Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.mft
File:                     55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.mft (raw, json)
Hash identifier:          YGy2DPOvbbCqO3CTinWS1VlFgPLNuh3Uj42k0/9mkh4=
Subject key identifier:   41:A5:51:1E:7F:7D:B6:2C:36:90:B8:5D:1A:5D:68:CB:FB:0C:8B:CC
Authority key identifier: 55:C4:39:C5:11:DB:67:E8:CF:A8:BF:43:F7:CB:33:D8:E7:4A:B8:FA
Certificate issuer:       /CN=55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA
Certificate serial:       1ACF65669E4E13200157A37BFF1ABD2D6804B124
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.mft
Manifest number:          63
Signing time:             Wed 17 Sep 2025 02:05:59 +0000
Manifest this update:     Wed 17 Sep 2025 02:00:59 +0000
Manifest next update:     Thu 18 Sep 2025 03:19:59 +0000
Files and hashes:         1: 323830343a376462343a3a2f33322d313238203d3e20323731353737.roa (hash: HQn13L1S3KDRBGqCUgwknTsFis1jKVGkKgT60cPEH6I=)
                          2: 3138312e3233322e3232382e302f32332d3332203d3e20323731353737.roa (hash: U379yRR0XnEW9bcZcawArIaaIn+D9PIsGT4zkDygBRE=)
                          3: 55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.crl (hash: kxTaypvrNQWTUjciY27nXRlEgsWtgMFgvQmtNnQn/dY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cf:65:66:9e:4e:13:20:01:57:a3:7b:ff:1a:bd:2d:68:04:b1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA
        Validity
            Not Before: Sep 17 02:00:59 2025 GMT
            Not After : Sep 18 03:19:59 2025 GMT
        Subject: CN=41A5511E7F7DB62C3690B85D1A5D68CBFB0C8BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:00:d1:00:be:eb:2c:fd:12:f7:41:e1:d2:
                    c5:f4:eb:cb:8b:ef:be:83:69:10:6b:c9:3f:79:be:
                    38:a9:33:52:14:04:e5:24:10:1a:13:5a:cd:bf:a5:
                    09:09:a0:9b:ba:2d:54:26:34:68:7f:83:06:48:f4:
                    a2:16:cb:98:e4:9b:ab:51:11:7d:c7:6a:96:9c:e5:
                    70:19:2b:60:fd:d8:ff:b8:82:76:50:ca:34:04:24:
                    3d:47:d9:24:b6:b7:4c:ef:59:82:bf:c8:b7:72:64:
                    f8:fe:74:55:e1:52:f2:76:47:bc:68:87:19:32:47:
                    dc:a5:be:c8:71:42:37:9f:20:32:f0:f7:b1:15:fe:
                    fc:2d:3d:2c:10:f6:c1:42:b0:67:6b:a7:f6:85:ad:
                    f7:23:9e:2d:79:94:a2:4c:d1:a8:1f:21:89:fc:ba:
                    ea:16:66:d0:c8:bd:30:10:b3:62:d0:1d:fa:d4:5b:
                    07:0c:11:7b:04:90:ac:12:a5:e4:98:9a:5f:46:41:
                    9c:af:1d:c0:c7:00:21:cc:c6:5c:eb:b1:5e:77:56:
                    41:7b:c7:cb:46:62:34:f7:91:21:6e:48:8b:b4:76:
                    b6:21:b1:5d:ce:c7:75:c1:22:88:7b:9a:7e:07:3c:
                    d8:90:02:2d:d1:5e:fd:03:8b:39:57:07:78:f5:4a:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:51:1E:7F:7D:B6:2C:36:90:B8:5D:1A:5D:68:CB:FB:0C:8B:CC
            X509v3 Authority Key Identifier:
                keyid:55:C4:39:C5:11:DB:67:E8:CF:A8:BF:43:F7:CB:33:D8:E7:4A:B8:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:79:ca:51:23:ab:8d:e9:16:a7:4b:56:3e:13:d8:0f:23:
         78:96:ce:5b:f2:ed:24:a3:07:59:bd:ea:cd:dd:af:86:9b:03:
         cc:8e:1b:29:ed:fc:8a:d8:2c:a2:0d:99:35:43:9e:83:b7:25:
         f1:2c:cf:87:68:d9:19:03:36:95:29:25:05:78:14:91:ce:5e:
         03:6a:22:fc:69:a5:24:b3:d7:07:5c:96:fb:71:37:4c:65:11:
         07:d9:a3:c6:3e:4b:08:a7:63:d3:cc:0c:a0:bf:7d:d1:e4:ae:
         b2:5e:76:7c:56:aa:8c:b4:c9:de:bb:c0:17:a7:e0:51:1c:13:
         a4:10:5c:92:e3:f8:a9:9f:c1:90:fc:f1:46:84:4d:b6:e2:a9:
         1b:8a:e5:74:c7:75:76:2e:63:67:63:05:bd:34:80:49:6b:4a:
         97:89:bb:6c:34:87:3e:f7:fb:56:c3:1d:4d:23:87:98:17:e8:
         24:fa:ec:92:fa:9b:de:d5:57:34:3d:db:b0:74:bd:eb:13:bb:
         85:af:8a:7c:f6:83:5c:3b:e8:ee:3c:31:06:3f:6e:52:ac:85:
         7f:c8:a6:97:96:ac:b9:39:23:b7:f6:2c:af:1b:6d:43:63:63:
         46:c2:c5:c1:02:70:ab:f2:90:97:ba:44:74:bf:e3:12:28:4d:
         8a:8d:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:01:34 2025 by rpki-client