Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.mft
File:                     A8F704041C3FD798A1B7435D81621D922F50F297.mft (raw, json)
Hash identifier:          mVfY3ko5oA8dyBjJ8CPCAdO8JlhbHdHAP8gSFFbkLUI=
Subject key identifier:   CA:10:59:EB:9A:21:DA:24:0C:6A:C4:AE:88:62:A4:CE:6C:C0:17:8F
Authority key identifier: A8:F7:04:04:1C:3F:D7:98:A1:B7:43:5D:81:62:1D:92:2F:50:F2:97
Certificate issuer:       /CN=A8F704041C3FD798A1B7435D81621D922F50F297
Certificate serial:       F44A9A1B4BE481B3B5E87A215E28C161862D44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F704041C3FD798A1B7435D81621D922F50F297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.mft
Manifest number:          DA
Signing time:             Sun 05 Jul 2026 19:57:23 +0000
Manifest this update:     Sun 05 Jul 2026 19:52:23 +0000
Manifest next update:     Mon 06 Jul 2026 22:16:23 +0000
Files and hashes:         1: 3133382e39342e3136342e302f32322d3234203d3e20323634313830.roa (hash: Hw4oyN/F0ZrMHzYP+4EsGWT//k4akhoQFXy3Ehclngg=)
                          2: 323830343a323362633a3930303a3a2f34302d313238203d3e20323634313830.roa (hash: OeHISoszRdShvccsK+a3DnrlO4Izt0Tz9rMAwIJVnzs=)
                          3: A8F704041C3FD798A1B7435D81621D922F50F297.crl (hash: kXvky2+Rsb2z4v1PhHq5BYSR6RtWUn3QiGiddhNvPU8=)
                          4: 323830343a323362633a3a2f33322d3332203d3e20323634313830.roa (hash: X212EX7sJzpjnYiqFY6dkcrXqmxpQagouaiu/n4d8cg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:4a:9a:1b:4b:e4:81:b3:b5:e8:7a:21:5e:28:c1:61:86:2d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F704041C3FD798A1B7435D81621D922F50F297
        Validity
            Not Before: Jul  5 19:52:23 2026 GMT
            Not After : Jul  6 22:16:23 2026 GMT
        Subject: CN=CA1059EB9A21DA240C6AC4AE8862A4CE6CC0178F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:12:c3:13:61:e2:c5:2c:94:8a:f1:1e:bb:
                    36:a6:7c:3e:3b:98:28:c7:1c:16:99:cd:c4:bb:d4:
                    ad:61:ad:9f:e3:a6:53:90:46:3d:ea:d5:5b:21:84:
                    3f:46:db:35:39:d7:a8:93:05:5f:1e:3b:8b:e6:8c:
                    77:21:1d:cf:22:5b:96:99:e7:5a:f1:3b:15:e9:4b:
                    cc:11:92:48:52:93:36:58:6b:6b:38:35:ba:75:3a:
                    8f:1f:93:4f:84:30:91:b5:df:ad:23:be:06:40:4d:
                    4d:18:39:be:71:02:f7:76:5d:49:f1:be:d8:71:59:
                    59:44:78:df:06:72:75:d6:69:74:5a:e4:ec:04:57:
                    17:b4:19:5a:8a:fa:de:bc:03:d9:93:c0:8f:da:24:
                    8d:bd:f9:1f:59:88:30:b2:a9:45:ab:e3:bb:b1:8d:
                    6c:7b:0e:96:6f:d6:55:fd:12:4f:a5:14:0d:2b:15:
                    ee:ef:23:10:a6:e5:67:68:d3:a4:f5:aa:9d:e1:d7:
                    37:a5:3f:b1:2d:50:65:c3:6d:4f:35:9c:f9:00:8f:
                    4a:53:78:7a:6c:0f:12:be:3e:06:57:82:a7:70:3d:
                    e6:3d:55:3c:34:ed:ed:5a:17:b0:0e:74:67:f0:4f:
                    14:1b:4f:5d:74:62:57:a2:8d:0e:86:60:b4:47:c3:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:59:EB:9A:21:DA:24:0C:6A:C4:AE:88:62:A4:CE:6C:C0:17:8F
