Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.mft
File:                     E2549EE4C1C3504708ABCCD669E240385B291CD0.mft (raw, json)
Hash identifier:          34dVkbW9/JRvVM7zA6ai0aSoYDWs/pOydqYHdvlgemk=
Subject key identifier:   1D:06:CA:7B:06:82:6B:E8:8D:43:08:4E:0D:A0:BE:31:51:C5:1F:0E
Authority key identifier: E2:54:9E:E4:C1:C3:50:47:08:AB:CC:D6:69:E2:40:38:5B:29:1C:D0
Certificate issuer:       /CN=E2549EE4C1C3504708ABCCD669E240385B291CD0
Certificate serial:       11C24D3FFBBAE13D7BBCDBD05E8B8DBD3AE7A88F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2549EE4C1C3504708ABCCD669E240385B291CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.mft
Manifest number:          14
Signing time:             Mon 22 Jun 2026 17:58:17 +0000
Manifest this update:     Mon 22 Jun 2026 17:53:17 +0000
Manifest next update:     Tue 23 Jun 2026 19:12:17 +0000
Files and hashes:         1: 34352e3136352e37362e302f32322d3332203d3e20323638363631.roa (hash: gIV1eN1iIC+bT3Hk7sb+sgIZVsIwZJ713Eqyo3zVbhs=)
                          2: E2549EE4C1C3504708ABCCD669E240385B291CD0.crl (hash: CZBcOkuW7FZUD0nTkN6VOqYJ2I+otc9ER2pflxz+oLU=)
                          3: 323830343a353439633a3a2f33322d313238203d3e20323638363631.roa (hash: 0c3DCB0o3nDTQNshrvTUmYj8zRCfbXYf814YHepOLAE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c2:4d:3f:fb:ba:e1:3d:7b:bc:db:d0:5e:8b:8d:bd:3a:e7:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2549EE4C1C3504708ABCCD669E240385B291CD0
        Validity
            Not Before: Jun 22 17:53:17 2026 GMT
            Not After : Jun 23 19:12:17 2026 GMT
        Subject: CN=1D06CA7B06826BE88D43084E0DA0BE3151C51F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:8f:19:e3:91:b8:3f:f8:7c:cb:cd:41:8e:
                    f2:31:ae:0b:f6:10:a5:3f:7d:6b:1f:a6:f8:ae:4f:
                    48:77:2a:0f:eb:37:09:18:16:40:04:08:67:c3:4c:
                    b9:b2:d5:2a:1a:73:79:20:02:41:b1:ee:61:f5:10:
                    93:71:97:96:5f:48:97:7d:b1:9c:bc:c7:e2:0c:90:
                    19:0a:63:6f:2b:ac:bd:9e:22:d3:2c:41:9b:41:af:
                    71:89:36:58:86:4e:8a:11:dd:ca:ef:d3:cf:d1:1c:
                    29:b4:b2:fe:f4:ba:fc:de:a8:fd:3e:c0:2c:1f:2b:
                    b5:6a:45:1d:b7:80:98:ae:8d:83:ad:5d:e7:d2:46:
                    62:0a:06:c7:d5:8d:11:97:2f:ea:dd:f3:ff:9c:4b:
                    89:4f:c5:59:f4:59:68:e0:a7:c0:b9:3c:81:1d:06:
                    a4:5a:b7:9f:52:5f:35:89:ea:35:40:e8:0e:60:eb:
                    d6:e1:5f:9e:a3:d8:d2:56:9f:67:8c:e1:99:9c:cc:
                    3b:54:3b:53:9d:0c:49:9a:24:1d:73:81:69:53:79:
                    01:9d:29:cc:82:20:61:a6:92:de:22:ce:82:4f:b3:
                    f4:d4:39:ae:a7:c2:28:1a:b6:85:f1:ca:a4:7d:73:
                    cf:98:7b:5f:1e:01:50:e8:2c:5c:c5:7b:6b:2e:9c:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:CA:7B:06:82:6B:E8:8D:43:08:4E:0D:A0:BE:31:51:C5:1F:0E
