Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
File:                     FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft (raw, json)
Hash identifier:          9RgLcelCBaQ9hin055W/4qmBiNsvyGZzP6D+6aRSEJc=
Subject key identifier:   B0:DA:EA:A0:B6:1D:27:AE:DC:80:A9:BD:B8:38:9D:72:2D:88:00:4E
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Certificate issuer:       /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial:       383F23BF0C046795D04B7E560255FE69BF7EA84A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
Manifest number:          51
Signing time:             Sat 16 Aug 2025 02:10:39 +0000
Manifest this update:     Sat 16 Aug 2025 02:05:39 +0000
Manifest next update:     Sun 17 Aug 2025 02:11:39 +0000
Files and hashes:         1: 3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (hash: KIFTJjKKd6/PSI+6j7nOzWGYSCTtpxHe1qGG6vpOiNU=)
                          2: 323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (hash: 2GptZ3RabEC7QCCw/HaicFNVgieTrkw3S/oraJ8oR9o=)
                          3: 3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (hash: +mvP8qMouAMvWor17GLsETtlUHroIUaj5JwxXsNsvAU=)
                          4: FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl (hash: K9d/0ynElkjBRPn7aX1jVJlN29ICbWLeJxLJoDe/irU=)
                          5: 3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa (hash: zfqjJcXYgvPw2REMAcBA4TkFyAWC717mikpPNxOp6Ts=)
                          6: 3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa (hash: BSkWzAzGwusAJ1olHzvzCTf8zP2i9ICVPz6sQGRgBPQ=)
                          7: 3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa (hash: tb1g3NCktqSrdcvWQ2gxaX+GDhsqkyxkZJ3C04Np+Yg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3f:23:bf:0c:04:67:95:d0:4b:7e:56:02:55:fe:69:bf:7e:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Validity
            Not Before: Aug 16 02:05:39 2025 GMT
            Not After : Aug 17 02:11:39 2025 GMT
        Subject: CN=B0DAEAA0B61D27AEDC80A9BDB8389D722D88004E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:c8:93:1a:33:34:75:c6:a7:66:c5:b4:6c:
                    c4:91:df:66:28:70:a0:16:98:35:4a:0b:40:f7:e8:
                    7b:45:ce:78:7b:b2:14:85:26:6e:48:5f:fd:cb:2e:
                    0c:ce:f4:b6:2c:1f:0e:11:ff:ca:28:53:81:1d:5b:
                    b7:da:16:b1:1e:00:34:b0:eb:62:e3:f8:f9:76:05:
                    44:34:c7:3a:7d:4f:d1:f4:3b:85:dd:78:63:75:28:
                    17:ab:33:2c:59:72:da:81:c6:14:1e:fe:7f:69:71:
                    88:93:11:e2:98:24:b4:77:e2:6a:ec:97:7a:7a:47:
                    3d:64:e7:f6:92:6c:19:54:0f:76:a5:e4:be:15:61:
                    29:50:0f:16:39:9f:0f:43:2f:df:0b:cc:b6:21:ec:
                    29:7e:7a:8b:06:5d:9f:69:be:dc:f2:9d:cd:67:64:
                    e3:62:3b:3e:e8:59:04:00:ba:6e:58:cd:98:ea:1e:
                    f3:49:4c:1b:a1:16:92:b1:66:19:fc:46:e6:d9:cf:
                    68:b0:7c:8c:1d:52:35:65:ff:2c:7e:df:9a:56:75:
