Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft
File:                     8B49F9344E05C9F966C6027F79FC469130EC971D.mft (raw, json)
Hash identifier:          AIFFLjtYjAR+BnRQo48gSheu6d8nErIv9CzVL9PuLWA=
Subject key identifier:   0A:7C:CE:85:3F:B7:16:BB:24:09:54:B3:B0:19:33:F8:5B:6F:BE:AE
Authority key identifier: 8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D
Certificate issuer:       /CN=8B49F9344E05C9F966C6027F79FC469130EC971D
Certificate serial:       3504F08088582C82CB0B6E82BD79A4A6553D10A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft
Manifest number:          02B8
Signing time:             Sun 19 Oct 2025 04:53:37 +0000
Manifest this update:     Sun 19 Oct 2025 04:48:37 +0000
Manifest next update:     Mon 20 Oct 2025 08:31:37 +0000
Files and hashes:         1: 8B49F9344E05C9F966C6027F79FC469130EC971D.crl (hash: BnnPZ7uvfKKcLVvhurtbI0vZCpudZBUQf3hnFHZUMPM=)
                          2: 323830343a6430383a3a2f33322d3438203d3e20323632333131.roa (hash: fwRndifyD+xN/QptNGb/VcVXux1jh/Z/5A4iQ5xtgD8=)
                          3: 3137372e3132342e302e302f32312d3234203d3e20323632333131.roa (hash: D2e3vUPo1AuVW0lvksa9k9rlYcFaKR8MsWLS9Iaxla0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:04:f0:80:88:58:2c:82:cb:0b:6e:82:bd:79:a4:a6:55:3d:10:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B49F9344E05C9F966C6027F79FC469130EC971D
        Validity
            Not Before: Oct 19 04:48:37 2025 GMT
            Not After : Oct 20 08:31:37 2025 GMT
        Subject: CN=0A7CCE853FB716BB240954B3B01933F85B6FBEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:ac:57:8d:68:ae:17:87:63:c1:df:d3:0e:
                    50:1b:6a:06:aa:07:f9:96:09:6b:be:94:1a:d1:e2:
                    0f:0e:a4:e7:10:9d:2c:62:6b:92:a3:ed:23:25:54:
                    c8:e7:52:7c:2d:48:49:23:7c:79:a7:a8:93:8a:60:
                    d5:d0:b4:0b:50:06:c2:b9:80:f7:4f:9d:cc:fb:b6:
                    73:fc:8c:b0:22:ea:e8:03:dc:e2:53:a8:39:fa:97:
                    22:c2:ba:23:6f:e1:2b:22:ab:c6:64:a1:5d:1e:22:
                    4f:6a:f0:d1:7c:50:55:9d:44:69:a8:14:f8:c1:4e:
                    c4:1a:73:c1:5d:42:d7:d0:7c:b1:6b:0c:8e:7a:27:
                    1e:9c:43:be:b4:70:12:5d:18:0d:ab:b5:39:32:37:
                    9d:d5:d5:18:16:3c:48:40:e3:91:29:6e:d2:3e:e6:
                    96:9c:96:3b:49:f5:a9:b9:28:e0:6b:d8:2a:ee:ea:
                    b4:51:b4:2a:6c:7d:71:76:da:9c:d2:7e:86:31:87:
                    46:61:91:41:bf:a4:54:86:d4:22:c2:0d:45:67:48:
                    4c:df:32:31:a8:c5:c0:b6:cb:7e:e4:ed:0e:a6:c6:
                    9a:aa:6b:d5:ad:41:01:06:d2:89:d5:ae:a9:f7:22:
                    c7:48:33:a1:47:f8:05:5e:16:20:5b:bc:75:ad:17:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7C:CE:85:3F:B7:16:BB:24:09:54:B3:B0:19:33:F8:5B:6F:BE:AE
            X509v3 Authority Key Identifier:
                keyid:8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:b1:ae:42:31:d1:43:96:2b:09:8f:bf:c5:db:2a:8d:b2:
         9b:c5:70:37:72:4f:c3:7e:dd:ec:96:40:2c:d4:4e:e8:1e:3b:
         18:bd:f7:0f:23:08:a8:05:43:e7:c3:9b:71:32:b9:b5:90:d2:
         18:0e:c5:40:e2:86:53:eb:e7:52:28:8b:ab:4c:f9:18:cb:1f:
         53:1c:1c:da:ec:e5:c4:09:87:2b:d0:09:11:97:a2:f9:b2:d0:
         b0:61:21:d3:40:d9:a3:68:e2:ee:3a:91:b8:66:04:1b:c6:20:
         03:d2:0a:36:cd:98:37:16:76:18:7d:c7:eb:4d:ca:05:3d:51:
         b0:d9:33:a2:e9:93:1f:91:5b:39:36:3f:86:4a:76:1a:c5:e4:
         31:ae:80:ca:a5:50:a2:3c:9d:fa:52:1b:79:89:c4:00:b1:66:
         58:95:2c:03:ee:dd:12:e1:68:0b:b8:d1:7b:0b:ef:11:d0:a1:
         69:89:37:2f:64:30:13:76:16:14:8f:04:64:18:30:42:51:d4:
         57:5f:ce:e6:4a:92:0d:d1:2b:59:ae:89:5d:3f:6c:78:a2:a6:
         42:4e:03:85:86:5c:07:1f:65:32:fa:bc:25:a6:58:ab:b4:db:
         da:26:29:16:bc:87:9e:0f:28:1b:b5:08:ea:6f:53:93:2d:57:
         75:1b:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:54 2025 by rpki-client