Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.mft
File:                     296427C6A97F26F711858827E613168D5D5837B7.mft (raw, json)
Hash identifier:          r7NQb0/jBF7kkhDFAEaMGPQNau7lltB4owBH7ulRCM4=
Subject key identifier:   23:EC:B7:E0:8A:E4:44:1F:00:21:B5:A1:38:FE:D2:4D:6D:6E:FF:CE
Authority key identifier: 29:64:27:C6:A9:7F:26:F7:11:85:88:27:E6:13:16:8D:5D:58:37:B7
Certificate issuer:       /CN=296427C6A97F26F711858827E613168D5D5837B7
Certificate serial:       2CC4BA6687EEC78434BA5677140909989D22D0CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296427C6A97F26F711858827E613168D5D5837B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.mft
Manifest number:          C4
Signing time:             Wed 19 Aug 2026 04:19:32 +0000
Manifest this update:     Wed 19 Aug 2026 04:14:32 +0000
Manifest next update:     Thu 20 Aug 2026 05:13:32 +0000
Files and hashes:         1: 3134332e3230382e3234342e302f32322d3332203d3e20323635313337.roa (hash: r/eDd1EkRcrAEH1ID9bCnDbhQlRjH0RcIIu+Ma2i0Eo=)
                          2: 296427C6A97F26F711858827E613168D5D5837B7.crl (hash: VxqHcL98Ll8n2zHm8+1soiDsnSFFhPsJ+IUoMmcMPr0=)
                          3: 323830343a326232343a3a2f33322d313238203d3e20323635313337.roa (hash: ENhP6iQMo8Y3NzYciuZJcksmdhIQ0zgxoc2Xpnu8vRk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c4:ba:66:87:ee:c7:84:34:ba:56:77:14:09:09:98:9d:22:d0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296427C6A97F26F711858827E613168D5D5837B7
        Validity
            Not Before: Aug 19 04:14:32 2026 GMT
            Not After : Aug 20 05:13:32 2026 GMT
        Subject: CN=23ECB7E08AE4441F0021B5A138FED24D6D6EFFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:80:59:31:10:92:f3:79:1a:5b:1b:93:a0:
                    c1:2b:36:a6:ca:ba:1e:93:b5:91:3c:b6:b1:5c:71:
                    f9:74:e9:f6:29:8c:e6:63:c4:10:3d:55:23:86:bd:
                    c5:e5:34:2d:97:c6:15:f8:02:84:dc:b1:8f:9e:02:
                    c0:18:ac:63:2f:94:48:3f:0a:62:6c:86:35:b6:d2:
                    b7:15:1a:d5:54:83:50:46:a1:ed:28:08:44:9d:58:
                    4a:97:82:7a:38:e8:2d:eb:90:1d:38:c6:85:d5:80:
                    1c:77:f2:96:e7:b3:3a:ae:61:3d:1a:13:11:9d:46:
                    d3:ef:e8:b1:0c:bc:cc:95:04:81:0d:c8:98:4a:90:
                    fc:0a:8b:80:c2:3f:63:34:95:f4:e2:98:65:8e:07:
                    b6:2c:ae:f7:8c:0a:cb:eb:7f:17:57:4e:fa:43:71:
                    3e:7b:ca:63:f0:8c:a7:ca:e7:a6:23:70:08:9e:c5:
                    c0:e1:6c:e4:be:58:7a:35:66:f7:58:70:60:74:b6:
                    66:7d:89:43:6c:c0:f0:4b:3d:ac:be:c2:4d:42:b2:
                    91:d9:9a:26:a8:7f:d0:62:eb:0d:8a:d4:f4:2c:71:
                    ab:cf:2f:fd:66:3f:0f:cd:8c:74:bf:df:dd:46:ca:
                    eb:8b:1b:4a:7d:39:ce:ee:e3:43:b8:da:15:c0:e7:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:B7:E0:8A:E4:44:1F:00:21:B5:A1:38:FE:D2:4D:6D:6E:FF:CE
            X509v3 Authority Key Identifier:
                keyid:29:64:27:C6:A9:7F:26:F7:11:85:88:27:E6:13:16:8D:5D:58:37:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296427C6A97F26F711858827E613168D5D5837B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:06:35:a2:d8:ff:9b:23:dc:1c:d1:a2:6f:42:c8:49:34:48:
         22:7c:85:18:af:db:e1:0b:1a:e9:ee:6b:01:55:27:51:21:98:
         3c:ca:3b:88:a7:53:58:ae:0e:a1:90:1f:ee:d7:bb:bd:31:06:
         b4:de:18:09:4d:e4:2a:89:98:c0:0d:47:5c:28:a5:9b:c3:b3:
         1e:a5:3d:86:9b:a2:1d:4b:62:b7:7f:39:b8:17:a9:84:ee:a9:
         64:5d:c8:70:a8:46:d0:cc:0c:ee:4d:42:06:a3:9e:21:e5:6c:
         61:84:16:c5:96:54:57:1c:66:b2:67:04:c1:da:64:63:60:ec:
         c8:ba:ad:96:85:1a:c2:83:f0:25:54:61:f3:b0:79:83:f4:9e:
         77:66:67:ca:3e:6f:8b:48:a8:c3:c4:c7:19:46:0f:cf:50:f6:
         6d:44:41:db:3f:db:32:2b:4c:a9:ca:bb:5d:24:6c:32:89:31:
         22:5f:9c:e8:5d:d5:90:41:1d:7d:34:a3:6c:01:ad:2c:f4:dd:
         2c:9a:d5:b4:bc:37:ea:db:3c:98:e5:90:3f:04:91:a7:42:95:
         5c:3c:c8:f4:42:12:e9:9d:07:3d:d0:3b:8f:93:e0:6d:96:51:
         ff:95:79:4f:8d:af:17:1a:6c:e7:df:56:2e:05:6a:c6:9b:01:
         17:e9:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----