Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
File:                     5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft (raw, json)
Hash identifier:          AbuGDFg8LRZJQ/Jyh/OOJPK8YWxYbXT5IY3zzm+QlaI=
Subject key identifier:   94:48:27:12:00:25:88:A4:F6:AD:C7:17:2E:72:9B:D9:B3:7B:2E:14
Authority key identifier: 5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17
Certificate issuer:       /CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
Certificate serial:       397F536058CF891791A87213AEE4802E29B6E875
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
Manifest number:          2E
Signing time:             Sat 18 Oct 2025 02:43:29 +0000
Manifest this update:     Sat 18 Oct 2025 02:38:28 +0000
Manifest next update:     Sun 19 Oct 2025 06:24:28 +0000
Files and hashes:         1: 323830343a333439383a3a2f33322d3332203d3e20323635343637.roa (hash: 4D/uPrjckjTtR2ilbkEgeu65wdvem/4E5VO6ZsCNI7M=)
                          2: 3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa (hash: BXHo89BoVxO/eBBnuU+52MEL4crZqXVANRb5caMCVnc=)
                          3: 5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl (hash: aviEGTsLdmg7IuxhJkEH8ow4wzD2nOTm2cQYa3hgcXI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7f:53:60:58:cf:89:17:91:a8:72:13:ae:e4:80:2e:29:b6:e8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
        Validity
            Not Before: Oct 18 02:38:28 2025 GMT
            Not After : Oct 19 06:24:28 2025 GMT
        Subject: CN=94482712002588A4F6ADC7172E729BD9B37B2E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:9c:95:e2:0e:45:fe:66:7d:08:56:4c:a9:
                    30:39:f6:66:92:5c:3c:c7:d7:e1:12:f1:94:fc:64:
                    32:10:f7:8f:09:59:35:24:8b:aa:4b:6c:9a:23:18:
                    b0:f0:f3:fa:be:63:bd:ca:b7:e3:b9:0c:c4:fc:78:
                    97:fb:c6:f7:fa:84:f0:f6:f4:57:41:c7:70:d7:a0:
                    e0:0a:c1:10:c2:95:74:8d:26:23:a9:7d:97:08:4f:
                    3e:93:46:70:12:e5:c0:b5:02:40:95:19:71:22:21:
                    32:3b:7d:4c:27:3c:a4:0d:e9:1c:fa:9b:5a:34:07:
                    b7:b8:42:a0:d1:5c:d4:b9:5b:6a:9e:9b:ea:9b:4d:
                    8e:3c:96:6b:e3:86:91:7d:5b:76:18:c4:d4:1d:8c:
                    8a:f3:30:33:12:7a:ce:2c:c2:b1:de:2c:2d:bf:7c:
                    7c:68:36:ff:51:ba:1d:00:1d:cb:a7:a3:a3:da:3b:
                    85:2b:e2:3b:ac:58:bb:8e:ec:b9:7d:49:f2:f5:4b:
                    9b:c2:02:92:87:91:39:8b:46:51:6d:8b:7b:25:8e:
                    7d:c9:85:5e:1f:fd:e6:cf:73:bc:f6:0f:d8:47:67:
                    9e:b1:89:6b:91:00:49:05:aa:a2:40:2c:e1:df:28:
                    80:1d:19:29:34:bb:71:1b:de:b3:00:7d:4e:6f:de:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:27:12:00:25:88:A4:F6:AD:C7:17:2E:72:9B:D9:B3:7B:2E:14
            X509v3 Authority Key Identifier:
                keyid:5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:25:1c:8f:74:9f:d6:96:38:81:84:65:7e:4d:d3:b8:9f:23:
         5c:fc:48:f3:a7:b6:54:73:7a:3c:23:dc:47:6c:95:8c:d2:6d:
         61:fb:6d:66:c9:60:63:e3:97:3f:51:59:98:6a:4b:73:44:df:
         79:f7:14:bd:04:c2:9e:66:70:50:db:b6:99:45:29:8c:c1:27:
         88:ac:9a:aa:a9:07:68:bb:3e:03:26:b8:9c:c1:ed:fd:6f:9f:
         75:16:b0:8b:b5:98:29:4f:d8:46:3b:1f:e3:ef:4d:84:67:fa:
         48:bd:cd:21:03:dc:11:88:45:1f:dd:c8:a9:e4:43:a1:b2:4c:
         00:0b:79:fa:05:8f:2c:b3:83:98:c3:cf:43:94:15:ed:ca:c4:
         1a:85:ae:df:53:ef:ef:cd:1e:ca:a4:55:7a:0b:00:ac:39:42:
         80:05:cc:92:de:a1:0e:c8:10:33:8f:b1:cc:7d:d0:26:c0:95:
         57:92:41:7e:ae:d9:99:35:da:af:bd:a6:8c:01:cf:0d:c3:5c:
         93:68:67:3a:b1:9c:5b:b6:82:b2:79:a6:f8:25:bd:88:59:37:
         4d:a4:7c:07:78:8f:72:e1:de:b7:2b:23:1b:03:5f:d5:22:4b:
         42:ee:76:c9:59:f7:dd:7a:22:0f:c9:0c:b7:90:67:67:a9:05:
         c7:72:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:18 2025 by rpki-client