Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft
File:                     AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft (raw, json)
Hash identifier:          4z305KmexQYv0rDt+hi1q2+CW/xTO6AE+hsQ3JpY/wc=
Subject key identifier:   1D:E3:E4:EF:43:BC:A1:8D:7B:DD:B8:73:5B:EE:80:14:1D:14:59:F7
Authority key identifier: AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6
Certificate issuer:       /CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
Certificate serial:       65F946A05603D5ED75FD61CF506D51D9EBA73853
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft
Manifest number:          012F
Signing time:             Wed 02 Apr 2025 19:44:01 +0000
Manifest this update:     Wed 02 Apr 2025 19:39:01 +0000
Manifest next update:     Thu 03 Apr 2025 22:14:01 +0000
Files and hashes:         1: AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl (hash: 0WN8lv+43q6axrj8cQzg/yzxLbwzczM7FhXmJ30zbFk=)
                          2: 323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (hash: ksFtokBA6mRr4HQ5CEpOHlzmFfkthndiwd+GOqVGoc4=)
                          3: 34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (hash: kKVMRuc29JaRp7AtWdHLGQmD2SLTZvYD+53MTtlwoBY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:46:a0:56:03:d5:ed:75:fd:61:cf:50:6d:51:d9:eb:a7:38:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6
        Validity
            Not Before: Apr  2 19:39:01 2025 GMT
            Not After : Apr  3 22:14:01 2025 GMT
        Subject: CN=1DE3E4EF43BCA18D7BDDB8735BEE80141D1459F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:45:8a:72:f6:94:31:26:75:41:dc:32:9a:
                    3a:dc:34:c2:c0:42:40:82:ca:92:f8:06:44:75:26:
                    2c:18:c3:c9:af:66:a3:c0:90:4e:f6:8c:79:c8:07:
                    90:7e:05:b3:4b:9c:a2:f1:f0:ff:17:ee:bc:47:3f:
                    44:74:a4:9b:f2:d7:2c:83:11:0f:ea:48:15:f6:82:
                    db:da:a2:18:27:3a:b6:88:74:04:e6:fc:4d:6f:8b:
                    3c:b9:18:5c:5d:40:87:a3:ac:2b:d6:c9:73:58:c4:
                    be:70:56:d4:83:65:f5:60:13:7d:ee:6f:34:d0:c0:
                    d6:de:ca:9e:b2:57:b0:82:8a:91:60:cf:5d:da:86:
                    cd:85:3c:8d:1d:2f:45:e6:57:02:d7:57:3b:75:72:
                    cd:a1:cd:5e:20:99:6e:d7:5d:db:c4:73:3d:1f:2d:
                    7b:f2:2e:f1:e0:cc:7b:10:fd:8b:ec:7e:83:7f:d6:
                    ff:34:04:b2:98:86:96:ab:99:86:cb:d6:77:17:ff:
                    e7:c4:0b:1a:3f:5e:d6:ad:f7:0f:58:3a:84:0f:23:
                    db:2a:75:2a:1a:83:05:64:ab:92:31:28:c9:8c:8e:
                    69:76:44:bd:4f:77:79:3a:ea:5b:37:4c:7b:ad:3d:
                    be:e2:21:2a:7b:9c:20:ce:f7:2b:d7:c5:d6:2b:7e:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E3:E4:EF:43:BC:A1:8D:7B:DD:B8:73:5B:EE:80:14:1D:14:59:F7
            X509v3 Authority Key Identifier:
