Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
File:                     3969F32AA0FDF3D39ABBAD2837C7749831899397.mft (raw, json)
Hash identifier:          qTEMl3mGaqcNMNwAnoytFlhAwpBlFwuPLXrwZZGTECY=
Subject key identifier:   81:D9:6F:CB:66:C2:5B:30:24:BF:74:74:F6:E6:84:69:35:CD:5F:5F
Authority key identifier: 39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97
Certificate issuer:       /CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
Certificate serial:       1561AB31B9A66FD4E57F1ACE3C6F9F2201FC2187
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft
Manifest number:          64
Signing time:             Sun 19 Oct 2025 10:26:03 +0000
Manifest this update:     Sun 19 Oct 2025 10:21:03 +0000
Manifest next update:     Mon 20 Oct 2025 13:30:03 +0000
Files and hashes:         1: 323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (hash: msHoPUSYrUwGeC3fLacj8Ud0xMnhlH3k7zjdzU5zufA=)
                          2: 3969F32AA0FDF3D39ABBAD2837C7749831899397.crl (hash: wWlNkDc5K+xiao8pQC6u164cAJp5rs64s/9XJSYfBfg=)
                          3: 34352e3233322e342e302f32322d3234203d3e20323637323338.roa (hash: IjEn1wNwoHRClqbiXTXWTQjexMagU+jk7sCW2H/15iU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:61:ab:31:b9:a6:6f:d4:e5:7f:1a:ce:3c:6f:9f:22:01:fc:21:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969F32AA0FDF3D39ABBAD2837C7749831899397
        Validity
            Not Before: Oct 19 10:21:03 2025 GMT
            Not After : Oct 20 13:30:03 2025 GMT
        Subject: CN=81D96FCB66C25B3024BF7474F6E6846935CD5F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:86:88:3c:f1:61:02:e4:23:16:a5:95:c5:
                    5c:84:99:74:35:51:c9:5d:aa:04:b2:2d:a1:50:5d:
                    e4:cc:c8:30:e5:f7:01:b1:e4:8c:8f:5b:0f:ec:1a:
                    23:4d:57:7c:1d:d8:48:57:6a:8a:dd:36:8a:6e:13:
                    70:0f:35:bf:f4:9b:a3:0f:8e:22:9e:40:9e:f2:96:
                    fd:a1:d7:10:b3:fc:29:2d:01:6a:f1:73:36:60:bf:
                    14:8a:22:33:60:f0:64:15:26:43:27:3b:8a:27:64:
                    95:82:d2:56:47:c5:3c:6f:59:dd:58:be:ec:63:82:
                    f4:60:45:ee:1f:60:33:a3:57:42:43:8d:1e:66:81:
                    54:ef:31:c7:eb:aa:bb:e8:88:cd:ed:24:d8:09:b0:
                    db:7b:db:da:cc:36:c4:24:ca:4a:95:c9:f0:b8:03:
                    96:09:f7:dd:5b:52:a4:96:d6:d1:98:4c:f6:c5:97:
                    58:58:81:49:ef:41:52:3c:32:64:f9:53:aa:6d:be:
                    4d:80:7e:72:05:cd:b3:46:d2:28:91:a6:1f:ca:e4:
                    75:05:24:c8:4e:b8:93:6c:f5:02:c6:7c:3b:a2:5c:
                    a4:f4:10:0b:e5:01:86:3a:94:ff:4d:a5:02:98:8d:
                    17:e7:30:42:11:6b:0a:af:55:1e:c1:02:8d:ef:56:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:6F:CB:66:C2:5B:30:24:BF:74:74:F6:E6:84:69:35:CD:5F:5F
            X509v3 Authority Key Identifier:
                keyid:39:69:F3:2A:A0:FD:F3:D3:9A:BB:AD:28:37:C7:74:98:31:89:93:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3969F32AA0FDF3D39ABBAD2837C7749831899397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/3969F32AA0FDF3D39ABBAD2837C7749831899397.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:79:cd:e3:9d:5e:db:dc:f5:32:72:35:93:f6:19:95:22:b8:
         6c:ae:45:77:d5:33:73:53:8e:0f:cd:af:2c:b7:b1:c8:7f:c8:
         5a:9f:17:ee:b6:49:ba:4f:ae:1d:92:3c:b1:48:0e:a0:e7:4b:
         3d:2f:0f:da:88:51:f5:5f:0c:8b:02:5b:b6:07:c7:7f:c6:e2:
         38:4b:65:43:52:08:15:1b:02:f7:0f:7c:6e:18:ff:80:9c:ef:
         1a:ac:87:ae:7f:be:79:6f:f3:11:60:fe:a8:7a:62:bf:1f:9a:
         bb:c7:73:87:57:06:a6:b3:05:f6:d0:07:89:09:eb:1a:a9:19:
         42:7c:0a:f5:9b:d7:3a:79:a6:be:b5:2d:10:ca:61:d6:23:6f:
         22:5b:9e:25:34:14:9e:1b:36:0a:e1:5f:28:c3:d9:eb:72:69:
         08:12:9e:d9:54:a9:ed:7d:0b:ae:68:7f:b9:0c:06:8e:af:af:
         62:d2:b8:33:a0:2c:51:aa:28:c5:0e:ef:a0:0d:ec:68:48:68:
         ea:84:ef:c8:63:70:f8:e9:97:df:75:12:63:ca:a0:4a:0d:47:
         81:9a:f5:28:55:9e:6e:ac:eb:29:20:fd:7e:09:f5:13:82:48:
         fb:9e:c4:6b:8f:11:12:c8:c2:7e:4a:91:bf:7d:5d:27:75:51:
         89:68:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:04 2025 by rpki-client