Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.mft
File:                     C8A922FEFF2441B1F9212FFA81223123A32DBE79.mft (raw, json)
Hash identifier:          RmyqkvVwVu/sa4mOrkT3NtxXFW064m+jTAtY2/NmfKk=
Subject key identifier:   A4:41:D7:4F:AF:C1:B3:E7:03:23:4D:98:13:F5:7B:79:BA:D9:0B:95
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Certificate issuer:       /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial:       5624565C1501CAC030AEB00250D5D6B9BCAF680C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.mft
Manifest number:          12
Signing time:             Sat 19 Apr 2025 20:19:48 +0000
Manifest this update:     Sat 19 Apr 2025 20:14:48 +0000
Manifest next update:     Sun 20 Apr 2025 22:02:48 +0000
Files and hashes:         1: C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl (hash: C7LCR4ymv2aHTpDO6bkVYkz1Qm3eBs4itz/bBRYGs4Q=)
                          2: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (hash: I/agZhjWdQWBZNLMiAL7BCUOFgulv5N6GbrTIjBV2BI=)
                          3: 323830343a373138303a343030303a3a2f33342d3334203d3e20323730373933.roa (hash: doqZIMKwi2LoCr03zJ44ycragIH3MkDwp7ukqzpW+5Q=)
                          4: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (hash: t8lyIGl6UGWFGtycW6DwCLY+0Sx2BB36+6n8sjjCVxo=)
                          5: 3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (hash: RIkxccfVdz53rAwS+uXD5NI/Ft8JF81AZl5zHHAle6c=)
                          6: 323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (hash: 8seZa3X7etMRg/+oRfK/zjopM5ZdLkL13PpHTBrlKgs=)
                          7: 3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa (hash: +tsdpXrMnBtwGLmCjhaol0NI+aA1kF0qdoxihjWhs+E=)
                          8: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (hash: 62KXqFT6fnrMKi2yf7oi02aompjItZrUaIv7ogD5Xys=)
                          9: 323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (hash: 6/zPw3J8SWAJUM9OedomcrVvVijx2yQyVPJCDpyZnHM=)
                          10: 3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (hash: YoWWAF8zPgRfE450en9SsMwoQZRmdsll7DdecqyEuXE=)
                          11: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (hash: tzwsqAnHggagJb5s4uRg7B0ujRQQ5XZzgn6/yabJWA0=)
                          12: 323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (hash: eAfqFHUwEQIPEF92lxLlZyjhvom1wuOg/r4R2gmoSYw=)
                          13: 323830343a373138303a383030303a3a2f33342d3334203d3e20323730373933.roa (hash: AeOe6/q2YEdZIhriMGpwgx0t6hQRDmgBq04UesE55Ow=)
                          14: 3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (hash: a+61yCLEBe05qOJu+167c0FJybtcd7p1Z6+vz2uEusA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:24:56:5c:15:01:ca:c0:30:ae:b0:02:50:d5:d6:b9:bc:af:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
        Validity
            Not Before: Apr 19 20:14:48 2025 GMT
            Not After : Apr 20 22:02:48 2025 GMT
        Subject: CN=A441D74FAFC1B3E703234D9813F57B79BAD90B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:bd:a3:fa:58:c0:61:ef:01:96:f7:6f:ab:
                    3b:86:04:ad:0e:69:6b:b6:13:c8:18:44:b7:82:be:
                    98:09:8d:76:c7:99:17:df:a5:10:f0:90:2e:33:a0:
                    a7:2a:a3:55:93:2a:7f:24:66:93:c4:3a:b7:1e:2b:
                    d6:1b:3f:fb:67:94:39:4b:6f:ab:51:fa:d0:5f:e9:
                    eb:40:4f:3c:b5:69:7f:fd:99:97:82:84:79:49:d1:
                    f4:e7:49:61:2d:fc:36:62:7c:7e:3a:0a:4c:f2:bb:
                    d6:d6:f2:22:cd:7e:ea:4e:fb:e3:7e:0b:19:0c:26:
                    5a:04:47:c6:a7:8a:c1:c6:35:d4:79:3b:d3:db:8b:
                    dc:a3:00:d6:45:70:f6:c6:07:8c:5b:10:24:ee:be:
                    43:94:f8:14:6c:44:2b:cc:96:03:88:66:19:30:f4:
                    3e:4f:21:5c:54:69:a7:f4:34:07:01:c8:2a:26:d8:
                    e8:4e:57:eb:6b:4d:7f:a0:29:88:a1:1a:24:45:7a:
                    04:dd:79:89:36:f5:c1:23:a3:06:7b:f1:91:33:c3:
                    d2:19:1d:7e:a1:ab:98:d1:c5:c5:45:6e:e4:3e:fa:
                    5c:8a:40:3e:00:f4:1a:ea:87:a5:26:13:34:4c:88:
                    74:a3:f8:6b:92:ec:50:78:55:98:fa:24:4e:3b:e0:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:D7:4F:AF:C1:B3:E7:03:23:4D:98:13:F5:7B:79:BA:D9:0B:95
            X509v3 Authority Key Identifier:
                keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:71:bf:3d:bb:6b:f1:ef:16:4c:97:b3:a6:e5:de:3c:ad:
         b5:22:90:21:2f:c1:7a:36:63:39:cf:7a:74:54:6a:09:de:a6:
         95:eb:57:60:12:ca:ce:13:45:57:48:c0:6c:ab:8d:32:c0:b5:
         df:b6:6a:2b:05:00:15:a9:6e:42:64:c2:c4:42:c6:7c:13:8a:
         39:f0:23:5b:a4:6b:64:09:6e:24:b1:de:f5:b6:e8:bd:f2:7d:
         4a:d9:24:dc:3b:63:99:b4:4c:4a:e9:3f:94:14:a6:c7:05:91:
         c3:73:bf:9c:00:dd:f1:12:f5:9c:88:cd:d7:f0:0f:ac:9e:42:
         84:23:2f:d6:33:22:10:f6:f6:3e:95:80:7a:cd:61:a2:fb:32:
         4f:d7:4f:89:ff:2b:ed:f0:e5:8e:06:d0:e9:76:1a:39:80:30:
         fb:88:ab:e5:46:75:24:25:66:c1:9e:f7:7e:90:68:8e:c0:3d:
         df:d7:39:ec:f8:19:f4:eb:08:4c:8d:e1:42:a0:87:89:f8:44:
         4f:13:ee:98:b7:80:a4:50:53:07:12:87:92:0f:58:07:7c:7c:
         09:8e:c4:32:20:28:28:e2:31:0b:14:65:a2:10:b9:ba:f4:da:
         d3:be:98:07:91:98:7b:9e:09:18:16:16:06:fe:f3:fd:9f:33:
         e2:79:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:44 2025 by rpki-client