                keyid:AD:6D:43:80:AF:CD:C7:5E:B0:1F:AA:58:AA:53:B5:19:81:D6:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/AD6D4380AFCDC75EB01FAA58AA53B51981D6FAA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:35:db:6e:55:36:92:4c:fb:81:10:67:95:83:f1:8f:62:
         81:9a:a0:53:a5:27:91:9c:5f:72:6b:36:44:5f:75:3e:a1:33:
         5d:cf:9c:7b:b7:20:98:1d:c2:b7:83:ce:ae:ac:2c:db:a6:82:
         ab:74:4d:c3:be:b9:97:0e:fd:4a:90:6e:83:e3:64:1f:df:7a:
         f7:e3:a6:2c:08:98:d6:6f:dc:13:a6:52:4f:0d:0a:fd:1c:b3:
         dd:cf:c1:3c:7b:d2:b3:09:fb:55:36:4b:3a:40:37:8e:34:fa:
         f6:62:0c:a4:fb:6d:cb:e4:7c:fd:26:a3:0b:f1:ed:34:3d:44:
         55:01:5e:56:9b:be:33:30:7a:67:41:e7:40:9f:84:91:e4:db:
         9f:ae:8b:87:35:89:67:e0:b1:14:ba:97:84:70:15:a8:ee:b5:
         a8:03:32:1a:9c:cd:1b:d4:c3:46:f1:5c:6f:c0:03:5f:5e:69:
         8e:a2:53:ea:67:64:22:21:eb:c1:c2:30:ef:2e:3e:1e:57:87:
         d8:5c:11:4f:2c:e1:e4:aa:41:dd:60:30:85:73:f0:2f:01:f3:
         6a:b3:19:2d:33:23:da:d2:4f:ae:55:2e:a0:48:0c:b2:7b:a9:
         bc:5e:09:39:da:6a:85:ef:2d:16:6d:ed:e7:a5:dd:40:8d:d5:
         20:60:1d:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZflGoFYD1e11/WHPUG1R2eunOFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ2RDQzODBBRkNEQzc1RUIwMUZBQTU4QUE1M0I1MTk4
MUQ2RkFBNjAeFw0yNTA0MDIxOTM5MDFaFw0yNTA0MDMyMjE0MDFaMDMxMTAvBgNV
BAMTKDFERTNFNEVGNDNCQ0ExOEQ3QkREQjg3MzVCRUU4MDE0MUQxNDU5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDekEWKcvaUMSZ1QdwymjrcNMLA
QkCCypL4BkR1JiwYw8mvZqPAkE72jHnIB5B+BbNLnKLx8P8X7rxHP0R0pJvy1yyD
EQ/qSBX2gtvaohgnOraIdATm/E1vizy5GFxdQIejrCvWyXNYxL5wVtSDZfVgE33u
bzTQwNbeyp6yV7CCipFgz13ahs2FPI0dL0XmVwLXVzt1cs2hzV4gmW7XXdvEcz0f
LXvyLvHgzHsQ/YvsfoN/1v80BLKYhparmYbL1ncX/+fECxo/Xtat9w9YOoQPI9sq
dSoagwVkq5IxKMmMjml2RL1Pd3k66ls3THutPb7iISp7nCDO9yvXxdYrfkUZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHePk70O8oY173bhzW+6AFB0UWfcwHwYDVR0j
BBgwFoAUrW1DgK/Nx16wH6pYqlO1GYHW+qYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpKaG1zdTF3YzRNbXN1SktzVDlWVVc0REtIVWtaQm1EWXNGQ1VLbVdh
WHcvMC9BRDZENDM4MEFGQ0RDNzVFQjAxRkFBNThBQTUzQjUxOTgxRDZGQUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENkQ0MzgwQUZDREM3NUVC
MDFGQUE1OEFBNTNCNTE5ODFENkZBQTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QXpKaG1zdTF3YzRNbXN1SktzVDlWVVc0REtIVWtaQm1EWXNGQ1VLbVdhWHcvMC9B
RDZENDM4MEFGQ0RDNzVFQjAxRkFBNThBQTUzQjUxOTgxRDZGQUE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFrg1225VNpJM+4EQZ5WD8Y9igZqgU6UnkZxfcms2RF91PqEzXc+ce7cgmB3C
t4POrqws26aCq3RNw765lw79SpBug+NkH9969+OmLAiY1m/cE6ZSTw0K/Ryz3c/B
PHvSswn7VTZLOkA3jjT69mIMpPtty+R8/SajC/HtND1EVQFeVpu+MzB6Z0HnQJ+E
keTbn66LhzWJZ+CxFLqXhHAVqO61qAMyGpzNG9TDRvFcb8ADX15pjqJT6mdkIiHr
wcIw7y4+HleH2FwRTyzh5KpB3WAwhXPwLwHzarMZLTMj2tJPrlUuoEgMsnupvF4J
Odpqhe8tFm3t56XdQI3VIGAd6Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:05:58 2025 by rpki-client