Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft
File:                     3A9605B2DF9025F5056C61296B879441CB6D80F9.mft (raw, json)
Hash identifier:          RlErVL9vLebCGiu0iidqt6L8+ts9fGbbyzkpT88WLD4=
Subject key identifier:   F6:E7:73:B5:3A:4C:CF:86:1E:0A:45:2C:C7:9E:D8:4E:47:F1:3C:D7
Authority key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
Certificate issuer:       /CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Certificate serial:       2A4AAF826F7E4ECF69B6CFD8D43DAE519356D350
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft
Manifest number:          01F0
Signing time:             Thu 17 Apr 2025 09:06:00 +0000
Manifest this update:     Thu 17 Apr 2025 09:01:00 +0000
Manifest next update:     Fri 18 Apr 2025 10:59:00 +0000
Files and hashes:         1: 34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa (hash: hvjPCRa0okwbfDKtKHc0UnzsILuiXDkuRDSPBs8it6A=)
                          2: 3A9605B2DF9025F5056C61296B879441CB6D80F9.crl (hash: FCfTw/eC7fsZKLMJKbMK5Z8s66Lk4ZvKmhS5IOLi7ok=)
                          3: 323830343a353239383a3a2f33322d3334203d3e20323638353238.roa (hash: j+AtHVFyhIxGILDr7hJSYzAAlOEjQOTKdRfG1Ga6AFY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4a:af:82:6f:7e:4e:cf:69:b6:cf:d8:d4:3d:ae:51:93:56:d3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
        Validity
            Not Before: Apr 17 09:01:00 2025 GMT
            Not After : Apr 18 10:59:00 2025 GMT
        Subject: CN=F6E773B53A4CCF861E0A452CC79ED84E47F13CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:ad:66:00:a7:07:24:7f:e6:3e:c9:78:c9:
                    96:0d:ba:b9:23:fd:fd:51:8c:23:2c:25:43:81:9a:
                    97:81:36:bd:98:15:4a:bc:a6:33:de:cb:9c:81:dd:
                    e0:1d:57:28:cb:be:55:8d:fc:3e:e2:24:3c:46:63:
                    39:35:f3:0f:19:2d:60:f7:bb:d1:ff:a5:04:d5:25:
                    4a:e5:8d:40:1b:bb:2c:a4:6e:7e:4c:18:5e:53:3a:
                    01:ce:2b:ce:78:19:2e:cb:f4:ed:44:9a:08:a2:10:
                    59:b2:42:a7:3a:33:e6:fb:b7:3f:bc:4c:4a:cb:62:
                    e4:56:39:6b:9b:c5:5d:6c:da:79:c6:f6:5c:cd:ee:
                    65:10:2c:da:1b:a4:44:57:48:9d:c3:22:b9:6f:21:
                    73:3b:b3:50:4f:cb:07:5e:d5:0c:38:91:e8:e2:e5:
                    ae:ac:10:6d:87:fe:ff:d3:0d:62:e1:dd:7d:bf:50:
                    fe:e7:e5:45:82:5e:3b:82:10:4e:77:cd:c1:aa:ac:
                    38:c4:71:ce:53:ff:af:b1:9d:43:25:cc:0a:28:ab:
                    5f:81:96:62:7b:35:28:f6:37:84:da:74:d9:d4:a5:
                    29:23:14:3a:b0:7a:18:78:3d:fe:75:83:ac:c9:4f:
                    55:8f:3f:e8:72:9f:a7:c8:fc:3c:4b:eb:3e:f7:41:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:73:B5:3A:4C:CF:86:1E:0A:45:2C:C7:9E:D8:4E:47:F1:3C:D7
            X509v3 Authority Key Identifier:
                keyid:3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:f4:32:75:40:d5:70:13:40:d3:63:58:a5:77:45:6e:5e:
         00:32:2f:aa:7d:bd:0f:e7:c6:7b:e6:0c:4e:04:e9:61:72:ad:
         27:77:f6:c7:9b:d8:4b:4b:06:8a:74:7b:4a:47:f6:0b:7c:f3:
         bc:76:ec:f3:fc:94:5d:65:45:de:cb:bb:e4:2b:68:6f:9b:df:
         2a:4d:a0:e0:cd:66:51:64:37:ac:50:63:07:db:bb:82:ad:06:
         0c:d1:f9:fa:82:b2:68:6d:39:58:f3:84:9c:6b:b1:ad:0d:38:
         d8:86:25:71:43:48:a9:78:a0:0b:7f:32:30:ad:43:62:a1:24:
         95:ae:88:54:cc:04:24:cd:38:1b:82:b9:25:b8:bc:1d:95:2b:
         9e:57:58:6e:34:81:39:d7:e5:39:70:8d:46:ad:0c:37:33:f8:
         13:a8:95:9a:ad:c3:d7:cd:25:a1:7e:ee:ab:54:50:2a:c6:4c:
         99:ea:7e:94:24:4d:cb:c7:bc:8e:32:db:1d:bc:66:62:a4:ca:
         74:11:46:3d:be:41:53:32:08:7b:8f:fd:0e:a5:c6:a3:c8:76:
         2c:0f:2a:c1:8c:0a:22:b5:22:72:4c:64:9c:a7:7f:d0:d0:89:
         17:6c:56:e6:76:9f:3c:81:b0:70:db:ec:f9:86:7b:88:87:ee:
         6c:be:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:56 2025 by rpki-client