Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft
File:                     DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft (raw, json)
Hash identifier:          2Ew3R79N3LGCxQdwqGCxV+opUIOW4ugcaGozfDfRd8Y=
Subject key identifier:   65:30:9F:AC:AA:AA:5D:CC:EC:57:69:54:23:3C:C6:D3:9F:6A:06:1E
Authority key identifier: DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E
Certificate issuer:       /CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
Certificate serial:       0532256CE02B4562BE32C567F4879C45AB8C10C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft
Manifest number:          02A1
Signing time:             Tue 19 Aug 2025 11:52:39 +0000
Manifest this update:     Tue 19 Aug 2025 11:47:39 +0000
Manifest next update:     Wed 20 Aug 2025 13:41:39 +0000
Files and hashes:         1: 3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa (hash: L99XYUP5oV0Ua8IXbhOxjG2KImspryv7eBOAGPXf+M4=)
                          2: 323830343a323766383a3a2f33322d3438203d3e20323633393332.roa (hash: T7nYDmCeag0z+Va+sZOdCJrB50L9dlVkTRXGy4aqYLA=)
                          3: DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl (hash: ltCFeCIUwl80pIbVndvviDzgabY7aJvO9YDOfswY8mY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:25:6c:e0:2b:45:62:be:32:c5:67:f4:87:9c:45:ab:8c:10:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
        Validity
            Not Before: Aug 19 11:47:39 2025 GMT
            Not After : Aug 20 13:41:39 2025 GMT
        Subject: CN=65309FACAAAA5DCCEC576954233CC6D39F6A061E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:d8:f4:96:4c:1b:b9:19:de:ed:59:dc:06:
                    df:fb:d5:92:2d:9a:e8:6b:bb:b0:5c:a0:84:ae:46:
                    9a:a7:80:aa:30:b6:36:1a:69:6b:e6:fa:c9:2c:2a:
                    21:f7:30:66:c9:0a:ae:2e:ed:1e:9a:11:73:81:fc:
                    cf:92:35:2e:ac:80:66:0e:1d:8c:bb:87:13:c3:7f:
                    25:72:5a:54:7b:a3:19:9b:bc:6a:5c:32:4f:59:31:
                    32:01:51:f1:60:fc:f5:e4:e8:7a:f9:7f:2c:e3:79:
                    c6:6a:ce:ed:0d:51:5d:44:6c:6e:8f:44:dd:c3:37:
                    5e:49:95:50:9a:57:3e:30:2e:14:48:db:a7:07:18:
                    70:a8:00:51:cf:ee:f7:4f:69:a8:03:92:44:3a:1f:
                    e6:01:bc:4d:01:52:a0:6c:03:6d:a2:51:d6:13:92:
                    5f:56:7e:11:6e:51:92:5e:74:e0:e3:c6:5f:26:90:
                    70:26:f2:53:fd:3b:4b:d9:ab:64:35:4e:72:64:6c:
                    d0:43:17:9a:cf:76:22:c0:63:ed:b6:6b:e6:8a:74:
                    cc:c9:da:52:3c:82:2d:b2:fc:a5:f2:27:72:a4:3f:
                    ca:cd:b3:3f:a5:8e:a6:d0:52:64:35:8e:61:cb:e0:
                    31:ec:d2:13:03:88:8f:7b:ee:55:3f:82:94:7f:8c:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:9F:AC:AA:AA:5D:CC:EC:57:69:54:23:3C:C6:D3:9F:6A:06:1E
            X509v3 Authority Key Identifier:
                keyid:DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:0a:fc:d9:8a:cd:f9:e6:2a:7a:52:07:0d:e8:73:72:90:
         e5:bd:5a:ba:58:48:f0:e7:7d:c3:6e:94:f3:0d:f5:88:b6:18:
         6d:6e:a3:58:32:0a:c3:84:84:48:f9:19:4d:82:c6:26:73:41:
         31:cf:b2:a8:30:b5:56:f9:5c:b2:c4:0c:76:5f:91:01:69:2e:
         6c:47:76:8d:4a:fd:13:70:55:4b:68:6c:03:ee:c2:70:cb:6b:
         ae:69:af:71:62:a4:35:72:bb:37:b1:a5:05:40:e6:2b:a0:c6:
         fa:34:9d:70:7a:8b:11:12:f5:06:a0:25:d9:cb:47:5e:7d:68:
         db:96:2f:93:29:87:d3:8f:c9:e3:3f:dc:83:13:7b:92:3e:05:
         62:22:d5:46:24:a6:69:9e:35:67:3a:f7:83:46:52:89:c4:9f:
         aa:40:6d:87:a0:7b:0a:74:8a:87:00:92:71:6a:67:99:6a:0c:
         0c:f4:cd:bd:c4:cb:df:6a:0b:a1:bb:8d:33:48:36:b3:58:3c:
         a0:82:97:88:1d:67:ce:65:3f:ca:30:94:3a:a1:68:fe:65:5b:
         4f:38:90:fd:ed:30:e3:37:46:e0:19:30:bf:0b:8b:b4:73:df:
         06:16:1e:0d:29:af:00:2a:06:93:b5:e1:07:b0:14:c3:af:9c:
         ee:12:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:00:57 2025 by rpki-client