Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.mft
File:                     E8C5040EBFAB6D8F720040E80E512CBD965591B2.mft (raw, json)
Hash identifier:          UO7jKLFe8OYmBdDk163FF1Ab76t7XKK1mx0ifcIeruc=
Subject key identifier:   41:E7:3D:2D:B8:E0:CA:D1:DE:15:D0:3E:06:85:53:BF:65:7C:77:4C
Authority key identifier: E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
Certificate issuer:       /CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Certificate serial:       76CBB0DE000FDAA7996755599F515F4D3282C7BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.mft
Manifest number:          11
Signing time:             Sat 19 Apr 2025 05:14:01 +0000
Manifest this update:     Sat 19 Apr 2025 05:09:01 +0000
Manifest next update:     Sun 20 Apr 2025 06:06:01 +0000
Files and hashes:         1: 3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa (hash: 1+/tlGTf1nWbj+VH9CNAvKdGsU9Z/byC3sb0jfxzgfg=)
                          2: 323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa (hash: UaGY3xBPp12fn0cro0Q7O6VDWzclIa/kXaHQQqgdAps=)
                          3: 323830343a373436633a3a2f33332d3333203d3e20323730393830.roa (hash: sBvE8RBdRRi0pYV/S0Od3kWOu7pyarWqHb5S6mohs3Q=)
                          4: 3136382e3139362e3139362e302f32342d3234203d3e20323730393830.roa (hash: x8zTT4YLnkLojaK/Bi9UonMOnpS4Qj62vydBJ99YOAk=)
                          5: E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl (hash: maO01ymjLvkznOcnM0Z1q7lDDtt5KVQauFZZG1ctf3Q=)
                          6: 323830343a373436633a3a2f33322d3332203d3e20323730393830.roa (hash: 8518wKB8mdz0Mq32SHpabXLxnWKFdy9w8Qa2ORiN9J0=)
                          7: 323830343a373436633a3a2f33342d3334203d3e20323730393830.roa (hash: yY/LPJ0aUSwrEJUZEKLGfltKfKcemoItr7SQnHuQ/CE=)
                          8: 323830343a373436633a343030303a3a2f33342d3334203d3e20323730393830.roa (hash: BPkJb/fVFDV1fsLO/hIyT07ThiC5Sf2YEJKWlo2SqUk=)
                          9: 3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa (hash: xteK1+YvBh1l69dAAyiesqcyHwDdvsk0MsbPDLjnpD0=)
                          10: 323830343a373436633a633030303a3a2f33342d3334203d3e20323730393830.roa (hash: 8hSjz+mosAZKfySQdtYNrl6biGA7L8FWXm1uc6ORv6o=)
                          11: 3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa (hash: am5K9grVt7QETB+dYF0JoBhghr8FbdElTDYE+fasiR4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cb:b0:de:00:0f:da:a7:99:67:55:59:9f:51:5f:4d:32:82:c7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
        Validity
            Not Before: Apr 19 05:09:01 2025 GMT
            Not After : Apr 20 06:06:01 2025 GMT
        Subject: CN=41E73D2DB8E0CAD1DE15D03E068553BF657C774C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:7f:4f:e6:06:c5:1a:e8:51:88:d3:28:01:
                    8f:29:43:81:53:60:bb:88:68:34:6b:c2:17:ec:e2:
                    65:e6:b6:bc:6e:4b:7b:f6:aa:cc:70:31:5f:8a:8e:
                    64:84:7b:f6:c1:c7:db:af:25:4b:a6:77:a8:b5:c9:
                    fa:a7:49:3a:39:09:02:41:f9:c1:c3:dc:1c:17:5c:
                    03:27:b9:20:aa:1e:b0:f4:be:ab:c9:cc:9f:a3:1b:
                    54:4d:dc:c4:45:86:5d:88:e1:51:5f:21:9f:ff:16:
                    06:34:5d:67:c9:77:a3:a8:19:b1:37:7c:f4:3d:12:
                    b3:a8:93:13:3f:2f:05:99:25:8d:3b:77:08:25:95:
                    f7:8c:25:df:1f:fb:d8:4b:ca:28:06:31:f7:f4:d2:
                    79:66:58:44:2b:b3:42:4b:40:25:02:62:b8:d7:dd:
                    37:4a:71:e3:1c:a5:ab:ee:43:4f:4c:68:2e:c8:9a:
                    d2:30:05:31:2a:9c:f5:86:b4:37:55:8c:9a:b5:e6:
                    32:17:b7:6c:85:5f:a1:37:94:7d:86:35:37:75:35:
                    34:2f:7b:b8:59:03:d5:dc:55:3e:7d:c1:56:4a:fc:
                    88:89:ac:f4:f1:dd:f7:44:19:bd:c5:db:f1:72:08:
                    64:43:c5:e1:b2:29:02:0a:16:fc:60:54:a7:72:ec:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:3D:2D:B8:E0:CA:D1:DE:15:D0:3E:06:85:53:BF:65:7C:77:4C
            X509v3 Authority Key Identifier:
                keyid:E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:a6:f2:ac:54:1c:c9:1d:2c:e0:66:63:2f:7a:42:1b:df:
         97:06:2a:3c:4c:78:e0:6e:bf:29:21:16:4f:0d:b1:a6:23:e1:
         a6:29:76:ca:30:10:42:44:45:6f:f6:b5:b5:0b:72:9b:7b:16:
         f8:53:37:15:d1:54:1d:fb:1c:2e:29:27:de:a5:db:9b:87:94:
         2d:66:30:88:7c:91:4b:2d:a5:62:fe:19:b5:12:17:f0:c1:d7:
         28:3c:79:80:b2:8b:c2:49:a6:58:f2:e3:8c:33:45:c9:aa:86:
         23:dd:7b:1c:8b:80:72:4d:6f:8a:5d:f0:1c:e2:61:37:70:7d:
         ad:5a:2c:d2:19:ac:2f:1c:18:df:ea:c7:e8:25:79:c5:59:67:
         06:59:79:cc:2b:d3:1e:3e:5b:41:b3:51:45:d0:ae:d6:fa:97:
         33:ed:2f:8b:f8:97:bf:73:a0:dc:36:b7:ea:39:60:c8:21:4d:
         9a:ea:1a:ca:18:b4:5a:a8:75:b7:83:05:28:97:54:7d:48:98:
         db:30:d4:e6:bb:22:17:61:81:26:9e:04:09:f2:b2:35:61:b2:
         03:bd:9d:32:a3:4b:d1:8c:2d:ff:0e:06:2c:bc:fb:e3:a3:24:
         56:3b:9c:80:01:61:3c:30:54:e4:c1:00:04:a2:fc:96:fe:c0:
         03:84:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:22 2025 by rpki-client