Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
File:                     DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json)
Hash identifier:          n/Y2pw9QPNfbjlWPqzmaF5pTJMkLPF9YUms3Y3B8guw=
Subject key identifier:   76:53:6D:89:32:82:54:7C:3F:87:E8:00:BA:CE:B9:05:1D:CD:86:71
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Certificate issuer:       /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial:       0A825D1E46AFA0E3845AC356CB138E68AE24B0F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
Manifest number:          0102
Signing time:             Sun 19 Oct 2025 10:09:37 +0000
Manifest this update:     Sun 19 Oct 2025 10:04:37 +0000
Manifest next update:     Mon 20 Oct 2025 14:04:37 +0000
Files and hashes:         1: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: B84PGNyqTmdAwgNI/pLfbBalNXoUw3whkixqNXSA0yg=)
                          2: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (hash: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=)
                          3: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=)
                          4: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=)
                          5: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:82:5d:1e:46:af:a0:e3:84:5a:c3:56:cb:13:8e:68:ae:24:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
        Validity
            Not Before: Oct 19 10:04:37 2025 GMT
            Not After : Oct 20 14:04:37 2025 GMT
        Subject: CN=76536D893282547C3F87E800BACEB9051DCD8671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4e:0b:2e:1c:91:d4:df:6b:75:da:d8:33:ed:
                    bf:ec:38:ca:cd:31:fd:06:93:d6:61:e3:af:e1:e5:
                    92:9c:c9:39:ed:21:bb:a1:36:dd:d9:6e:af:73:ad:
                    74:64:3e:b7:0f:2a:5b:a6:07:ae:df:93:da:f5:8c:
                    ff:0d:43:86:3c:52:58:7a:13:5e:b9:07:b9:6e:ec:
                    65:da:28:cf:85:fe:fa:3c:4e:b5:46:a4:1e:b7:a0:
                    36:d1:66:1c:df:6a:0c:ce:a1:bb:d2:89:34:56:a6:
                    1f:30:9a:d8:e2:bd:98:2c:9e:07:83:03:57:9e:64:
                    cf:f6:38:f7:15:c8:28:30:1b:64:cf:87:50:09:2d:
                    2f:45:ec:66:d9:7e:e0:63:f1:9d:1e:3c:fa:6a:cf:
                    3d:93:2b:fd:6b:e3:03:bd:16:15:a2:db:4f:d4:7f:
                    54:a1:fb:2c:0a:ea:95:41:07:00:1d:96:98:1c:1f:
                    57:56:41:86:d8:c1:d3:26:5f:cd:38:16:72:77:7c:
                    8f:aa:4c:f6:ba:54:0b:98:d6:0f:bb:4c:dc:11:1f:
                    2b:08:58:99:b2:17:07:f0:d1:57:64:66:7d:26:b1:
                    22:fd:c2:75:ce:5f:01:81:74:26:f2:4b:02:b8:b5:
                    7d:e0:16:ca:01:b2:74:7f:21:7a:80:5e:d1:89:ac:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:6D:89:32:82:54:7C:3F:87:E8:00:BA:CE:B9:05:1D:CD:86:71
            X509v3 Authority Key Identifier:
                keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:71:f2:b6:18:9c:8e:2d:2d:a5:68:2f:fe:93:f6:ac:d9:
         43:0c:a3:6a:f3:a1:91:fb:e9:2e:da:7b:b1:c9:47:47:7c:ac:
         3b:00:b1:96:30:0b:f7:df:43:fd:32:06:d0:55:8f:87:da:47:
         91:24:a9:33:4a:88:f2:8e:34:d6:25:de:6f:94:b6:74:55:89:
         68:a3:44:58:b9:c7:e3:f6:98:9d:4d:79:b8:20:6f:cb:a8:82:
         c9:a3:56:bf:f7:34:5a:72:be:12:c1:28:77:0d:8f:15:e7:f8:
         10:1c:74:5d:42:5a:c8:8f:3e:23:bf:d9:cb:70:fa:e6:19:7a:
         34:63:75:a7:bb:ab:7a:01:22:5a:26:0a:ee:45:21:d9:9f:3a:
         a1:b0:54:4e:91:34:9d:51:35:38:1d:47:20:f6:a5:1e:79:29:
         0f:81:4e:53:df:21:6f:1e:5a:66:16:19:08:7a:e2:4f:a8:c8:
         e5:76:6f:23:e0:ba:91:c1:8d:ae:42:ed:75:e4:45:db:ee:da:
         89:6c:72:db:f2:dc:ff:40:46:97:76:54:ef:12:00:d3:5d:5e:
         1f:20:db:a2:c6:b1:f0:e0:90:0a:96:d5:61:37:74:02:ea:8b:
         fa:22:8f:8c:10:4a:0e:4f:d0:64:09:1d:7f:bd:74:d5:f3:2f:
         7e:5b:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:54 2025 by rpki-client