Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft
File:                     B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft (raw, json)
Hash identifier:          ggKxgwpFUl1mdKcejeqH817WeJVSq4p035t+v1rfem4=
Subject key identifier:   3F:C4:02:BB:B3:41:BD:AE:AD:6A:58:2D:22:2B:48:C7:D3:B2:7F:0A
Authority key identifier: B9:A9:98:6B:A8:9C:EE:19:AA:B6:7A:D2:23:73:8C:F6:7B:89:A6:7C
Certificate issuer:       /CN=B9A9986BA89CEE19AAB67AD223738CF67B89A67C
Certificate serial:       0742A73F9BF592868D391195ED89E328F2B5229B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft
Manifest number:          DC
Signing time:             Fri 17 Oct 2025 08:08:36 +0000
Manifest this update:     Fri 17 Oct 2025 08:03:36 +0000
Manifest next update:     Sat 18 Oct 2025 11:42:36 +0000
Files and hashes:         1: B9A9986BA89CEE19AAB67AD223738CF67B89A67C.crl (hash: aeUztRl8Qu9/v6jYENpUk5Dd4vcSF2eOgwHs4DVrIS8=)
                          2: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: B5f6+0Ef13F8a+eYkC/vXL+rnEDhxglXdLx6d9rxdGk=)
                          3: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: SfiX6pyGMZ5yD1UWGwSLOwEC81151wCnUlB7cyFQjy8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:42:a7:3f:9b:f5:92:86:8d:39:11:95:ed:89:e3:28:f2:b5:22:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9A9986BA89CEE19AAB67AD223738CF67B89A67C
        Validity
            Not Before: Oct 17 08:03:36 2025 GMT
            Not After : Oct 18 11:42:36 2025 GMT
        Subject: CN=3FC402BBB341BDAEAD6A582D222B48C7D3B27F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:2f:8e:1b:63:a0:b4:43:07:60:35:50:3d:
                    23:30:6d:27:b5:48:ff:1a:16:4e:ba:e0:f1:01:e2:
                    62:5f:d9:5f:af:bf:6c:5d:36:c4:65:58:29:c5:27:
                    d0:e2:b0:c4:b9:25:a3:5d:84:4c:dd:2d:08:a6:e5:
                    84:fc:86:45:c6:41:c5:4c:f8:d4:a3:a9:76:7e:1b:
                    51:ae:c8:d4:e4:c0:93:53:a7:00:70:14:d1:6c:00:
                    81:83:52:44:e6:be:c7:64:fa:c8:30:12:9c:27:43:
                    77:9c:36:07:17:f4:76:09:d4:6c:7f:14:e7:aa:63:
                    11:ff:77:8b:e7:84:89:d2:c9:ea:b8:00:fc:8f:be:
                    3c:87:34:3b:75:3a:23:80:3c:4d:3d:20:bb:ee:43:
                    87:d1:a8:94:83:b8:64:fd:57:d6:2b:e5:e9:49:a1:
                    7c:19:3d:55:a1:41:ec:b8:8d:fd:cc:9f:42:ed:2d:
                    6a:7f:45:87:45:06:9f:0c:ca:82:86:7a:df:6c:c2:
                    28:8b:8e:44:82:e8:40:94:66:a7:ed:62:59:2b:72:
                    09:df:bf:4a:b0:1c:4b:e4:63:c3:e9:16:7c:38:e3:
                    7d:62:be:bd:8d:42:61:02:71:cb:0e:97:ec:b9:81:
                    89:28:bd:b6:ff:9f:e8:34:61:b7:9b:01:07:4f:e8:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:02:BB:B3:41:BD:AE:AD:6A:58:2D:22:2B:48:C7:D3:B2:7F:0A
            X509v3 Authority Key Identifier:
                keyid:B9:A9:98:6B:A8:9C:EE:19:AA:B6:7A:D2:23:73:8C:F6:7B:89:A6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/B9A9986BA89CEE19AAB67AD223738CF67B89A67C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:23:f2:b6:1c:2c:e7:f8:18:05:53:a3:4c:ce:71:8a:2a:
         15:91:4d:4f:07:1f:91:4b:24:8b:4f:d8:af:99:94:34:ed:02:
         f2:ce:39:50:b3:e5:3b:f5:60:2c:a8:55:e1:46:f3:2c:83:c6:
         47:af:fc:ab:7a:90:87:d0:69:02:dd:6d:4a:ec:97:b2:bc:7e:
         17:cd:0b:c9:86:81:65:29:3d:6f:69:e4:03:96:c8:ac:93:31:
         4c:12:14:b7:25:17:20:e4:91:47:a1:18:70:c2:1f:aa:4d:53:
         60:4a:41:a4:54:24:a3:4f:ed:b0:e4:90:b4:ff:99:b3:89:34:
         cc:94:54:c1:ac:7f:28:51:54:e8:ab:bf:c0:c8:34:93:84:03:
         94:5f:0f:90:14:bd:cb:02:38:bd:e8:5c:2f:b1:36:93:29:61:
         aa:f6:31:45:2c:a5:1a:cd:27:f5:d6:2e:61:83:87:ba:43:11:
         dc:7c:92:22:8f:6e:a5:9b:d1:70:1e:78:ac:c2:cf:27:80:7c:
         40:24:a5:0e:f0:7d:a2:2c:76:9a:b4:d9:cc:9a:9f:d5:a8:8e:
         25:da:d7:58:0c:d2:a3:2e:03:3a:77:15:ee:94:ae:c6:80:56:
         14:71:de:86:25:17:be:6a:f7:28:79:ae:2e:ab:2c:ba:41:98:
         ce:4f:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:37 2025 by rpki-client