Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.mft
File:                     2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.mft (raw, json)
Hash identifier:          KcRsr3B0tRXRDNyYSGMOd0HGCBWkuPPcTACQSUNRWDs=
Subject key identifier:   35:A5:E4:E9:B4:A0:CD:25:2E:25:55:AD:1D:A0:CA:41:0E:83:55:22
Authority key identifier: 2F:09:1B:DE:CA:E3:1B:7B:9E:26:B8:A1:82:F3:70:81:E1:F1:F4:CA
Certificate issuer:       /CN=2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA
Certificate serial:       58C466514AD6727F0260E1019FB9E3DBE5FC10E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.mft
Manifest number:          76
Signing time:             Fri 17 Oct 2025 04:21:37 +0000
Manifest this update:     Fri 17 Oct 2025 04:16:37 +0000
Manifest next update:     Sat 18 Oct 2025 07:18:37 +0000
Files and hashes:         1: 323830343a343938343a3a2f33322d313238203d3e20323637313838.roa (hash: /jDEPT1CSkaYIsyKf5vIpqQAuJCZ1wNaMUP1+qANyqE=)
                          2: 34352e3233312e32382e302f32322d3332203d3e20323637313838.roa (hash: z1ZOrBM79InvSD1qku9+It/72JAnnGj4yZiBph4YUnc=)
                          3: 2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.crl (hash: XAz9AHl1FFF7GUKQM0WsMbizrqS5dVxccot/dgwsqPU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:66:51:4a:d6:72:7f:02:60:e1:01:9f:b9:e3:db:e5:fc:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA
        Validity
            Not Before: Oct 17 04:16:37 2025 GMT
            Not After : Oct 18 07:18:37 2025 GMT
        Subject: CN=35A5E4E9B4A0CD252E2555AD1DA0CA410E835522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:a2:e2:0a:d2:08:71:d3:0c:e1:c0:98:1e:
                    4e:aa:a0:15:39:b7:2c:3e:b4:6c:1f:4f:75:cf:1b:
                    db:4b:a9:a2:c2:a9:f7:88:1f:44:94:b2:e2:f1:b3:
                    5a:bf:6c:27:0c:c3:61:3a:4e:bb:a8:63:ab:55:f4:
                    31:2b:6a:5f:a0:a7:b0:1a:a9:8d:13:3f:eb:0e:42:
                    99:ea:1e:58:8f:25:3d:b5:fe:04:a9:1b:72:20:a7:
                    d6:fa:e1:0c:dd:38:e3:77:80:79:0d:cc:13:5a:de:
                    0a:97:3e:06:ed:fc:18:02:e5:44:4c:19:dc:25:67:
                    f6:aa:08:8c:de:4b:ce:6b:68:1f:b5:24:fd:cd:39:
                    91:5f:a4:73:24:5f:4c:58:d9:10:a7:43:33:1f:c8:
                    26:80:8b:f8:2d:e4:07:b7:8d:d3:c5:98:5b:ac:33:
                    e6:39:a5:14:33:c0:1e:fc:d4:a1:85:16:8f:08:a2:
                    da:61:e3:b3:72:13:37:d6:34:86:ee:35:d9:20:0c:
                    7f:0e:4f:67:41:f9:0e:e8:cf:a6:ca:1a:21:35:b0:
                    28:4c:82:53:e0:20:c5:c0:42:a6:37:20:10:a4:20:
                    5b:81:cd:5b:f6:9a:c4:9e:f3:e7:0d:63:24:d1:f4:
                    5b:11:bf:c5:85:04:76:46:ba:8e:d3:0a:6a:56:b4:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:E4:E9:B4:A0:CD:25:2E:25:55:AD:1D:A0:CA:41:0E:83:55:22
            X509v3 Authority Key Identifier:
                keyid:2F:09:1B:DE:CA:E3:1B:7B:9E:26:B8:A1:82:F3:70:81:E1:F1:F4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/2F091BDECAE31B7B9E26B8A182F37081E1F1F4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:71:95:2b:3e:0d:1e:0f:71:7f:f3:0f:33:74:d4:bd:80:dd:
         5b:58:f2:e7:a2:ef:40:6f:f3:22:bd:33:e2:fa:03:80:67:52:
         02:58:df:a3:22:32:b6:2f:ea:ef:d1:40:9a:b9:86:13:9b:e5:
         6c:df:21:a3:9a:b2:e8:82:28:d9:00:f1:0c:88:3d:1c:04:33:
         4d:69:b9:22:4f:04:92:4f:bc:4d:b4:ad:d1:45:e6:36:c9:db:
         9d:f5:de:28:cc:a5:dc:bf:71:cd:77:24:90:f9:4b:ca:90:24:
         56:b9:b9:a6:37:ad:c4:ad:34:c6:64:d5:32:24:6d:b0:4d:b2:
         73:be:39:32:1c:ef:1c:48:a4:a0:0f:cc:0b:81:c1:06:2e:3e:
         c4:f8:92:c2:02:e4:78:38:cb:a5:a0:91:49:44:ff:37:29:15:
         ad:2d:5e:4e:e2:f9:d9:ff:b0:fb:07:1f:fb:f7:43:b0:14:37:
         73:ad:a9:48:cb:bf:cc:7c:ab:58:9e:d0:02:a1:3b:72:eb:e7:
         63:f4:37:44:0f:c8:c6:d3:66:30:36:ac:d6:96:b7:bd:b1:03:
         48:f5:6b:9f:2a:12:bf:be:06:b2:bf:d6:cd:76:c3:07:48:fa:
         73:79:6f:eb:cf:27:df:e5:69:f6:fc:da:01:0b:cd:c5:ac:97:
         b9:f3:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----