Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft
File:                     354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft (raw, json)
Hash identifier:          dc1O2AZ5D1I/7vCPvSRuLfzJpGMhSbkikeKWgpkYk/w=
Subject key identifier:   A5:AD:95:36:FF:45:E5:84:A6:B4:DF:2B:B9:82:BB:08:ED:09:37:D6
Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84
Certificate issuer:       /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
Certificate serial:       1650790838DD067FDE6EA9F1B670407FBB8A1269
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft
Manifest number:          0174
Signing time:             Fri 17 Oct 2025 01:21:15 +0000
Manifest this update:     Fri 17 Oct 2025 01:16:15 +0000
Manifest next update:     Sat 18 Oct 2025 04:17:15 +0000
Files and hashes:         1: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (hash: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg=)
                          2: 3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (hash: OE04vF3otJ8I3Zw+nN0FQbaJuoDxiyn1dU57jIWzqqM=)
                          3: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl (hash: uTAeGuJrDfhlocjVC+NeAiEiQnEvFLdL3nww0Ko6yoA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:79:08:38:dd:06:7f:de:6e:a9:f1:b6:70:40:7f:bb:8a:12:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
        Validity
            Not Before: Oct 17 01:16:15 2025 GMT
            Not After : Oct 18 04:17:15 2025 GMT
        Subject: CN=A5AD9536FF45E584A6B4DF2BB982BB08ED0937D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:9c:a0:39:70:9f:80:2f:5f:67:e2:c8:d7:
                    61:da:f5:aa:9e:36:73:5a:25:93:3a:bd:3c:9e:0b:
                    1a:ad:7b:c2:0a:43:b8:a6:62:4e:2a:8e:53:2e:e7:
                    68:d1:57:51:e1:77:8c:23:4b:db:83:22:a6:84:37:
                    56:ce:99:b5:31:50:c7:09:d3:35:e1:66:23:e0:a8:
                    92:bc:c9:ac:65:1c:ca:85:fb:e2:d1:c8:99:37:19:
                    11:c1:b6:56:bf:6b:66:10:2f:d2:0c:04:5d:72:f2:
                    e6:7f:b0:54:1b:5a:0e:c3:ab:ad:89:f8:7e:d8:19:
                    c7:0f:19:3b:98:13:ff:7a:b2:86:14:54:15:2c:f0:
                    b8:15:26:a2:c2:7a:a1:07:72:85:94:01:69:f2:dc:
                    98:24:9b:73:7a:e5:8e:c8:a0:b0:d8:80:4b:4c:ed:
                    b6:fc:b1:92:75:37:7f:1c:33:18:b7:2f:8d:89:8f:
                    ca:ca:ea:6b:dd:f9:f4:26:35:ff:36:08:21:1f:0a:
                    4b:26:a1:8d:dc:a0:01:79:c4:87:bf:48:1e:fb:85:
                    97:11:55:a1:c7:81:bf:95:18:dd:1d:e7:c8:6b:b8:
                    6b:cb:17:3c:9f:c1:8a:9c:7f:63:c7:b2:d0:d8:08:
                    f8:4b:27:f7:4f:1f:6c:96:25:3f:b2:e4:63:46:81:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:95:36:FF:45:E5:84:A6:B4:DF:2B:B9:82:BB:08:ED:09:37:D6
            X509v3 Authority Key Identifier:
                keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:d5:d3:91:4f:6a:fe:a9:78:67:2e:8f:80:b6:82:19:21:
         be:d8:22:94:a3:f8:cd:67:3c:30:9a:a7:aa:08:a3:9b:97:aa:
         85:41:b0:39:2f:1e:21:d7:20:d1:1c:12:f2:48:6e:63:fd:2e:
         4c:71:13:b3:6d:ea:29:0d:c9:53:03:5f:db:05:2a:04:ec:7b:
         72:ef:ee:d1:e0:ee:88:0c:92:b4:59:db:e2:0e:b2:22:0c:b4:
         4a:54:81:5a:58:bf:55:b5:c0:a6:27:b5:27:7e:2c:30:0c:c0:
         4d:c1:d3:1b:91:32:2e:66:49:30:71:48:3a:df:fe:24:85:9d:
         ff:4a:f6:8d:c2:7f:0f:a2:27:61:74:0d:4c:80:9e:4a:ef:35:
         e9:ae:fb:19:b5:f1:ec:3a:8a:d8:65:59:79:27:41:60:6a:24:
         f2:58:46:3f:0b:b9:e1:be:3a:d4:a7:68:0b:31:9c:03:98:d4:
         a4:17:bf:b1:50:34:96:f4:6f:04:2c:b4:66:9b:af:53:98:af:
         87:1e:d3:1c:6c:4c:4d:98:8f:92:cf:1b:3c:df:78:dc:85:8c:
         48:32:b4:46:76:c6:c0:98:82:72:bb:bf:71:e9:26:5d:2e:5d:
         52:e8:9c:30:79:e1:ba:e5:2e:06:d2:7d:46:02:96:a1:ce:b3:
         18:e5:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:35:04 2025 by rpki-client