Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/C49747C27C98A297404D420CA83A51FA4EF6FF68.mft
File:                     C49747C27C98A297404D420CA83A51FA4EF6FF68.mft (raw, json)
Hash identifier:          7oLXmrLwr8nVJKxvoo9dfS/1p+cmpDYM6teBPe7j2lU=
Subject key identifier:   9E:AF:13:DE:2C:81:69:70:45:92:60:09:2B:9B:9C:EE:1F:EB:EE:5C
Authority key identifier: C4:97:47:C2:7C:98:A2:97:40:4D:42:0C:A8:3A:51:FA:4E:F6:FF:68
Certificate issuer:       /CN=C49747C27C98A297404D420CA83A51FA4EF6FF68
Certificate serial:       2B71C834678A6962F83B588CB9D26B761719AE8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C49747C27C98A297404D420CA83A51FA4EF6FF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/C49747C27C98A297404D420CA83A51FA4EF6FF68.mft
Manifest number:          0C
Signing time:             Thu 16 Oct 2025 10:52:33 +0000
Manifest this update:     Thu 16 Oct 2025 10:47:33 +0000
Manifest next update:     Fri 17 Oct 2025 14:46:33 +0000
Files and hashes:         1: 323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (hash: lVfLYa9exGTBMWPM0C6EYN/qFUrJQeHshgQSX5HI/cc=)
                          2: 34352e3138322e3235322e302f32322d3332203d3e20323639323438.roa (hash: d+JSvFCjGEvwZw/ReqrCSLkGb4yZ2jRWvBQc4wRVytI=)
                          3: C49747C27C98A297404D420CA83A51FA4EF6FF68.crl (hash: DcRJMZafL4ZTBVTOwgaLOAOF1fBmM/W5hhchtw2SI6Q=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:71:c8:34:67:8a:69:62:f8:3b:58:8c:b9:d2:6b:76:17:19:ae:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49747C27C98A297404D420CA83A51FA4EF6FF68
        Validity
            Not Before: Oct 16 10:47:33 2025 GMT
            Not After : Oct 17 14:46:33 2025 GMT
        Subject: CN=9EAF13DE2C816970459260092B9B9CEE1FEBEE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:0b:d7:98:bd:ff:b6:d3:f3:f7:fd:bd:2d:
                    3c:56:0c:0e:fa:94:02:a4:44:d6:f9:a9:6f:3c:2d:
                    70:5c:89:c7:f0:ec:a4:03:92:f7:37:b7:80:88:c0:
                    d8:ed:b0:fa:f0:30:0d:1a:75:7c:80:9c:55:99:9d:
                    af:f3:de:eb:84:cb:db:1e:63:6d:3e:a0:a7:fc:83:
                    39:5d:f4:52:11:c7:0c:31:47:ba:d8:19:ad:ce:01:
                    91:84:d4:26:e5:5f:00:b5:91:79:0e:06:33:d5:a5:
                    0d:4e:a2:d7:2d:9f:2d:78:91:78:93:ac:7d:1f:7a:
                    42:e1:97:50:d3:0e:6e:2d:3a:8c:c7:94:8f:c2:eb:
                    14:db:4a:29:ce:30:89:05:8e:fd:89:04:4f:75:49:
                    d9:fe:d0:71:db:58:b1:de:39:49:ed:79:c4:10:92:
                    87:62:13:95:2c:7a:f8:62:26:ac:86:b6:fd:68:86:
                    fc:de:08:68:12:1e:70:09:97:40:c3:c1:1c:5c:33:
                    fe:02:83:7b:3b:29:ee:7c:96:cb:9c:e6:d4:0a:c5:
                    2a:91:52:c2:35:0b:d5:f9:c2:c4:7c:54:c1:0a:88:
                    c1:fd:bd:d5:3f:12:75:c8:58:fd:93:5c:0c:81:da:
                    46:ff:fd:a5:b3:b6:e0:19:91:c6:33:b1:fa:c0:4a:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:13:DE:2C:81:69:70:45:92:60:09:2B:9B:9C:EE:1F:EB:EE:5C
            X509v3 Authority Key Identifier:
                keyid:C4:97:47:C2:7C:98:A2:97:40:4D:42:0C:A8:3A:51:FA:4E:F6:FF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/C49747C27C98A297404D420CA83A51FA4EF6FF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C49747C27C98A297404D420CA83A51FA4EF6FF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/C49747C27C98A297404D420CA83A51FA4EF6FF68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:ec:9a:26:7e:ab:5f:fb:41:2e:cb:5b:f9:8e:40:79:93:
         20:51:63:85:29:85:55:da:4a:5b:a2:4c:d0:84:74:45:ed:bf:
         e4:83:db:0e:33:bf:6e:79:25:ff:92:ee:d9:96:62:ee:96:ae:
         98:d5:f1:20:a9:0a:50:9e:4c:d5:9b:31:e2:e8:81:5b:85:74:
         f8:80:2d:f0:f8:bb:7f:f2:56:12:fb:09:67:e2:b9:85:3b:7e:
         7c:36:13:dd:0a:40:6f:9c:24:a4:20:5d:74:8f:36:4e:3d:e3:
         6c:80:e2:84:3b:ac:b5:65:41:a1:23:c0:19:75:55:ef:a6:5c:
         55:1c:f3:f1:40:9c:e6:94:bf:e0:5d:0e:e9:32:80:ac:75:03:
         30:e8:7c:93:a2:ef:37:ed:bd:b9:99:fc:36:c8:ff:8b:61:86:
         2c:66:85:84:44:e2:0b:6b:0b:46:e6:ee:fc:68:39:33:42:bf:
         77:b1:c6:ef:51:95:10:7e:4d:f3:50:da:ec:15:c6:7c:4e:42:
         1f:da:6d:70:26:1f:c3:2e:30:af:f8:8e:bc:07:17:c8:b1:57:
         af:6d:55:50:f0:46:03:60:34:f5:fd:c5:ed:b6:62:12:95:a3:
         b7:e5:ee:86:38:e9:60:41:b8:c4:6f:b6:8c:7b:21:e3:bc:c2:
         68:18:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----