Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft
File:                     F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft (raw, json)
Hash identifier:          +NBnZxEg1ooqNTTmb+ESma0EyVT41tK/vTAs6l3AIHM=
Subject key identifier:   64:28:0C:B9:BF:2B:C0:CD:82:8D:CA:51:98:0F:DB:14:C0:9D:C5:C2
Authority key identifier: F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95
Certificate issuer:       /CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895
Certificate serial:       2C96BBE030C1E0B99188703588AF1112AC656410
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft
Manifest number:          76
Signing time:             Sat 04 Apr 2026 18:14:16 +0000
Manifest this update:     Sat 04 Apr 2026 18:09:16 +0000
Manifest next update:     Sun 05 Apr 2026 20:41:16 +0000
Files and hashes:         1: 323830343a316235383a3a2f33322d3438203d3e203631373233.roa (hash: 2qQw1RRx7ZrD1NIxh1wm9oV+g5wzrWz3/GPFFbns0MU=)
                          2: 3133312e37322e34302e302f32322d3234203d3e203631373233.roa (hash: L5EP6//sryGO8wGuW7V+aUEo+4kv0AA9WtgMzV8aCyY=)
                          3: F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl (hash: fh493q80MZQDiRUHlyDY+mly64/sm/XRqq2IXLROPw4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:96:bb:e0:30:c1:e0:b9:91:88:70:35:88:af:11:12:ac:65:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895
        Validity
            Not Before: Apr  4 18:09:16 2026 GMT
            Not After : Apr  5 20:41:16 2026 GMT
        Subject: CN=64280CB9BF2BC0CD828DCA51980FDB14C09DC5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:8a:59:c2:8a:8f:03:ed:fc:a7:62:ac:25:
                    b2:c8:ed:3c:12:88:02:90:22:a6:39:55:fe:e2:4d:
                    51:f7:a7:0b:97:d8:8d:04:bf:85:57:f2:58:50:e3:
                    a8:9b:78:f9:57:89:56:2e:a1:ad:ff:74:c9:d6:1e:
                    b9:fa:70:72:72:ae:02:5c:da:c8:3d:0f:27:4e:f1:
                    79:f5:23:06:8f:37:bb:19:e2:01:26:b6:2a:ee:8c:
                    e6:cb:0f:dd:24:06:93:26:f7:6c:4b:f8:88:bf:9c:
                    ae:e6:42:22:c7:c7:88:32:a3:d1:9a:26:79:4a:8e:
                    cf:2b:67:a3:34:c6:d5:b7:f2:66:b7:50:45:8b:78:
                    12:9a:33:41:23:87:0b:52:ac:05:3a:b7:eb:6f:de:
                    5e:76:65:05:01:20:07:2c:57:0a:ae:05:2e:f2:a5:
                    dc:05:72:eb:62:7a:93:66:c0:cc:21:dd:75:e2:3a:
                    97:3c:16:63:15:d9:6f:bb:92:61:0e:64:e8:eb:c6:
                    2d:20:9c:b8:73:c2:7f:37:04:f8:da:12:77:8e:9f:
                    50:d2:97:3b:85:0b:8c:28:7b:2e:a1:03:68:89:ff:
                    8e:62:e9:8c:3b:da:e0:c5:61:18:a4:54:35:a5:ad:
                    80:7b:5c:44:20:8a:50:1a:d1:03:af:fc:85:33:fc:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:28:0C:B9:BF:2B:C0:CD:82:8D:CA:51:98:0F:DB:14:C0:9D:C5:C2
            X509v3 Authority Key Identifier:
                keyid:F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:d8:a4:e5:0e:9b:71:ac:db:18:03:f5:e3:57:1d:0a:f2:
         ee:5d:b3:2b:48:94:1f:e4:45:60:94:6b:e9:dc:6c:a1:97:04:
         6e:a7:80:ae:4e:89:53:88:17:7f:ab:f9:4a:49:39:e3:10:8c:
         8a:4b:77:ab:9f:12:29:59:b9:5e:ed:93:f4:02:09:52:4d:14:
         c3:d8:9c:db:83:d2:ea:9f:52:8c:a1:91:c9:73:d9:96:37:4b:
         1e:3a:b1:4d:45:f7:c0:b1:55:2e:9a:00:e6:4e:2e:71:a6:77:
         ad:43:6a:41:d3:25:36:56:60:7c:f1:61:21:3f:1e:09:c7:21:
         71:b5:5a:d8:fc:34:7c:60:49:dd:94:28:0d:7f:3e:16:12:b2:
         fb:dd:a4:15:8b:11:c7:a7:90:7f:41:f0:17:e3:a8:d2:19:d2:
         c3:06:a8:29:b9:f7:ac:02:aa:2e:0a:2d:45:6c:2c:ba:b8:78:
         b7:4c:bf:5b:3f:5f:b8:b2:c5:e8:e2:cf:62:ee:52:55:8d:92:
         f9:d8:5c:43:6e:cd:77:87:43:fc:54:da:d4:49:df:59:0e:55:
         da:75:15:38:a2:a3:df:ff:21:af:78:dc:6f:24:82:bb:63:fa:
         39:c0:42:73:87:3e:28:d7:b8:e2:c3:d3:a4:d6:0d:21:9b:30:
         68:5a:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:26 2026 by rpki-client