Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.mft
File:                     537FBC032732465BE354327393C6D5CE8487C07B.mft (raw, json)
Hash identifier:          rujkmPXNqM2GX3LkAuL5nV0deCKWydAhT3KIF5T3Ai4=
Subject key identifier:   9E:29:0C:E0:D6:47:65:A8:21:C9:F8:A5:C9:E0:E1:0F:F1:04:70:D9
Authority key identifier: 53:7F:BC:03:27:32:46:5B:E3:54:32:73:93:C6:D5:CE:84:87:C0:7B
Certificate issuer:       /CN=537FBC032732465BE354327393C6D5CE8487C07B
Certificate serial:       4EB91794604125A6CD0DEB364F5094C6C543A0D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/537FBC032732465BE354327393C6D5CE8487C07B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.mft
Manifest number:          7C
Signing time:             Thu 16 Oct 2025 23:26:26 +0000
Manifest this update:     Thu 16 Oct 2025 23:21:26 +0000
Manifest next update:     Sat 18 Oct 2025 02:38:26 +0000
Files and hashes:         1: 537FBC032732465BE354327393C6D5CE8487C07B.crl (hash: MNXYHuZAggLYfhsj5xy9xkXd0V/zJ1uuM7hUggl/vjo=)
                          2: 34352e3233372e33312e302f32342d3234203d3e20323638323633.roa (hash: YOQBlpAz1L6H6x+ehmI5rM6DPOHgCvj+OGdbpkNpW10=)
                          3: 323830343a346537383a3a2f33322d3332203d3e20323638323633.roa (hash: 6jCYOmjkcSbRgIPFK1GXp/bVMtn7WpzorVXKcs5nQv8=)
                          4: 34352e3233372e32382e302f32342d3234203d3e20323638323633.roa (hash: fYKMiYtcuJ4DTQMNqpR4UJjWKgBwhLjnPEu755P1mX4=)
                          5: 34352e3233372e32392e302f32342d3234203d3e20323638323633.roa (hash: XOxNy8O3yyNMRI1LzhmScYZstE53aMCAFcdqqNLABLk=)
                          6: 34352e3233372e32382e302f32322d3232203d3e20323638323633.roa (hash: vgeaCDKUqJ55PhS4IGhe7v6NzMg+o8okc+GEMvEGqkI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b9:17:94:60:41:25:a6:cd:0d:eb:36:4f:50:94:c6:c5:43:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537FBC032732465BE354327393C6D5CE8487C07B
        Validity
            Not Before: Oct 16 23:21:26 2025 GMT
            Not After : Oct 18 02:38:26 2025 GMT
        Subject: CN=9E290CE0D64765A821C9F8A5C9E0E10FF10470D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:6b:4b:db:3b:9f:2a:e2:23:31:47:75:cd:
                    a0:9a:df:bc:da:aa:c9:fc:33:c8:a7:15:10:43:7e:
                    00:b1:6b:b7:da:8e:68:69:5f:1e:6f:f9:94:c3:1e:
                    5e:5e:44:ff:07:eb:42:ff:81:e6:51:01:18:df:cc:
                    b1:9f:38:c2:7a:2e:6f:b7:0f:ef:fe:c4:ca:39:bc:
                    4d:d9:85:b4:03:58:1d:d8:56:3b:37:30:2c:e4:41:
                    3b:c4:fa:2d:9b:9a:2d:e8:8b:2e:42:98:2e:f1:a2:
                    5f:33:a3:3c:51:df:ac:04:4e:18:67:fb:32:68:8e:
                    fa:a5:20:12:4f:c2:57:48:76:b7:3b:65:8d:20:b4:
                    fc:45:7c:51:f5:b2:67:38:49:87:71:25:57:d0:2c:
                    94:f5:dd:d8:87:00:38:db:dc:6f:65:f1:a1:3e:b8:
                    33:34:40:67:38:14:9b:ce:fc:0e:ed:87:84:69:23:
                    f3:8d:41:99:cc:11:bc:f6:16:52:68:8d:aa:23:f4:
                    3a:92:2f:4d:b4:ef:01:d5:0b:3a:13:7a:bf:0c:8f:
                    09:36:f6:e7:ad:1b:20:59:6d:20:84:98:3b:43:31:
                    f7:e5:26:64:ad:ff:44:18:58:0c:72:39:3b:51:47:
                    c8:49:1b:04:bd:d7:ec:04:de:d4:34:e7:da:c5:7a:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:0C:E0:D6:47:65:A8:21:C9:F8:A5:C9:E0:E1:0F:F1:04:70:D9
            X509v3 Authority Key Identifier:
                keyid:53:7F:BC:03:27:32:46:5B:E3:54:32:73:93:C6:D5:CE:84:87:C0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/537FBC032732465BE354327393C6D5CE8487C07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/537FBC032732465BE354327393C6D5CE8487C07B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:ec:82:6e:bf:a8:89:d3:d8:ef:27:54:7d:f2:2e:76:46:
         ec:38:cd:a0:5d:85:23:19:65:45:1e:b8:ff:27:ec:fc:2e:02:
         76:2d:be:63:d7:66:b7:bc:51:81:a7:f1:0c:bd:64:00:cd:6c:
         e8:4e:3a:40:dd:74:18:00:56:74:bb:f3:db:0d:bd:02:9c:f5:
         01:27:9d:28:87:82:cd:87:7f:a1:ba:97:9e:f5:e2:f4:6a:66:
         6b:45:0e:07:3e:bc:c5:da:4c:0b:3a:a7:60:d5:48:e6:e7:4d:
         11:ed:b1:2f:4f:9f:53:d8:b9:b0:19:7d:78:ad:16:fb:a0:ff:
         b6:63:8e:e2:8a:1d:8c:43:f7:52:3c:31:60:45:58:94:7a:e7:
         84:ec:54:bf:f7:c2:6a:2f:d0:08:c8:44:e3:e6:b0:84:3f:30:
         cf:80:47:66:db:37:ba:d9:70:20:d4:d0:8e:ae:30:47:d8:09:
         13:85:c9:80:84:f6:a4:f4:1a:55:8a:e3:ec:6a:fe:81:9b:6a:
         25:74:0f:98:e6:5d:27:e8:7c:fe:61:8c:d3:40:6e:8d:24:10:
         12:67:8b:b8:86:3a:57:bc:48:be:ad:45:70:4d:f7:60:d0:77:
         0f:61:f7:cf:f5:19:63:ca:54:fd:ee:06:7b:e3:6d:a7:c7:0f:
         55:8c:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----