Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.mft
File:                     52FE8B2C29E327E63BABF04EED6E5F0C56455E14.mft (raw, json)
Hash identifier:          GDVHkVNYArVnbNv4gK1JsYUjbr5NqEVUCV4nQw3gVtE=
Subject key identifier:   A1:56:63:45:F9:F3:B5:2C:83:F4:40:65:27:E9:B6:B2:17:41:55:E9
Authority key identifier: 52:FE:8B:2C:29:E3:27:E6:3B:AB:F0:4E:ED:6E:5F:0C:56:45:5E:14
Certificate issuer:       /CN=52FE8B2C29E327E63BABF04EED6E5F0C56455E14
Certificate serial:       173FE38BA0D7B466BC13685629D959A0BDFC5690
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.mft
Manifest number:          5D
Signing time:             Thu 08 Oct 2026 15:03:27 +0000
Manifest this update:     Thu 08 Oct 2026 14:58:27 +0000
Manifest next update:     Fri 09 Oct 2026 17:36:27 +0000
Files and hashes:         1: 3137392e3130362e39362e302f32302d3234203d3e203532353332.roa (hash: jXnLlSLFnVasE8PH1ECGv3XTGA98yFOSJWbbnIcHHCY=)
                          2: 34352e3233352e38302e302f32322d3234203d3e203532353332.roa (hash: P89NG+PT3YEg/UQ7HoRiQ/bBSBpok6zSo/zw7CLkRe0=)
                          3: 52FE8B2C29E327E63BABF04EED6E5F0C56455E14.crl (hash: IBRGB4WWEbNKh8ZoBQK0+6xwUgZTt+qPtGmvR4sIQKI=)
                          4: 323830343a6466383a3a2f33322d3634203d3e203532353332.roa (hash: bkvMiegcsqvTvNRTV2pyWgRqOWWHA7Fc8q0tHw0aVRU=)
                          5: 323830343a3264383a3a2f33322d3634203d3e203532353332.roa (hash: 4jYmi7olN/68ltybpmSWGmrHFKTuWIcfrl5Ly12ieLA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3f:e3:8b:a0:d7:b4:66:bc:13:68:56:29:d9:59:a0:bd:fc:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FE8B2C29E327E63BABF04EED6E5F0C56455E14
        Validity
            Not Before: Oct  8 14:58:27 2026 GMT
            Not After : Oct  9 17:36:27 2026 GMT
        Subject: CN=A1566345F9F3B52C83F4406527E9B6B2174155E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:1e:54:8d:24:c4:20:92:bc:98:ef:9b:0b:
                    71:f7:65:9e:a9:34:25:73:63:f7:3a:37:e1:42:c7:
                    a0:69:16:9f:d0:ee:a9:12:ce:14:e1:ef:eb:d8:31:
                    2b:ca:44:af:62:84:06:fd:cb:36:68:a2:28:9f:4e:
                    f1:df:aa:f2:d8:5a:bb:2e:1d:f3:d2:39:e6:46:c3:
                    89:b3:f4:4c:fc:5d:d1:1b:37:a7:6a:41:b5:02:58:
                    40:49:bf:f1:9c:a8:cc:e2:7d:42:c4:57:b9:d1:34:
                    6c:2a:06:12:a4:67:1b:cc:3a:77:dc:f4:c4:2f:1a:
                    a2:cd:e2:0a:d2:0d:e0:70:e2:e7:82:ae:3c:23:2d:
                    9d:f7:0c:6e:07:e3:53:a3:dc:b4:fd:8f:81:55:c6:
                    91:4c:c3:7c:d6:71:db:3a:e5:1a:30:8c:02:62:c5:
                    96:88:00:af:aa:a6:b6:fb:c9:54:3b:57:41:5a:e7:
                    a9:95:f7:4b:a7:fa:54:ed:4b:86:db:5e:32:45:13:
                    1a:68:69:f9:4b:7f:91:4f:54:17:67:8a:35:f5:e9:
                    82:c0:8f:58:0c:86:8b:06:c0:c4:f6:1d:a5:b6:0e:
                    dd:b5:3f:ea:96:31:7c:c3:99:62:c2:24:b3:d6:2c:
