Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
File:                     9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft (raw, json)
Hash identifier:          /AjievrrIBKqwCGc2lVK2I1Fa9UwiMYXovEd3KQC+EQ=
Subject key identifier:   83:FD:7E:B0:BE:41:F9:D2:99:F2:DC:85:16:FB:5E:E1:3A:89:73:BD
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Certificate issuer:       /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial:       745AE18452C57AF13CBC69E7C0B9D1ECE30C897C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft
Manifest number:          02EF
Signing time:             Fri 17 Oct 2025 11:05:25 +0000
Manifest this update:     Fri 17 Oct 2025 11:00:25 +0000
Manifest next update:     Sat 18 Oct 2025 14:38:25 +0000
Files and hashes:         1: 323830343a326362633a3a2f33322d3438203d3e20323635323430.roa (hash: giTmPiEBQLx0BYo/03BMIAzqwhFQ/uAFx2pp+feVQ3o=)
                          2: 9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl (hash: vhBV0KUIXxOGLgNZiu26PgPI98XpR7uxZzLOBsfNKqQ=)
                          3: 3136382e302e302e302f32332d3234203d3e20323635323430.roa (hash: 39rSJ+LAmC8LCZihDbw+qiaoKhm95z+OUI79SPFVsTY=)
                          4: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (hash: +E+NC1y1e8e0K/e4so432GkxK4QlZpEFghMjbmBnu/4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5a:e1:84:52:c5:7a:f1:3c:bc:69:e7:c0:b9:d1:ec:e3:0c:89:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
        Validity
            Not Before: Oct 17 11:00:25 2025 GMT
            Not After : Oct 18 14:38:25 2025 GMT
        Subject: CN=83FD7EB0BE41F9D299F2DC8516FB5EE13A8973BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:3f:3f:56:b6:f8:7d:36:80:c6:2a:70:74:
                    1f:30:ca:45:c4:2c:ab:97:06:6e:be:f7:d1:5b:7a:
                    d4:71:99:37:29:d8:82:c2:19:0d:a6:29:a7:33:48:
                    a0:89:4b:55:2e:83:c9:0e:ac:06:2c:5c:c4:25:b0:
                    ea:15:ec:eb:29:56:5c:dd:58:11:a9:aa:e0:ea:59:
                    c3:8d:36:30:aa:85:21:81:f7:ac:e4:e3:b4:7f:b0:
                    a9:99:49:e1:e9:b9:eb:63:54:60:6a:f4:e9:7b:01:
                    f8:cf:4f:ba:ef:eb:6b:27:b1:15:5e:33:1b:1a:92:
                    a3:bd:cb:56:57:67:8f:b5:6f:af:af:d3:84:ab:6a:
                    3e:9b:5c:92:5e:71:cf:96:cc:09:24:02:e4:85:ea:
                    f7:fa:3d:14:5c:3c:57:d0:ad:0a:fc:1c:c3:84:9d:
                    0e:8a:b1:1d:e5:e4:99:28:8f:29:ad:5d:3c:b8:97:
                    f4:8b:20:35:71:c6:d5:b6:12:16:71:44:81:f1:79:
                    b4:e0:5c:46:2b:03:bd:cd:1f:45:ab:37:97:c7:17:
                    bd:e2:fc:24:53:b2:e6:9a:d1:37:a5:99:89:b1:3e:
                    9f:74:e6:c1:3a:40:fe:91:9e:d9:f1:25:77:85:6c:
                    7d:35:25:99:e0:5d:88:65:4f:a2:8b:a0:8d:6b:3f:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:7E:B0:BE:41:F9:D2:99:F2:DC:85:16:FB:5E:E1:3A:89:73:BD
            X509v3 Authority Key Identifier:
                keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3a:1b:6e:f4:65:00:ba:45:82:70:23:fa:70:ba:93:62:07:
         60:a1:43:0f:fa:d9:3d:f6:03:9f:48:a7:72:58:7f:66:ea:a6:
         fd:ac:be:a9:dc:bf:c2:87:82:53:3d:55:b2:25:77:11:f1:ff:
         c0:1e:02:ce:b0:dc:57:c4:0a:04:5f:45:97:f1:bb:bf:3d:d8:
         be:c0:f6:79:d0:30:24:38:c6:ba:29:17:b7:e0:bb:aa:34:85:
         4a:fe:2d:31:72:3a:f2:d2:78:f2:66:79:78:25:b1:28:bc:3e:
         ba:ff:cd:63:43:e0:18:63:b8:61:fa:a9:7a:2b:e3:1b:58:7d:
         47:06:64:9a:be:14:6e:6f:c0:34:a3:23:70:b7:d2:fb:86:31:
         2e:62:1a:d4:8c:f0:a8:d2:0e:fe:8a:b9:6a:2f:61:8e:74:b4:
         fc:d6:db:08:30:dc:79:cf:3b:eb:95:ae:85:85:15:87:de:d1:
         5d:8e:b7:6a:8a:9a:4b:ac:49:7f:b8:33:e5:32:43:cb:de:eb:
         48:1c:f7:ae:76:76:85:2c:bf:97:9c:1c:7d:e9:57:f2:63:a5:
         f0:b0:f7:13:c3:c5:7f:2b:65:e4:05:21:e1:53:d7:52:98:48:
         87:66:96:3b:bd:ff:40:e1:62:23:d9:08:40:20:c9:54:e2:d0:
         8f:31:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----