            X509v3 Authority Key Identifier:
                keyid:E2:54:9E:E4:C1:C3:50:47:08:AB:CC:D6:69:E2:40:38:5B:29:1C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2549EE4C1C3504708ABCCD669E240385B291CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:35:2b:a2:ba:37:81:2d:e1:94:16:47:92:b1:dd:86:92:1e:
         c3:72:ad:fd:2e:2e:ee:1a:cb:e4:0a:5d:c6:f9:16:30:2b:9c:
         82:6c:fb:b9:7d:8c:82:09:fa:97:72:c2:e0:f9:78:18:1e:61:
         55:7f:2d:bc:d0:c0:da:27:0c:23:42:16:05:f2:d0:e6:55:5c:
         34:d4:ed:16:54:ca:eb:8e:e9:92:dd:26:1d:ca:3e:79:29:e8:
         cb:be:a7:64:64:41:b5:5d:bb:3d:4e:b5:ad:07:de:ca:b0:25:
         02:0b:6c:0f:e8:94:6b:fe:63:76:2c:c9:38:83:93:c7:fa:4a:
         31:5b:d2:1b:c8:5b:70:90:cc:86:e6:30:ac:82:e8:4b:db:4a:
         ab:81:9f:d9:5b:42:04:61:b1:b2:40:d7:d9:5f:62:42:36:aa:
         06:7f:57:82:83:37:cc:20:40:6c:74:40:85:43:27:22:d5:9e:
         f5:3c:26:73:d8:15:68:bf:5d:1a:00:f6:c5:04:ba:c1:3f:46:
         db:af:43:d7:ef:ae:22:c6:b9:f7:89:a4:f1:ef:fb:d5:db:90:
         47:47:e9:89:04:ff:25:12:2f:58:c3:3b:8b:a1:20:ce:93:51:
         c3:d1:a3:c0:34:0b:2d:6f:3d:95:ab:db:ac:9a:de:79:11:64:
         e5:53:d5:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEcJNP/u64T17vNvQXouNvTrnqI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1NDlFRTRDMUMzNTA0NzA4QUJDQ0Q2NjlFMjQwMzg1
QjI5MUNEMDAeFw0yNjA2MjIxNzUzMTdaFw0yNjA2MjMxOTEyMTdaMDMxMTAvBgNV
BAMTKDFEMDZDQTdCMDY4MjZCRTg4RDQzMDg0RTBEQTBCRTMxNTFDNTFGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6o8Z45G4P/h8y81BjvIxrgv2
EKU/fWsfpviuT0h3Kg/rNwkYFkAECGfDTLmy1Soac3kgAkGx7mH1EJNxl5ZfSJd9
sZy8x+IMkBkKY28rrL2eItMsQZtBr3GJNliGTooR3crv08/RHCm0sv70uvzeqP0+
wCwfK7VqRR23gJiujYOtXefSRmIKBsfVjRGXL+rd8/+cS4lPxVn0WWjgp8C5PIEd
BqRat59SXzWJ6jVA6A5g69bhX56j2NJWn2eM4ZmczDtUO1OdDEmaJB1zgWlTeQGd
KcyCIGGmkt4izoJPs/TUOa6nwigatoXxyqR9c8+Ye18eAVDoLFzFe2sunCGZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHQbKewaCa+iNQwhODaC+MVHFHw4wHwYDVR0j
BBgwFoAU4lSe5MHDUEcIq8zWaeJAOFspHNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVtdUtOZDI3UTlFalpjZjd6TXZSNGNMV2FHM3J0UmtEWnRrMXpyYkRF
V0MvMC9FMjU0OUVFNEMxQzM1MDQ3MDhBQkNDRDY2OUUyNDAzODVCMjkxQ0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNTQ5RUU0QzFDMzUwNDcw
OEFCQ0NENjY5RTI0MDM4NUIyOTFDRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnVtdUtOZDI3UTlFalpjZjd6TXZSNGNMV2FHM3J0UmtEWnRrMXpyYkRFV0MvMC9F
MjU0OUVFNEMxQzM1MDQ3MDhBQkNDRDY2OUUyNDAzODVCMjkxQ0QwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARzUroro3gS3hlBZHkrHdhpIew3Kt/S4u7hrL5ApdxvkWMCucgmz7uX2Mggn6
l3LC4Pl4GB5hVX8tvNDA2icMI0IWBfLQ5lVcNNTtFlTK647pkt0mHco+eSnoy76n
ZGRBtV27PU61rQfeyrAlAgtsD+iUa/5jdizJOIOTx/pKMVvSG8hbcJDMhuYwrILo
S9tKq4Gf2VtCBGGxskDX2V9iQjaqBn9XgoM3zCBAbHRAhUMnItWe9Twmc9gVaL9d
GgD2xQS6wT9G269D1++uIsa594mk8e/71duQR0fpiQT/JRIvWMM7i6EgzpNRw9Gj
wDQLLW89lavbrJreeRFk5VPVuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 11:57:33 2026 by rpki-client