Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft
File:                     08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft (raw, json)
Hash identifier:          zVeV3h+P/1gEYndU6/Eu4TPfD6SIcZgWidgq0FRM6TI=
Subject key identifier:   FA:5E:70:44:38:ED:60:F9:56:C2:83:85:8B:50:04:74:E1:4B:80:2F
Authority key identifier: 08:23:3B:AD:A4:DD:9C:E0:DD:B9:3B:D0:A4:02:AD:99:04:A2:AE:8A
Certificate issuer:       /CN=08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A
Certificate serial:       48284F859B0DAD3285D1697162FC3F63CACDB6C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft
Manifest number:          05
Signing time:             Sun 16 Feb 2025 23:06:28 +0000
Manifest this update:     Sun 16 Feb 2025 23:01:28 +0000
Manifest next update:     Tue 18 Feb 2025 01:23:28 +0000
Files and hashes:         1: 3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa (hash: srD9zUjU6bJdzkyTqQoNhk/e0RP4+BJM64mwYYLWUwM=)
                          2: 323830343a326163383a633030303a3a2f33342d3334203d3e20323635313138.roa (hash: Ox2QBUsIhUKk0kExCRuaH5QsfK9XkKC8GSebh3JuAWs=)
                          3: 323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa (hash: 3Q5QD8wCTS6LXCgDleqRa0/6Ug+wtZWIEfhZbs9QCsc=)
                          4: 323830343a326163383a343030303a3a2f33342d3334203d3e20323635313138.roa (hash: LTEDgAUPs7BwnrNlFc1Wgnr6XqhS/BDn8gXNvVdTdbc=)
                          5: 323830343a326163383a3a2f33322d3332203d3e20323635313138.roa (hash: 2dGvfTR+0EfBQkigMvBcHY2ZOs7VTuZvAmqbY2Bzf00=)
                          6: 08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.crl (hash: H9JqYSaiz2q7KRAZ7oQKm1ctQMr6jpvnBV18FwAYGlo=)
                          7: 323830343a326163383a383030303a3a2f33332d3333203d3e20323635313138.roa (hash: QMTxN5OlUhzn35NCIJeBAzYlH3okLXenx0mnuX4NhPI=)
                          8: 3134332e3230382e3138362e302f32342d3234203d3e20323635313138.roa (hash: c9VNpyVvUuPmgSDz5/nQxDG25CIuAutyA1pvDRhitn0=)
                          9: 323830343a326163383a3a2f33332d3333203d3e20323635313138.roa (hash: SQnS9oBEPSiecd0KUHa3JCkyR2/IFYfA/ro6jmh6pp4=)
                          10: 323830343a326163383a3a2f33342d3334203d3e20323635313138.roa (hash: ep2E2n2/f4Gn7xnC8+bW0xS/psABw6tv3xq92YHzMKE=)
                          11: 3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa (hash: lTBh7vy92Pz2lQ4tV0TR2W++yMZP+jnk7rg6jOaNQtI=)
                          12: 3134332e3230382e3138342e302f32332d3233203d3e20323635313138.roa (hash: p1w0+Z/cbDsgmNhSHPmzeRB8+nc6G4AaKPS5uY5A9hs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:28:4f:85:9b:0d:ad:32:85:d1:69:71:62:fc:3f:63:ca:cd:b6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A
        Validity
            Not Before: Feb 16 23:01:28 2025 GMT
            Not After : Feb 18 01:23:28 2025 GMT
        Subject: CN=FA5E704438ED60F956C283858B500474E14B802F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:fc:8e:f1:f5:c9:40:67:fe:d1:07:ac:ab:
                    65:c7:60:d6:8d:42:fc:e7:46:51:4e:c5:61:26:19:
                    f8:22:41:1d:da:ff:ff:e9:49:bb:9f:39:02:c3:4e:
                    af:0f:c1:87:88:23:fb:73:ff:4e:0e:a4:54:e5:96:
                    fd:55:1d:64:57:d7:c7:1d:d3:96:3e:fd:fb:96:07:
                    2c:51:e6:20:11:60:2e:fd:0a:3e:1e:8e:3d:09:8f:
                    a3:b0:1b:0b:f6:76:d7:4c:8b:5b:c1:27:d7:a5:89:
                    b7:20:1f:09:5f:70:52:84:a2:a3:ca:e3:90:71:52:
                    53:d6:8b:79:42:ac:4f:92:72:42:09:77:98:50:14:
                    dc:dd:86:ef:75:e4:01:cd:53:67:d5:ba:dd:c5:23:
                    ed:40:a4:13:76:23:62:77:09:b7:73:22:f4:01:73:
                    51:f1:a2:30:bd:c3:f2:7c:d0:ff:4b:73:4a:1d:17:
                    f3:21:59:4f:0e:6f:71:f9:70:65:85:5d:b0:36:86:
                    a5:df:e9:c5:d2:ac:6d:36:2c:8c:6e:49:2a:18:08:
                    7f:87:0f:09:b4:7d:e5:0a:88:15:06:10:75:88:42:
                    67:c9:d7:79:81:c4:8a:67:d9:1c:c1:d9:e0:d8:46:
                    42:35:12:a3:6c:b6:d2:d1:3d:34:60:66:f7:6b:83:
                    a4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:70:44:38:ED:60:F9:56:C2:83:85:8B:50:04:74:E1:4B:80:2F
            X509v3 Authority Key Identifier:
                keyid:08:23:3B:AD:A4:DD:9C:E0:DD:B9:3B:D0:A4:02:AD:99:04:A2:AE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/08233BADA4DD9CE0DDB93BD0A402AD9904A2AE8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:e8:e5:72:91:1b:4f:5d:72:d5:a9:2a:ef:c5:12:20:8f:
         95:06:cf:03:48:1f:7b:9a:f4:58:d2:dd:73:fc:fc:8b:bf:fc:
         06:7e:24:d8:23:ea:ad:0f:b3:03:e6:f6:69:60:aa:3b:8f:b7:
         0a:a9:7a:f1:08:f7:1c:54:59:3d:1a:81:39:d6:c9:26:93:26:
         f4:5e:18:5b:d4:11:3f:49:a1:7a:62:99:bc:a8:54:81:ac:89:
         c6:36:66:78:88:91:10:f9:22:5c:cb:7b:8c:62:d0:42:7a:6b:
         e9:11:c5:cc:20:0d:6d:f5:a5:da:e2:e5:b3:0f:39:1a:7d:d3:
         16:61:51:60:ba:d6:80:cd:c8:38:43:6c:bd:5f:27:81:1f:55:
         c4:63:8a:17:5f:38:bb:73:78:76:ed:c7:23:75:d6:3b:07:49:
         60:1f:82:e6:58:17:8e:60:25:1c:52:66:a9:8f:af:f2:33:79:
         46:43:03:b9:57:6e:9b:bb:4c:ec:62:63:ea:06:76:b5:55:c4:
         e6:1a:89:f0:f8:d4:f5:28:14:fe:57:fc:7f:17:66:b5:64:de:
         9b:00:7c:22:65:c7:c8:bd:b2:9f:8b:9d:9f:54:26:c4:c3:44:
         bc:f3:8b:08:9c:c7:b2:58:9f:1f:34:9b:d5:4f:4b:74:88:45:
         5c:d3:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:25 2025 by rpki-client