Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
File:                     77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft (raw, json)
Hash identifier:          Jx6zOII+p763fQXTzXTtlS83cSwXGP8niv9Xl8zdu/o=
Subject key identifier:   E4:3C:19:CE:78:DA:7C:3D:68:CD:B1:3E:56:C1:85:63:5F:98:F4:27
Authority key identifier: 77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
Certificate issuer:       /CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Certificate serial:       2F25BCD0AFAEEE8C83AF7758C3F990738E8A7B43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft
Manifest number:          2D
Signing time:             Sun 02 Nov 2025 02:06:16 +0000
Manifest this update:     Sun 02 Nov 2025 02:01:16 +0000
Manifest next update:     Mon 03 Nov 2025 05:46:16 +0000
Files and hashes:         1: 77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl (hash: HYyfyQTOfQRPvLqy/TvTDiutcyUL+xJmtLrQ1lmSE6w=)
                          2: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: Jgbac0riOJUgN7URLxriehRE7j3/ToQ4EHNWzUeccPs=)
                          3: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: rpQMLZb7BcLM7sA1WL+lf/Bek/hzUfkvH81sAwk/erA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:25:bc:d0:af:ae:ee:8c:83:af:77:58:c3:f9:90:73:8e:8a:7b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
        Validity
            Not Before: Nov  2 02:01:16 2025 GMT
            Not After : Nov  3 05:46:16 2025 GMT
        Subject: CN=E43C19CE78DA7C3D68CDB13E56C185635F98F427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:f7:b6:31:e7:dd:d8:37:df:d8:3a:26:7d:
                    85:c6:c3:96:4e:4e:c7:0a:a5:b2:6a:b8:25:aa:4c:
                    a4:31:23:44:24:b4:97:16:a7:04:12:cf:e6:d5:a7:
                    5b:80:e1:ec:29:59:c3:b7:ed:be:f5:a8:d2:11:e4:
                    32:f4:92:53:13:6e:0d:e5:dd:61:a0:ea:ee:e3:88:
                    d4:39:b0:91:ca:16:1d:3d:66:1e:a1:a5:16:42:78:
                    0f:b1:18:8d:aa:14:3b:3c:ba:15:f8:19:e2:e5:9a:
                    78:a0:5e:fc:65:dd:e7:09:2d:e0:a9:83:e3:8a:35:
                    b3:dd:0a:98:91:7f:65:b1:e8:c0:1b:ac:69:9f:c0:
                    7e:5f:e7:51:ce:ac:fe:4f:88:4f:25:b8:19:88:88:
                    77:ef:e5:2d:12:d0:fa:ec:4f:ab:81:ca:87:92:88:
                    cb:72:84:d9:4a:63:74:d6:5b:fb:b5:a2:59:ff:eb:
                    d5:cc:ee:05:cd:47:64:75:50:eb:ac:d7:56:8f:3d:
                    38:69:74:4f:e7:79:f9:62:08:73:4f:50:9c:e1:d5:
                    28:3d:f0:b2:d6:e4:1b:fc:c9:01:ff:6b:05:39:d5:
                    29:63:12:47:d3:fb:6e:c9:ba:3f:67:b1:e6:8a:8c:
                    2a:00:de:dc:15:c7:a7:db:b3:b5:e8:dd:c7:e2:34:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:19:CE:78:DA:7C:3D:68:CD:B1:3E:56:C1:85:63:5F:98:F4:27
            X509v3 Authority Key Identifier:
                keyid:77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:15:5f:c5:06:c6:d6:12:23:21:a6:9d:4d:67:94:31:0c:
         fd:e9:44:43:cd:93:76:62:00:e1:99:ce:06:35:b1:99:da:22:
         fd:4d:e1:e4:f1:28:49:6f:e8:52:01:26:c0:0c:0f:6a:bb:d6:
         37:cc:25:ac:09:9b:e7:58:b1:18:f1:3e:c5:2f:5f:6a:d0:0f:
         92:1c:40:be:72:e6:49:ea:c1:71:d7:e1:c0:bb:e2:14:e9:eb:
         7d:b2:22:1b:02:f4:e8:20:9e:ce:7d:c3:3b:c3:c9:6f:6a:88:
         30:ff:cc:87:31:3b:68:0c:53:aa:d4:37:d4:5c:c8:34:34:23:
         b2:2e:b7:c5:a6:7b:a3:e3:8f:3b:fb:a7:fa:44:67:14:7e:01:
         fe:71:35:3b:7d:c2:0a:52:9e:8f:83:a1:82:71:dc:4f:0d:46:
         3a:45:58:50:36:62:81:00:82:31:e0:4f:eb:c5:3b:40:c8:2a:
         c1:9d:a8:60:22:ae:bc:f5:ee:9d:f2:0c:af:6d:0b:df:68:7f:
         bd:7f:a3:ed:c4:b3:b7:30:02:66:d8:af:b1:34:b6:24:e0:70:
         79:d3:91:69:da:18:b2:be:b0:0d:69:1c:f0:bf:f4:f9:01:10:
         95:1d:63:b8:2c:a3:a0:da:e8:5b:ac:a1:ab:47:e1:55:2f:b1:
         5b:74:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:16:42 2025 by rpki-client