                    b4:b6:b1:f5:fb:9a:e6:60:ee:63:fe:91:30:af:a4:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:63:45:F9:F3:B5:2C:83:F4:40:65:27:E9:B6:B2:17:41:55:E9
            X509v3 Authority Key Identifier:
                keyid:52:FE:8B:2C:29:E3:27:E6:3B:AB:F0:4E:ED:6E:5F:0C:56:45:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/52FE8B2C29E327E63BABF04EED6E5F0C56455E14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:3f:3e:9c:83:53:3a:82:65:85:86:a7:55:6c:29:19:ef:
         f5:5e:ac:a8:0b:37:3b:da:0f:e4:90:56:94:4c:17:53:5a:5a:
         e5:53:89:61:d3:01:35:44:28:67:82:82:b6:c2:1a:61:38:73:
         ac:85:6a:4a:67:64:d3:a3:8c:ab:bc:5e:e3:65:0b:1a:0e:bb:
         ba:d0:cc:44:dd:38:8f:cc:fa:03:e8:e8:25:ff:03:4c:7d:3a:
         30:52:c1:fd:bf:5b:c2:d4:95:2e:b5:fa:fa:4c:3f:9c:0e:4f:
         34:08:72:4c:51:41:5e:07:ab:a5:b7:f4:c7:8b:b1:35:ee:3a:
         fa:8a:d6:aa:5e:51:e3:61:9e:81:a5:8c:79:0a:f8:12:f3:c0:
         35:cc:0d:c3:df:16:df:5b:f5:77:68:a3:40:e7:16:a4:82:e1:
         56:fe:80:03:4b:a1:2a:16:52:a5:ba:22:fa:7a:1d:9c:9a:55:
         c5:a9:11:42:92:8e:6d:40:26:50:5c:05:57:9a:20:a8:d3:b9:
         9b:b3:05:88:22:a4:b3:8b:78:9c:43:bd:25:6b:3a:7f:e6:09:
         ac:26:e5:c8:b4:c1:8d:ea:a1:3e:24:61:fc:27:0a:4a:46:59:
         fb:09:f8:d5:fd:b1:b6:ee:64:b9:76:07:7a:3e:53:a3:1d:34:
         2d:96:02:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFz/ji6DXtGa8E2hWKdlZoL38VpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGRThCMkMyOUUzMjdFNjNCQUJGMDRFRUQ2RTVGMEM1
NjQ1NUUxNDAeFw0yNjEwMDgxNDU4MjdaFw0yNjEwMDkxNzM2MjdaMDMxMTAvBgNV
BAMTKEExNTY2MzQ1RjlGM0I1MkM4M0Y0NDA2NTI3RTlCNkIyMTc0MTU1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5x5UjSTEIJK8mO+bC3H3ZZ6p
NCVzY/c6N+FCx6BpFp/Q7qkSzhTh7+vYMSvKRK9ihAb9yzZooiifTvHfqvLYWrsu
HfPSOeZGw4mz9Ez8XdEbN6dqQbUCWEBJv/GcqMzifULEV7nRNGwqBhKkZxvMOnfc
9MQvGqLN4grSDeBw4ueCrjwjLZ33DG4H41Oj3LT9j4FVxpFMw3zWcds65RowjAJi
xZaIAK+qprb7yVQ7V0Fa56mV90un+lTtS4bbXjJFExpoaflLf5FPVBdnijX16YLA
j1gMhosGwMT2HaW2Dt21P+qWMXzDmWLCJLPWLLS2sfX7muZg7mP+kTCvpNAnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoVZjRfnztSyD9EBlJ+m2shdBVekwHwYDVR0j
BBgwFoAUUv6LLCnjJ+Y7q/BO7W5fDFZFXhQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01yZWk3Y3M1ZFlZdXFFOFdSTlpRanFVYkRZNG9mcTNlcEd0UTlLc05G
VG8vMC81MkZFOEIyQzI5RTMyN0U2M0JBQkYwNEVFRDZFNUYwQzU2NDU1RTE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkU4QjJDMjlFMzI3RTYz
QkFCRjA0RUVENkU1RjBDNTY0NTVFMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M01yZWk3Y3M1ZFlZdXFFOFdSTlpRanFVYkRZNG9mcTNlcEd0UTlLc05GVG8vMC81
MkZFOEIyQzI5RTMyN0U2M0JBQkYwNEVFRDZFNUYwQzU2NDU1RTE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATCE/PpyDUzqCZYWGp1VsKRnv9V6sqAs3O9oP5JBWlEwXU1pa5VOJYdMBNUQo
Z4KCtsIaYThzrIVqSmdk06OMq7xe42ULGg67utDMRN04j8z6A+joJf8DTH06MFLB
/b9bwtSVLrX6+kw/nA5PNAhyTFFBXgerpbf0x4uxNe46+orWql5R42GegaWMeQr4
EvPANcwNw98W31v1d2ijQOcWpILhVv6AA0uhKhZSpboi+nodnJpVxakRQpKObUAm
UFwFV5ogqNO5m7MFiCKks4t4nEO9JWs6f+YJrCblyLTBjeqhPiRh/CcKSkZZ+wn4
1f2xtu5kuXYHej5Tox00LZYCcg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:07:18 2026 by rpki-client