Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft
File:                     822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft (raw, json)
Hash identifier:          4qnmk3v4iTz+4LVKp0ncM7SD7AjPerivoMblBQX8gtg=
Subject key identifier:   54:6B:3E:DC:C1:86:42:E3:CC:47:43:F0:8A:23:C4:8C:B7:79:95:91
Authority key identifier: 82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1
Certificate issuer:       /CN=822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1
Certificate serial:       0AB926D072200E0F9955F9C054C7701FB57F9627
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft
Manifest number:          0106
Signing time:             Mon 17 Feb 2025 07:25:08 +0000
Manifest this update:     Mon 17 Feb 2025 07:20:08 +0000
Manifest next update:     Tue 18 Feb 2025 09:13:08 +0000
Files and hashes:         1: 822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.crl (hash: bL1/g4/8jL9kudcdBL1kEut3CEecKKUblB8FloY5yLU=)
                          2: 3134332e3230382e3232302e302f32322d3234203d3e20323635313331.roa (hash: OHmkoiwBsAjdZNjWDkJJVrPxC4XWCZU5iXM8akCS77I=)
                          3: 323830343a326230343a3a2f33322d313238203d3e20323635313331.roa (hash: B+hLJWuHzZp9IqF7knTR+OFbDOc6f4EiS/vVFMrHjuE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b9:26:d0:72:20:0e:0f:99:55:f9:c0:54:c7:70:1f:b5:7f:96:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1
        Validity
            Not Before: Feb 17 07:20:08 2025 GMT
            Not After : Feb 18 09:13:08 2025 GMT
        Subject: CN=546B3EDCC18642E3CC4743F08A23C48CB7799591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:ac:18:56:7d:63:8d:e9:0b:dd:e5:bd:3c:
                    ec:ea:fd:5d:ab:6e:6f:4c:5a:4a:53:5f:58:83:9f:
                    6c:ca:3f:f6:c3:36:fc:34:24:18:3f:3a:bf:21:39:
                    07:b8:cd:1d:00:cf:1c:ab:6c:95:66:20:3a:0f:8e:
                    bb:e8:bd:78:bd:57:37:cc:7e:92:73:89:67:3e:be:
                    7f:1e:10:87:2c:43:dc:44:fa:24:0e:6d:5d:0f:bc:
                    ba:3f:eb:b5:c4:72:29:68:88:9d:35:f6:8d:b1:21:
                    61:71:d0:46:71:d8:91:97:3e:be:d7:c0:a0:43:55:
                    c1:b9:da:6a:3c:7c:4c:ee:87:bf:df:c7:7d:8b:cb:
                    30:65:b9:76:07:22:3d:de:d0:74:d2:16:3e:5d:5b:
                    ca:72:9d:65:a2:b3:9d:0a:b5:80:ce:9b:2d:d6:01:
                    6a:ad:74:f6:05:6c:ee:43:9e:34:00:9b:d8:71:a8:
                    31:75:df:3e:3b:0d:88:45:72:a2:22:61:f0:dd:51:
                    c3:5f:22:99:5d:b0:8f:b9:f8:d9:8f:ef:27:e5:e3:
                    2c:50:f5:e2:c1:88:ce:ca:f8:70:15:7f:68:7c:3c:
                    fd:e2:ea:10:1e:80:ba:2b:98:53:3d:40:a2:a0:a0:
                    a2:fc:fd:6f:23:2d:a2:0a:e9:06:68:7e:57:17:da:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6B:3E:DC:C1:86:42:E3:CC:47:43:F0:8A:23:C4:8C:B7:79:95:91
            X509v3 Authority Key Identifier:
                keyid:82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:89:28:da:ad:0e:8a:e4:23:dc:9a:d0:53:03:7f:6e:b5:a0:
         92:83:12:e3:0c:85:1a:6a:ad:76:f6:39:53:e3:17:ce:91:15:
         b2:e2:ef:16:c1:c8:26:39:a3:e6:78:e3:75:c2:37:b0:72:38:
         8b:3d:bd:77:8f:4e:f6:49:8d:4b:36:ac:39:83:76:8f:60:e0:
         7e:36:59:bd:c7:ef:79:ca:f8:6f:93:d0:c6:87:f1:75:be:3a:
         c3:5e:98:20:46:91:07:50:a8:dd:ac:69:23:ca:8b:fa:d5:5a:
         3a:c4:33:42:44:50:a1:e2:70:5f:2c:98:c5:0e:06:63:db:9e:
         a2:ee:c5:4c:53:82:c8:8e:82:2d:78:80:cf:7d:b8:e6:0f:a3:
         2c:38:b4:c8:4c:c8:bd:de:a8:7d:5a:16:21:ac:3d:48:c3:5a:
         f6:91:dc:f2:84:30:24:e1:93:b6:11:23:c9:90:77:49:47:d7:
         2a:c4:ca:84:f2:f8:cb:95:29:37:8c:91:01:01:ef:c0:8f:c0:
         47:4d:e5:2a:f1:ca:29:a1:8f:44:28:4b:d7:d7:fc:b4:da:27:
         08:20:0c:ba:be:a7:c8:30:a4:5d:7c:59:42:fd:d4:74:9a:72:
         a7:2f:c5:65:4a:8f:f3:2f:12:b4:0e:07:14:0e:5c:e2:aa:59:
         9b:ee:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:35 2025 by rpki-client