Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
File:                     6BB5D47779C998D7924924980F54C2E604962CE9.mft (raw, json)
Hash identifier:          aPRo959k0lAJ9Ol7wsg2dKY+/3kuaxxKjKR738Qf4/I=
Subject key identifier:   69:D6:EF:41:C0:23:EB:EF:9F:8E:F8:7C:4F:90:DB:0E:C6:F6:71:2D
Authority key identifier: 6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9
Certificate issuer:       /CN=6BB5D47779C998D7924924980F54C2E604962CE9
Certificate serial:       146C7C75860E197DB7FA8FD200B6308792280315
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
Manifest number:          2B
Signing time:             Wed 19 Feb 2025 07:20:02 +0000
Manifest this update:     Wed 19 Feb 2025 07:15:02 +0000
Manifest next update:     Thu 20 Feb 2025 11:11:02 +0000
Files and hashes:         1: 323830343a333162383a3430303a3a2f33382d3338203d3e20323635303333.roa (hash: FvosGEbiYS3nQ5NCjbCyUYuZOi5HahV6KX+V8/V1URU=)
                          2: 3137302e3135302e3132342e302f32322d3234203d3e20323635303333.roa (hash: 4HkGpGILdI/zyDBfrJs9uMWcV+kltF/aOc6WkLvJFEk=)
                          3: 6BB5D47779C998D7924924980F54C2E604962CE9.crl (hash: JM2jrOEEcNwq+3s4Qa4fkMisOH8bul6/IDaY9DJYUzc=)
                          4: 323830343a333162383a3a2f33322d3333203d3e20323635303333.roa (hash: txX83S7Q6TJKObXEX5nRnfaskb868DEonxqVxcwLWy4=)
                          5: 34352e3233392e3234382e302f32322d3234203d3e20323638333738.roa (hash: lBZZxwvsOth9zpHx2jS326g0kYX8m/j/z3gvRXVZeJg=)
                          6: 323830343a353034343a3a2f33322d3333203d3e20323638333738.roa (hash: wJn+PDrzDnwR2crWbI2lLOhtjU9+2nBIE2psvT+bcrY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6c:7c:75:86:0e:19:7d:b7:fa:8f:d2:00:b6:30:87:92:28:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB5D47779C998D7924924980F54C2E604962CE9
        Validity
            Not Before: Feb 19 07:15:02 2025 GMT
            Not After : Feb 20 11:11:02 2025 GMT
        Subject: CN=69D6EF41C023EBEF9F8EF87C4F90DB0EC6F6712D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:29:47:0d:70:73:f4:bc:9f:87:e1:31:66:
                    7d:1d:a3:66:87:86:64:ad:56:29:e0:42:0f:0e:d6:
                    3c:a2:cc:c9:e2:88:13:59:7e:3e:6f:03:d4:00:66:
                    1a:49:2e:0d:f4:b2:ba:c3:59:4d:07:90:f9:a6:21:
                    ec:d6:db:55:28:bc:84:e6:71:b2:92:43:ed:9e:3f:
                    ae:3c:e8:3d:06:9d:f2:cf:f3:16:a4:6a:2c:3b:3e:
                    1a:9a:c2:c5:5a:30:22:2f:de:89:68:61:c3:9a:27:
                    28:24:c2:0d:f1:9e:00:32:f9:19:f5:0f:0e:df:85:
                    2f:3b:b2:04:ad:65:c3:30:3e:d6:e3:c3:d2:95:14:
                    2a:6c:29:1f:b8:c4:06:9e:14:22:e6:93:12:bc:66:
                    7e:8c:eb:f8:0b:57:0c:4a:b9:ad:25:35:95:cf:2d:
                    09:e0:e8:07:fc:7e:f0:46:52:e2:4f:f6:57:f0:83:
                    84:8d:88:28:e9:ff:42:34:bf:c0:78:ff:3a:91:14:
                    cb:36:78:7a:6f:d3:bb:ce:0b:46:89:d8:39:ad:94:
                    bb:ef:8c:a4:a6:62:70:7c:95:b6:2c:2b:cc:11:44:
                    11:2c:da:86:12:f8:0c:12:d7:28:62:48:61:ba:84:
                    3b:ad:5d:12:a5:f5:da:ec:bb:d8:08:8b:cb:96:be:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:EF:41:C0:23:EB:EF:9F:8E:F8:7C:4F:90:DB:0E:C6:F6:71:2D
            X509v3 Authority Key Identifier:
                keyid:6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:5b:d9:35:e0:75:20:b9:1b:5b:27:68:90:a2:f4:39:6d:
         de:00:dd:d5:a4:8d:78:34:ff:c0:58:04:6c:ec:50:dd:3e:5c:
         18:7d:92:7d:ad:70:d1:3a:b6:ce:6f:8c:b6:1d:c6:65:3d:57:
         78:cb:59:50:8f:de:d7:0b:35:f5:d5:b9:46:fe:2a:0e:3c:f2:
         ae:50:b8:43:0f:d3:ab:f7:f9:72:e8:28:3e:b1:0d:98:2d:da:
         23:15:b0:2d:04:f4:8c:fa:ae:9d:22:8b:da:41:ba:0f:0c:a4:
         19:ec:89:a9:49:35:e7:ea:a3:17:db:ec:e5:ba:5d:c7:cf:81:
         74:b9:3a:9b:b8:81:b8:26:49:2a:59:2e:b5:17:5a:e6:ae:c3:
         05:39:cc:7b:03:0f:af:2c:7a:99:21:7a:1f:6f:6c:99:32:a8:
         8c:71:5b:59:fb:cb:b1:bd:19:f4:56:27:10:3b:12:e3:6a:78:
         fd:a2:72:9a:42:2e:fd:12:b7:ea:78:92:e4:ea:1f:a6:7e:83:
         06:b2:85:91:c4:96:0d:1b:59:da:58:1b:cb:4c:b7:70:ce:24:
         eb:25:48:07:d4:21:36:51:da:36:32:a3:96:87:f4:6a:5e:fc:
         24:14:14:fb:6b:91:e8:03:ab:7e:21:93:d9:20:86:eb:56:42:
         1f:93:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:43 2025 by rpki-client