            X509v3 Authority Key Identifier:
                keyid:A8:F7:04:04:1C:3F:D7:98:A1:B7:43:5D:81:62:1D:92:2F:50:F2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F704041C3FD798A1B7435D81621D922F50F297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/A8F704041C3FD798A1B7435D81621D922F50F297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:ca:11:5c:9a:44:cf:f0:25:a3:7d:d8:6d:74:59:fb:74:
         62:4b:ba:8f:c3:0e:b7:40:9c:10:4b:cd:ad:db:95:38:c1:97:
         b7:f5:6e:9d:f7:cb:7f:3d:48:de:11:ce:de:b8:47:30:8a:15:
         2c:b8:85:a6:fa:a0:a1:49:7f:6d:46:e5:cc:cd:23:df:f6:1e:
         12:aa:9d:ed:89:31:3c:66:85:0b:35:9b:0f:3e:55:b5:3b:1d:
         df:13:3e:f8:48:27:37:6f:fa:81:89:32:b8:9f:39:a0:89:cd:
         ce:24:96:83:ea:a3:04:06:68:c7:62:75:0b:2e:4d:42:4a:42:
         f7:81:c4:ef:6a:ad:f6:ff:3c:87:54:02:a8:0b:00:d8:07:8a:
         e3:5c:9a:cc:e9:f6:63:72:ca:a0:3f:ef:1b:ab:7f:84:0b:eb:
         21:41:a3:50:fc:ce:75:d6:cb:c8:de:9c:c9:72:33:64:b2:4f:
         8f:9a:a9:f2:12:39:eb:25:04:81:67:a1:5c:2b:08:53:c6:96:
         e2:0f:d0:2e:a2:ca:19:0d:34:d0:cf:bb:1b:9b:ee:fe:be:91:
         46:13:e8:5c:9a:13:b5:19:ec:16:97:29:f1:5b:25:01:96:e1:
         9d:05:52:2f:f9:e2:7a:10:cc:e0:05:14:e0:8c:12:05:ac:e1:
         1d:a7:31:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAPRKmhtL5IGzteh6IV4owWGGLUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGNzA0MDQxQzNGRDc5OEExQjc0MzVEODE2MjFEOTIy
RjUwRjI5NzAeFw0yNjA3MDUxOTUyMjNaFw0yNjA3MDYyMjE2MjNaMDMxMTAvBgNV
BAMTKENBMTA1OUVCOUEyMURBMjQwQzZBQzRBRTg4NjJBNENFNkNDMDE3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNhLDE2HixSyUivEeuzamfD47
mCjHHBaZzcS71K1hrZ/jplOQRj3q1VshhD9G2zU516iTBV8eO4vmjHchHc8iW5aZ
51rxOxXpS8wRkkhSkzZYa2s4Nbp1Oo8fk0+EMJG1360jvgZATU0YOb5xAvd2XUnx
vthxWVlEeN8GcnXWaXRa5OwEVxe0GVqK+t68A9mTwI/aJI29+R9ZiDCyqUWr47ux
jWx7DpZv1lX9Ek+lFA0rFe7vIxCm5Wdo06T1qp3h1zelP7EtUGXDbU81nPkAj0pT
eHpsDxK+PgZXgqdwPeY9VTw07e1aF7AOdGfwTxQbT110YleijQ6GYLRHw3URAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyhBZ65oh2iQMasSuiGKkzmzAF48wHwYDVR0j
BBgwFoAUqPcEBBw/15iht0NdgWIdki9Q8pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZzYkRha2p1TngxTHF1M3dUanZLWm1taDZ2VFpBcVVNZVBqS2daZHk3
UTYvMC9BOEY3MDQwNDFDM0ZENzk4QTFCNzQzNUQ4MTYyMUQ5MjJGNTBGMjk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RjcwNDA0MUMzRkQ3OThB
MUI3NDM1RDgxNjIxRDkyMkY1MEYyOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RjZzYkRha2p1TngxTHF1M3dUanZLWm1taDZ2VFpBcVVNZVBqS2daZHk3UTYvMC9B
OEY3MDQwNDFDM0ZENzk4QTFCNzQzNUQ4MTYyMUQ5MjJGNTBGMjk3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPT/KEVyaRM/wJaN92G10Wft0Yku6j8MOt0CcEEvNrduVOMGXt/VunffLfz1I
3hHO3rhHMIoVLLiFpvqgoUl/bUblzM0j3/YeEqqd7YkxPGaFCzWbDz5VtTsd3xM+
+EgnN2/6gYkyuJ85oInNziSWg+qjBAZox2J1Cy5NQkpC94HE72qt9v88h1QCqAsA
2AeK41yazOn2Y3LKoD/vG6t/hAvrIUGjUPzOddbLyN6cyXIzZLJPj5qp8hI56yUE
gWehXCsIU8aW4g/QLqLKGQ000M+7G5vu/r6RRhPoXJoTtRnsFpcp8VslAZbhnQVS
L/niehDM4AUU4IwSBazhHacxxA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:45 2026 by rpki-client