Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
File:                     D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json)
Hash identifier:          OcBeJOa7xjzJpi0KBII17i/0CBPkG7TshAqSLnoOkmU=
Subject key identifier:   B8:A4:3E:91:15:8F:1D:16:FE:A6:96:73:6E:E5:CC:14:95:6A:36:EF
Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Certificate issuer:       /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Certificate serial:       1C1E11BBE1F64D45049CFEF00326521015636273
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
Manifest number:          017F
Signing time:             Fri 20 Mar 2026 06:15:51 +0000
Manifest this update:     Fri 20 Mar 2026 06:10:51 +0000
Manifest next update:     Sat 21 Mar 2026 06:17:51 +0000
Files and hashes:         1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: iOgDE7yZcZwhnx5BBIIfgGgNNyZiSENU6eJvtJ+HAMw=)
                          2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1e:11:bb:e1:f6:4d:45:04:9c:fe:f0:03:26:52:10:15:63:62:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Validity
            Not Before: Mar 20 06:10:51 2026 GMT
            Not After : Mar 21 06:17:51 2026 GMT
        Subject: CN=B8A43E91158F1D16FEA696736EE5CC14956A36EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:e7:09:bf:84:9e:56:61:fe:07:a2:ca:3f:
                    4d:ea:a7:75:3d:53:80:d7:35:fe:31:00:75:87:21:
                    e3:c6:e5:05:b2:1d:f6:1e:89:53:63:9b:1b:84:31:
                    78:30:fd:77:de:be:f1:51:83:1a:7e:72:0d:de:52:
                    e4:30:4d:c6:fe:db:5b:8e:a8:b5:49:49:85:ad:35:
                    05:d3:53:e0:66:78:49:4a:a0:db:1a:8f:51:1c:29:
                    4f:81:bd:a0:a8:bf:08:1b:09:39:49:8c:61:5b:f4:
                    4c:67:8f:d4:80:07:f9:5b:78:26:4c:d3:dc:6b:06:
                    5e:d1:de:28:ed:c2:b6:75:44:78:12:7e:0a:eb:75:
                    3c:60:a7:cd:82:f3:8c:8a:6b:74:22:a3:a8:99:3c:
                    3d:85:2b:62:a5:78:46:7b:db:3f:3a:1f:c0:f5:f6:
                    3f:8e:f7:42:a8:46:38:b9:2e:6b:97:28:ff:9b:6b:
                    06:1e:0b:96:21:46:60:76:ba:5f:16:9f:87:0b:06:
                    ef:88:3a:7c:7f:31:79:fe:9b:f1:3d:1f:09:10:d2:
                    7b:a2:5a:8e:0a:3b:0e:2a:9c:d9:50:7a:dd:7c:f7:
                    01:a8:0c:e7:02:b8:ab:69:c7:9f:a0:85:ce:6f:f7:
                    7b:c8:2b:65:9e:e3:de:e5:6c:5f:d5:d4:25:48:1b:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A4:3E:91:15:8F:1D:16:FE:A6:96:73:6E:E5:CC:14:95:6A:36:EF
            X509v3 Authority Key Identifier:
                keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:9d:61:3c:38:8c:da:79:dc:6a:14:0d:0b:83:2f:94:3e:
         73:d7:52:7d:f5:1f:2b:24:dd:28:c5:50:49:9a:2a:13:fc:78:
         6c:8c:ae:3d:11:81:25:41:3e:f0:9b:9a:fe:54:6e:48:65:69:
         63:14:40:c2:d3:1e:04:98:3c:bd:27:cd:42:a9:5c:5e:f4:09:
         9f:49:01:df:0e:04:9a:9b:80:fc:73:d1:f2:07:f4:ef:5b:f5:
         50:92:39:a9:82:b1:63:f5:eb:84:3e:c3:49:3c:25:17:07:97:
         70:3e:59:f9:0b:a6:d4:03:27:6d:fd:5a:55:cd:03:35:35:5e:
         b6:a2:04:6a:99:c2:0d:5f:8a:02:fe:0d:b5:19:7a:ec:9d:9a:
         2e:79:fc:25:d8:bd:39:3b:d4:05:44:9e:de:d2:0b:ed:61:67:
         2d:a7:11:96:f6:20:c2:54:ae:be:19:27:e2:38:4e:10:e2:48:
         57:3f:cb:0b:01:07:7a:c0:6c:18:a2:70:52:6d:ee:16:df:82:
         c2:b7:8e:d6:bd:aa:1a:8e:5d:e4:b4:13:43:3a:57:1d:82:44:
         25:ba:0e:82:c4:29:0b:df:15:60:42:da:ff:ca:ad:d6:38:cb:
         cb:cf:1e:af:41:11:76:32:6c:51:2c:20:9f:46:dd:b1:d1:ee:
         29:ed:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----