Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft
File:                     8F91E515016C4617D482162163052E1ABB4B35B2.mft (raw, json)
Hash identifier:          ne9AIug4mpvZkQx4wvwVrn9YvAT8tNC9DH2LYcyCros=
Subject key identifier:   9E:B2:B1:73:18:2F:D4:77:D6:A0:12:EF:06:55:59:47:90:F0:D1:59
Authority key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
Certificate issuer:       /CN=8F91E515016C4617D482162163052E1ABB4B35B2
Certificate serial:       79CFB5228229EAC2CBA02302221CE67851889413
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft
Manifest number:          D6
Signing time:             Tue 07 Apr 2026 18:51:15 +0000
Manifest this update:     Tue 07 Apr 2026 18:46:15 +0000
Manifest next update:     Wed 08 Apr 2026 22:46:15 +0000
Files and hashes:         1: 323830343a343164343a3a2f33322d3438203d3e20323637343539.roa (hash: cbbbeABJ9NLDJEbDdv4N61/lZInNTiYeAX5NeNySgEA=)
                          2: 8F91E515016C4617D482162163052E1ABB4B35B2.crl (hash: MIwvsHpEGIJcF5WVeTB3ync3JxcHb+GzfBALSBAcTKs=)
                          3: 3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa (hash: /G2cxsR4X4qBWNv/KiJY7TQZmL6JoIuPaKjPtYPbUyE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cf:b5:22:82:29:ea:c2:cb:a0:23:02:22:1c:e6:78:51:88:94:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F91E515016C4617D482162163052E1ABB4B35B2
        Validity
            Not Before: Apr  7 18:46:15 2026 GMT
            Not After : Apr  8 22:46:15 2026 GMT
        Subject: CN=9EB2B173182FD477D6A012EF0655594790F0D159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:37:65:03:bc:e5:b8:73:83:02:0c:fc:bc:
                    ac:9c:6d:b6:d8:cc:bd:3b:05:ca:5a:73:4f:81:4e:
                    4a:c5:d4:af:54:3d:b3:05:25:05:05:53:23:bd:8d:
                    e8:65:6b:12:fb:ea:b8:a2:88:d2:df:c3:97:6c:95:
                    3d:57:da:eb:bb:7f:9d:ec:85:dd:48:1e:b0:3b:f3:
                    4e:e2:33:35:51:fc:c6:97:d5:c6:63:9b:35:80:e1:
                    79:bd:a0:a5:e2:6f:41:86:ce:ea:3d:ec:d9:a9:36:
                    a6:5c:d7:5c:4c:c1:0e:6d:e4:8b:27:22:84:7e:e5:
                    ce:5c:ef:ec:49:24:77:df:97:bc:de:cd:a6:64:3d:
                    ea:d2:5e:51:4f:90:ee:d0:41:44:92:d7:e6:b9:56:
                    de:17:06:89:a4:91:3d:b5:6f:e0:a7:15:e1:91:71:
                    04:99:41:1c:81:ee:e0:8e:cb:ea:55:ff:50:46:8c:
                    97:8c:e4:15:3a:af:c5:e5:7f:35:ed:d3:ef:3f:27:
                    1d:1f:db:40:43:ff:de:b4:51:78:e0:ad:91:ea:55:
                    2d:30:9d:a7:7d:29:97:94:47:ab:c3:f6:0c:56:0e:
                    e5:85:3a:ae:9b:98:7f:ed:b1:08:26:37:cc:2e:85:
                    bc:1e:e0:78:c4:3f:74:71:4c:8a:67:8a:fd:ad:aa:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B2:B1:73:18:2F:D4:77:D6:A0:12:EF:06:55:59:47:90:F0:D1:59
            X509v3 Authority Key Identifier:
                keyid:8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:70:b0:ef:e9:85:0a:91:a8:22:57:7d:14:11:e5:55:10:1b:
         6f:32:5c:fc:3e:51:53:85:04:76:52:78:0c:b0:22:9d:4b:00:
         73:0f:0a:db:c4:75:57:b4:ea:07:97:33:6a:6a:cb:23:51:d0:
         e4:8b:30:88:37:2d:79:27:a3:df:27:98:77:56:50:d2:fd:e2:
         d8:b5:a9:6a:ed:68:c0:bf:8a:3f:ca:ce:85:58:4e:dd:1b:f0:
         46:b9:93:4a:ec:88:a2:a4:a3:e4:2e:ca:d9:7b:db:34:a0:59:
         22:92:2a:21:89:25:31:ab:04:33:30:63:a1:9e:63:47:8f:4f:
         c6:10:7b:b2:b1:b3:da:c6:32:b8:f4:1c:62:59:cc:39:72:d1:
         61:61:ea:bf:86:47:95:cc:90:b9:d0:44:f2:66:af:e3:ed:5c:
         31:79:0b:c1:35:a9:bb:6f:e0:fd:5e:2a:cd:f0:a4:44:96:06:
         1b:9d:08:49:9b:69:0d:4e:e0:a3:ae:e8:45:96:e9:54:02:b8:
         5b:2f:7e:40:fc:f3:3f:35:91:b2:b5:40:95:f7:37:f8:4b:5c:
         c7:96:8b:4a:5f:48:23:cf:51:16:37:52:80:fd:1a:dc:0c:4a:
         28:75:2a:a5:6b:49:9c:a4:4a:dd:c4:75:07:62:1a:04:ed:48:
         0c:18:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:15:56 2026 by rpki-client