Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
File:                     4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json)
Hash identifier:          hjchmJVUWe3zBGken4R+0e/yK/rWBBSqyKE7BeSFKco=
Subject key identifier:   F3:50:80:75:6E:58:05:EB:87:CB:86:F9:6C:CB:07:8E:02:5A:69:73
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       5F19FD5AF1AE8A0B1C6EC646B49D3135C013F014
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
Manifest number:          0170
Signing time:             Mon 17 Feb 2025 08:18:47 +0000
Manifest this update:     Mon 17 Feb 2025 08:13:47 +0000
Manifest next update:     Tue 18 Feb 2025 10:47:47 +0000
Files and hashes:         1: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: k0/49kGR9JuEpmJeFLLwfdMAwygF5WVYUG1AtgLfsHE=)
                          2: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: GNeDmm0qcfygBaxMiayV6uq32HK4LVVzSQf3o/etWU0=)
                          3: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (hash: D4LFZh5TEkJX8WwbEQ6sdmD+bJCKQadVtkf7Gb95RLo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:19:fd:5a:f1:ae:8a:0b:1c:6e:c6:46:b4:9d:31:35:c0:13:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: Feb 17 08:13:47 2025 GMT
            Not After : Feb 18 10:47:47 2025 GMT
        Subject: CN=F35080756E5805EB87CB86F96CCB078E025A6973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:ee:3a:41:a7:53:eb:08:c4:4b:9c:22:80:
                    6c:16:da:8d:b5:d4:3d:3a:e6:01:4f:ac:36:76:cb:
                    c2:f5:f3:7a:98:95:2e:44:d2:9c:16:4a:91:c6:b9:
                    ad:5f:85:0c:e6:11:a8:f8:12:8f:a2:b5:95:93:49:
                    d5:c7:87:ea:40:d8:e4:d1:b2:17:60:93:12:46:1e:
                    f3:75:f7:68:31:24:85:f3:ce:e0:70:23:40:e9:62:
                    26:6a:97:81:4a:c4:e3:ee:14:d8:bb:07:57:00:29:
                    99:ba:11:d9:6c:08:a3:e3:c8:3b:29:11:a7:08:35:
                    28:f1:b5:b1:df:fe:7e:c0:03:0d:92:80:f8:1e:40:
                    12:4f:81:37:c7:64:9d:98:84:5e:c4:e2:29:a3:f3:
                    23:1a:c1:ae:19:6a:f4:8c:ba:27:2b:c4:8c:55:7d:
                    5a:95:3f:a7:70:54:b9:1e:7a:ca:a9:4b:14:35:4b:
                    2f:5d:ea:a8:64:26:bd:38:16:51:a9:85:fe:bc:56:
                    11:eb:2d:50:92:a2:0f:73:74:18:57:52:1f:bb:28:
                    8d:9e:66:91:b6:11:66:0c:74:9b:70:15:73:ac:5e:
                    db:3b:80:7c:36:0d:35:13:7c:e2:bb:cf:80:40:91:
                    f4:7b:a2:d3:96:b9:6a:f6:ad:d1:80:3a:bb:6a:43:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:80:75:6E:58:05:EB:87:CB:86:F9:6C:CB:07:8E:02:5A:69:73
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:73:a7:ef:9e:47:70:99:a8:b2:52:05:9a:64:a4:ef:77:
         49:be:35:68:55:b7:28:04:1c:e7:11:06:00:cc:e7:0c:aa:48:
         ec:13:cc:4e:df:39:73:69:ab:12:52:1e:a1:c8:5a:e9:9d:c5:
         09:86:8d:b1:5f:38:f3:ba:e7:c5:fc:aa:04:11:d9:d1:6a:03:
         8e:a0:62:02:55:21:41:7b:88:c7:0e:b4:4f:b1:63:3c:86:82:
         3f:f8:4f:35:7a:f6:ca:2b:3c:81:e1:6b:43:4f:70:a0:9a:dc:
         18:f1:d5:12:34:84:5d:66:1e:82:ad:05:96:b3:28:a8:78:d1:
         05:f6:22:ab:b9:61:ee:6a:06:14:4f:8e:47:bc:b3:14:d0:bb:
         00:87:8e:4c:e8:1f:dd:5f:2a:33:2d:42:d7:e1:c8:0b:4a:60:
         0d:a0:94:de:fb:c0:4e:3c:77:a4:cb:62:8d:60:f7:f6:c5:b3:
         2e:76:96:1c:f5:13:f2:45:86:fb:a3:42:4f:51:96:b6:44:c6:
         45:44:80:f6:45:e5:b7:70:45:32:86:9a:f6:5e:ee:7e:df:a0:
         ae:7c:00:c0:97:71:86:36:1a:ef:99:78:e6:26:a7:74:c6:00:
         c4:45:25:75:61:45:b6:ef:9e:73:66:ab:7d:d7:fc:3f:61:89:
         19:32:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:06 2025 by rpki-client