Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft
File:                     D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft (raw, json)
Hash identifier:          d2WQlGZ+xqEobUZV1xOa3SBoDYgzcFdhaRgCODV0Zp8=
Subject key identifier:   C7:D5:C7:1B:1E:C8:95:07:45:2E:42:5D:E6:F0:1B:B4:B7:8E:D7:C3
Authority key identifier: D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD
Certificate issuer:       /CN=D2A9518C5D33313C382F48AFC051DC6CFC877EBD
Certificate serial:       6A4D158511449EB1E79EB19BCC94327A72F9D2BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft
Manifest number:          28
Signing time:             Thu 16 Oct 2025 05:54:42 +0000
Manifest this update:     Thu 16 Oct 2025 05:49:42 +0000
Manifest next update:     Fri 17 Oct 2025 08:39:42 +0000
Files and hashes:         1: 34352e3137322e3234342e302f32322d3332203d3e20323638373937.roa (hash: j9o3BIVMz/8TM/7c9X3WgYVwqYqYLEV/vSUSv2TCIS0=)
                          2: D2A9518C5D33313C382F48AFC051DC6CFC877EBD.crl (hash: RVhONWpWxJnetI3syVhEuZmPq9YSwaaXnQ5lV1nQ0Gw=)
                          3: 323830343a356163633a3a2f33322d313238203d3e20323638373937.roa (hash: dOmL/+rdYfNPZaOkiG0zB1s2DqY/5q+Nf4dxVmUKuvM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4d:15:85:11:44:9e:b1:e7:9e:b1:9b:cc:94:32:7a:72:f9:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A9518C5D33313C382F48AFC051DC6CFC877EBD
        Validity
            Not Before: Oct 16 05:49:42 2025 GMT
            Not After : Oct 17 08:39:42 2025 GMT
        Subject: CN=C7D5C71B1EC89507452E425DE6F01BB4B78ED7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:af:a5:67:36:84:ab:fa:f4:f0:9a:00:7c:
                    47:88:cd:d1:03:65:4b:30:ba:6f:2c:f8:bc:6d:97:
                    0e:66:26:37:14:33:e6:b6:e0:84:e1:db:2b:ef:34:
                    29:83:25:67:fd:b8:25:3b:e6:97:52:44:53:3b:82:
                    ac:88:2e:86:a7:c2:3c:d9:52:da:2b:a9:21:c8:d1:
                    73:69:06:9e:c9:7e:af:12:3d:59:7b:29:23:1a:0f:
                    3a:26:b0:ea:d4:28:8c:0f:72:94:31:1c:84:50:4e:
                    a4:b7:de:a9:7f:4e:83:c0:af:17:49:34:43:51:11:
                    77:24:c2:8d:4e:35:2d:07:46:65:00:ec:b6:43:93:
                    6f:ae:6a:d8:2f:85:2c:d9:5e:53:48:ed:72:5a:73:
                    79:c8:79:82:be:cf:cc:29:8a:a1:b5:23:67:ce:5b:
                    1e:e4:48:06:00:4a:e3:2f:8d:73:5c:1a:ee:54:c0:
                    5b:dc:17:73:c5:a7:8a:aa:13:11:8a:8a:0c:63:0b:
                    e1:5e:c5:38:ec:a5:a0:bc:2d:e4:5f:79:1b:35:46:
                    56:67:b2:60:d5:0e:f4:18:f5:d6:8e:5b:2c:c2:6b:
                    1d:be:de:2e:27:52:27:66:52:6a:38:f7:a9:b7:59:
                    22:b8:2a:0c:ce:9b:71:ed:df:88:41:6d:fd:30:db:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:C7:1B:1E:C8:95:07:45:2E:42:5D:E6:F0:1B:B4:B7:8E:D7:C3
            X509v3 Authority Key Identifier:
                keyid:D2:A9:51:8C:5D:33:31:3C:38:2F:48:AF:C0:51:DC:6C:FC:87:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/D2A9518C5D33313C382F48AFC051DC6CFC877EBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:1f:b5:27:6f:72:a1:99:12:4c:fc:30:d8:fb:a5:50:63:
         b9:11:a0:73:22:e4:98:67:74:ce:7c:7c:2e:95:d2:36:ca:71:
         81:60:d9:11:3e:fd:09:3f:c9:36:3b:07:1e:13:68:a7:86:0d:
         17:59:be:cf:f6:e0:5b:39:68:ec:b0:38:30:06:07:d0:fb:cb:
         38:5e:8c:f9:7f:fa:d0:79:c9:8b:45:66:d4:9d:d1:72:8c:c1:
         6a:9a:76:f2:f2:34:60:4e:e4:9e:9e:a6:8b:39:5f:67:15:7f:
         98:41:f8:53:a6:04:45:6a:6b:ed:27:17:f7:b6:b2:a8:17:6f:
         bf:9c:aa:ff:08:07:39:2a:06:52:64:59:65:b3:bb:9a:d4:ee:
         71:7e:52:a4:72:51:85:54:b0:44:06:a0:6c:9d:63:35:75:98:
         22:1c:00:15:8f:3a:f4:11:cf:7a:d1:8d:52:c1:e7:73:ff:42:
         e4:f5:00:32:73:20:fe:2b:77:20:ea:5f:c9:c1:c5:48:05:f8:
         d7:23:cd:9f:d5:84:c0:fb:8a:bb:c6:b6:82:15:2e:f9:45:8f:
         20:d9:25:6c:38:25:a1:9b:bb:d4:ba:fe:4b:79:e5:15:ab:4b:
         bd:37:23:79:b8:69:4c:0f:ed:99:2a:b0:ca:1e:9d:7b:54:d1:
         e5:45:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----