                    54:6d:33:a9:8c:42:45:c8:77:da:a7:74:d4:df:71:
                    cf:e0:44:01:a4:f9:0d:12:c8:b9:dc:f4:b5:cc:45:
                    4d:6e:52:bd:25:03:67:a4:c1:e2:fa:7e:01:de:29:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:EA:A0:B6:1D:27:AE:DC:80:A9:BD:B8:38:9D:72:2D:88:00:4E
            X509v3 Authority Key Identifier:
                keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:47:8c:b6:21:5f:61:b6:75:62:ff:4d:ef:b6:ad:61:0a:
         7c:be:ee:f2:9b:31:b8:45:5a:03:7f:25:e8:db:70:5e:ff:99:
         ef:a6:88:e0:2c:6d:17:02:ae:67:c9:58:4c:8b:7d:17:32:39:
         9d:83:4f:c0:6b:6b:ee:7d:ef:16:af:95:e0:6c:73:2b:50:34:
         53:e3:ad:1f:1c:5c:e7:75:16:e3:8c:1e:b0:d9:48:b4:d8:79:
         b6:65:05:fa:1d:7f:3e:51:0f:ae:c4:5b:10:86:df:de:d5:01:
         35:13:6b:7e:a4:54:1f:8e:39:70:b2:54:05:ee:1b:b7:d0:a9:
         e3:d3:a9:fc:48:00:90:44:1b:96:f6:a8:ba:8c:06:bd:f1:fc:
         0e:bf:dd:61:3e:eb:1b:b8:77:fb:48:74:e8:02:a6:af:cf:53:
         a6:ff:64:22:4d:9d:77:78:cc:1e:46:7b:ea:ec:37:6e:aa:4e:
         2f:09:d8:91:8e:28:65:5c:3d:9d:49:fe:1d:ce:7e:87:a5:2f:
         0d:c9:8a:a4:60:42:b5:92:1f:d8:61:b8:fe:5d:ba:58:0b:6e:
         6a:01:82:e9:c5:76:c2:ba:03:27:be:3f:4c:2b:55:b7:d7:9c:
         0d:e7:25:ec:82:1e:ac:e5:f9:dd:d4:de:97:1d:08:d6:4b:44:
         d4:9e:e6:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOD8jvwwEZ5XQS35WAlX+ab9+qEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDM0FCRDU3NkYwQTEzMkE5QjA0MUM3QjZFNjk5Nzc4
NUNCQ0Q0QTAeFw0yNTA4MTYwMjA1MzlaFw0yNTA4MTcwMjExMzlaMDMxMTAvBgNV
BAMTKEIwREFFQUEwQjYxRDI3QUVEQzgwQTlCREI4Mzg5RDcyMkQ4ODAwNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXciTGjM0dcanZsW0bMSR32Yo
cKAWmDVKC0D36HtFznh7shSFJm5IX/3LLgzO9LYsHw4R/8ooU4EdW7faFrEeADSw
62Lj+Pl2BUQ0xzp9T9H0O4XdeGN1KBerMyxZctqBxhQe/n9pcYiTEeKYJLR34mrs
l3p6Rz1k5/aSbBlUD3al5L4VYSlQDxY5nw9DL98LzLYh7Cl+eosGXZ9pvtzync1n
ZONiOz7oWQQAum5YzZjqHvNJTBuhFpKxZhn8RubZz2iwfIwdUjVl/yx+35pWdVRt
M6mMQkXId9qndNTfcc/gRAGk+Q0SyLnc9LXMRU1uUr0lA2ekweL6fgHeKeK7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsNrqoLYdJ67cgKm9uDidci2IAE4wHwYDVR0j
BBgwFoAU/cOr1XbwoTKpsEHHtuaZd4XLzUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0
cEUvMC9GREMzQUJENTc2RjBBMTMyQTlCMDQxQzdCNkU2OTk3Nzg1Q0JDRDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQzNBQkQ1NzZGMEExMzJB
OUIwNDFDN0I2RTY5OTc3ODVDQkNENEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0cEUvMC9G
REMzQUJENTc2RjBBMTMyQTlCMDQxQzdCNkU2OTk3Nzg1Q0JDRDRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARz9HjLYhX2G2dWL/Te+2rWEKfL7u8psxuEVaA38l6NtwXv+Z76aI4CxtFwKu
Z8lYTIt9FzI5nYNPwGtr7n3vFq+V4GxzK1A0U+OtHxxc53UW44wesNlItNh5tmUF
+h1/PlEPrsRbEIbf3tUBNRNrfqRUH445cLJUBe4bt9Cp49Op/EgAkEQblvaouowG
vfH8Dr/dYT7rG7h3+0h06AKmr89Tpv9kIk2dd3jMHkZ76uw3bqpOLwnYkY4oZVw9
nUn+Hc5+h6UvDcmKpGBCtZIf2GG4/l26WAtuagGC6cV2wroDJ74/TCtVt9ecDecl
7IIerOX53dTelx0I1ktE1J7m+A==
-----END CERTIFICATE-----
Generated at Thu Aug 21 04:25:14 2025 by rpki-client