Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.mft
File:                     03C95C9B497A67DDF78EE02518E2C7C68093F0F9.mft (raw, json)
Hash identifier:          WBAGeyg61W5gkYrJeaHCodWVxIT54B+Wp6K+AhfN5Vo=
Subject key identifier:   99:09:5B:4C:89:07:AA:53:91:B0:DF:AA:B9:54:D4:56:BD:1D:22:37
Authority key identifier: 03:C9:5C:9B:49:7A:67:DD:F7:8E:E0:25:18:E2:C7:C6:80:93:F0:F9
Certificate issuer:       /CN=03C95C9B497A67DDF78EE02518E2C7C68093F0F9
Certificate serial:       3EFEC56FA9F2FC91B56C43C09D4A344A9FC96497
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.mft
Manifest number:          C8
Signing time:             Fri 17 Oct 2025 10:28:31 +0000
Manifest this update:     Fri 17 Oct 2025 10:23:31 +0000
Manifest next update:     Sat 18 Oct 2025 11:52:31 +0000
Files and hashes:         1: 3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (hash: d6u69g3BRQFCsHQ1koSJE6LnRC2A0VTDAaYJQi00s50=)
                          2: 03C95C9B497A67DDF78EE02518E2C7C68093F0F9.crl (hash: WljXmGepNBwCvxnQxjKtGDQf4+MhdytQCqdgDgCmXx0=)
                          3: 323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (hash: Z+1n//ED/P8/wC8htl4DRccMSCl92NDoW78FQR2zb9o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fe:c5:6f:a9:f2:fc:91:b5:6c:43:c0:9d:4a:34:4a:9f:c9:64:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C95C9B497A67DDF78EE02518E2C7C68093F0F9
        Validity
            Not Before: Oct 17 10:23:31 2025 GMT
            Not After : Oct 18 11:52:31 2025 GMT
        Subject: CN=99095B4C8907AA5391B0DFAAB954D456BD1D2237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:ac:94:ca:90:5f:65:e5:77:9c:01:c5:b8:
                    65:bd:1d:36:cc:32:04:10:a1:b8:2e:ea:e7:85:4c:
                    36:f3:b9:b2:ce:58:18:d5:c4:e3:cc:9a:7f:d6:c2:
                    bc:78:e7:c3:4f:79:82:aa:08:51:42:b2:b7:36:af:
                    fb:fc:52:27:ec:e3:f9:bf:4f:bd:79:b0:96:c2:cc:
                    6a:df:98:20:43:f5:24:ef:41:e6:9d:59:12:ad:cc:
                    a5:9b:b5:60:52:b9:38:2d:21:d0:00:47:92:3f:19:
                    fc:d1:95:55:e6:d7:f8:7b:3a:2b:0e:7b:e7:82:b9:
                    a9:40:54:78:9e:57:b7:04:87:18:ab:ed:ca:9c:08:
                    70:1e:92:c2:d0:40:3e:69:58:d5:8a:5b:d7:5f:05:
                    83:1c:ed:b7:bf:92:b1:6b:5f:e9:55:23:c1:19:af:
                    63:c3:f2:2f:cc:76:f9:19:57:33:d3:6e:34:73:4e:
                    7f:83:5d:1c:17:82:fd:b7:20:70:ba:a5:15:19:0a:
                    e4:d0:c2:53:19:2f:8a:12:45:89:b7:ae:4d:cd:a4:
                    13:fa:52:20:10:ad:68:66:a2:dd:2e:78:d4:68:47:
                    6b:9c:78:58:36:61:2f:67:fc:dc:c8:38:b4:27:d9:
                    40:ec:ab:b2:33:61:98:c8:c9:3e:8a:20:a3:cd:09:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:5B:4C:89:07:AA:53:91:B0:DF:AA:B9:54:D4:56:BD:1D:22:37
            X509v3 Authority Key Identifier:
                keyid:03:C9:5C:9B:49:7A:67:DD:F7:8E:E0:25:18:E2:C7:C6:80:93:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/03C95C9B497A67DDF78EE02518E2C7C68093F0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:39:26:bf:70:20:0f:8d:5b:4a:2d:91:33:f3:f7:f1:78:
         58:91:99:4d:be:29:99:53:30:85:e8:16:79:66:06:77:1c:8e:
         e9:b9:3a:45:0b:08:48:bd:4b:96:da:10:a6:11:93:1e:09:27:
         5e:e6:2c:c3:5a:95:d8:3a:10:6a:18:a9:6b:f5:3b:86:6a:db:
         44:4f:a4:75:82:6e:cb:d4:9f:01:92:11:fa:46:dc:4b:74:e4:
         08:c8:bc:c6:af:1c:49:61:05:ee:fd:c2:5b:10:c8:a2:8e:2b:
         47:77:4d:ce:b8:9b:63:b2:02:ce:ad:8d:d2:06:3d:0b:89:fc:
         9b:2c:2d:5a:ec:57:89:67:2d:bc:72:fb:d6:b9:43:04:13:09:
         bc:73:39:1c:fe:15:39:9a:b7:60:8c:ec:a2:e3:f2:57:b9:cc:
         6a:a2:64:df:6f:08:69:d6:a8:b7:7f:6a:9f:81:fd:b8:ec:ee:
         22:79:79:f4:91:c5:46:d1:ed:92:34:e7:37:43:67:cf:4e:1d:
         d6:87:95:fa:89:d3:8f:b1:45:52:38:02:09:2c:a1:2d:17:c7:
         df:7a:39:02:60:fa:6b:5f:f0:9c:55:25:39:a2:bb:c1:68:72:
         7a:c3:df:54:d9:03:1f:3a:26:d3:9c:e2:a0:d1:a2:57:1f:c0:
         82:f5:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:36 2025 by rpki-client