thu 20 Feb 2025 16:46:02 +0000
Files and hashes:         1: 323830343a313336383a3a2f33322d3333203d3e20323632383038.roa (hash: wY7IBJilVxaHaAeWBXuRTTzn6Jn64HvP56jBgIU/mNo=)
                          2: 3137372e33372e3131322e302f32302d3234203d3e20323632383038.roa (hash: wo7iMms5QyjQJvf2mrbKp8k+kqeFVK9NwwspYTuAXk4=)
                          3: 38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl (hash: PqlA9eK/coGVXuCzmoqYQGujc3gKFTYJscsPCh6loxU=)
                          4: 3138392e39302e3131322e302f32302d3234203d3e20323632383038.roa (hash: ndyFK+XU7uj1QTu17hdu0xnXOeYalPR3x5+UYwlU1EM=)
                          5: 3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa (hash: 2twVqsdG2wu/HjJ89P6hxEHdxAIdR+6q6Y4oBRgAXfY=)
                          6: 3137372e37352e33322e302f32312d3234203d3e20323632383038.roa (hash: Gpm7vg0IqsUMNamjF1VhE17LOMyM+TJfj9oDBkuvlTw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ec:fd:b0:c4:35:d9:48:8f:6a:98:f6:f3:f9:e3:dc:c6:f1:54:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Validity
            Not Before: Feb 19 15:55:02 2025 GMT
            Not After : Feb 20 16:46:02 2025 GMT
        Subject: CN=4479122DB082DDD7B777998CE9EBF431BC864EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:47:2a:b9:23:10:69:82:4c:0e:7c:61:11:
                    e8:0c:e7:75:69:0d:d7:ac:fc:d5:e2:f5:1c:cd:d4:
                    b2:be:ae:7e:f5:60:18:b7:2a:e8:86:f9:ff:7a:9a:
                    e7:7b:ce:ca:2d:40:51:cb:f2:a8:f7:da:2f:1b:11:
                    5c:c0:49:7a:95:73:1a:ef:8d:8c:8d:ea:de:99:7b:
                    cd:2e:02:20:8b:5c:4d:d5:6c:9b:3c:89:84:fe:36:
                    d5:bd:c5:b3:0b:c5:b1:5b:e3:5e:4e:4d:c1:3f:cb:
                    82:6f:39:2c:6c:48:d2:1c:e2:d3:53:a2:d3:b5:e9:
                    4c:3b:87:06:b2:55:f8:46:82:ba:4d:28:16:90:63:
                    89:3b:31:8e:28:95:98:15:cc:4e:4d:cc:34:70:d5:
                    9b:bf:c9:ef:f0:55:05:64:71:4f:39:4c:57:fa:44:
                    e4:f5:ef:55:9b:ba:c1:cd:98:b9:82:a1:c9:bb:6c:
                    e8:8d:8b:eb:3d:92:d8:37:9c:ca:c9:68:eb:be:a3:
                    4d:4c:a4:98:22:b1:bc:f1:14:3d:d2:eb:ce:29:db:
                    c3:d5:70:d4:bb:99:79:1c:9a:91:ce:23:22:dd:2b:
                    31:de:ea:e1:4b:a8:3c:46:24:cb:92:bb:8b:7b:c4:
                    6f:d6:be:ba:d2:3d:66:84:0c:10:45:29:43:07:85:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:79:12:2D:B0:82:DD:D7:B7:77:99:8C:E9:EB:F4:31:BC:86:4E:DF
            X509v3 Authority Key Identifier:
                keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:88:dd:40:56:40:5d:1e:74:3d:76:d7:d9:56:d6:04:c8:
         93:0b:37:33:c1:49:30:2a:b6:9c:71:83:a9:81:e1:0e:fc:ec:
         d2:80:e0:a5:aa:72:85:a7:a3:59:88:52:58:e0:e6:23:cb:bc:
         1f:23:d7:e2:53:f0:8b:c6:d3:25:ca:cc:70:86:d6:e9:84:32:
         fd:b4:77:54:f1:da:83:73:c9:80:02:ca:8d:d6:19:78:17:5a:
         25:4c:39:0d:9e:17:05:fa:25:3e:7a:ec:10:f7:78:52:6e:fa:
         bc:55:cb:a1:a1:9d:81:2d:18:f1:5b:df:e6:53:9a:0b:43:3e:
         a0:71:b8:dd:e8:7a:1c:18:63:89:bd:67:ae:8c:bc:8d:8d:f5:
         89:90:b9:bf:23:73:f4:12:28:a0:76:00:a5:62:c7:74:6e:82:
         a0:ea:51:4d:f4:ef:9f:c1:20:43:41:d5:5a:0b:01:66:aa:3d:
         0c:f8:14:f8:90:e8:9c:fa:db:59:ee:44:52:66:84:5a:15:b6:
         36:a8:d1:4e:2f:97:95:b2:ab:02:e8:0b:d3:32:0a:ec:36:05:
         08:26:8d:e5:ee:f5:9f:6f:47:71:f6:28:b7:c5:ea:b5:61:1e:
         05:74:82:cd:ac:68:1a:4c:81:11:40:5e:b7:91:ac:a8:09:ea:
         81:bc:47:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFOz9sMQ12UiPapj28/nj3MbxVP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBNzYzRUFBMkY1Nzg3RTAxMEE3QkVGNUU2OUQ4NkQ3
REYxRDcwMjAeFw0yNTAyMTkxNTU1MDJaFw0yNTAyMjAxNjQ2MDJaMDMxMTAvBgNV
BAMTKDQ0NzkxMjJEQjA4MkRERDdCNzc3OTk4Q0U5RUJGNDMxQkM4NjRFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNkcquSMQaYJMDnxhEegM53Vp
Ddes/NXi9RzN1LK+rn71YBi3KuiG+f96mud7zsotQFHL8qj32i8bEVzASXqVcxrv
jYyN6t6Ze80uAiCLXE3VbJs8iYT+NtW9xbMLxbFb415OTcE/y4JvOSxsSNIc4tNT
otO16Uw7hwayVfhGgrpNKBaQY4k7MY4olZgVzE5NzDRw1Zu/ye/wVQVkcU85TFf6
ROT171WbusHNmLmCocm7bOiNi+s9ktg3nMrJaOu+o01MpJgisbzxFD3S684p28PV
cNS7mXkcmpHOIyLdKzHe6uFLqDxGJMuSu4t7xG/WvrrSPWaEDBBFKUMHhaUdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURHkSLbCC3de3d5mM6ev0MbyGTt8wHwYDVR0j
BBgwFoAUOKdj6qL1eH4BCnvvXmnYbX3x1wIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8zOEE3NjNFQUEyRjU3ODdFMDEwQTdCRUY1RTY5RDg2RDdERjFENzAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4QTc2M0VBQTJGNTc4N0Uw
MTBBN0JFRjVFNjlEODZEN0RGMUQ3MDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhWTWgvMC8z
OEE3NjNFQUEyRjU3ODdFMDEwQTdCRUY1RTY5RDg2RDdERjFENzAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaWOI3UBWQF0edD1219lW1gTIkws3M8FJMCq2nHGDqYHhDvzs0oDgpapyhaej
WYhSWODmI8u8HyPX4lPwi8bTJcrMcIbW6YQy/bR3VPHag3PJgALKjdYZeBdaJUw5
DZ4XBfolPnrsEPd4Um76vFXLoaGdgS0Y8Vvf5lOaC0M+oHG43eh6HBhjib1nroy8
jY31iZC5vyNz9BIooHYApWLHdG6CoOpRTfTvn8EgQ0HVWgsBZqo9DPgU+JDonPrb
We5EUmaEWhW2NqjRTi+XlbKrAugL0zIK7DYFCCaN5e71n29HcfYot8XqtWEeBXSC
zaxoGkyBEUBet5GsqAnqgbxHxQ==
-----END CERTIFICATE-----