Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.mft
File:                     317D8B3789BE9C11B1A05D85547B70E51F2948CF.mft (raw, json)
Hash identifier:          ikSum23wRlDd+Wc3sbPSQaqX3xJB/XolZIdW48DArJ8=
Subject key identifier:   61:8C:F5:E7:19:F7:1E:2C:14:77:F3:9C:D9:21:72:D6:65:D3:E6:E0
Authority key identifier: 31:7D:8B:37:89:BE:9C:11:B1:A0:5D:85:54:7B:70:E5:1F:29:48:CF
Certificate issuer:       /CN=317D8B3789BE9C11B1A05D85547B70E51F2948CF
Certificate serial:       712CF43953443B2336C764F3411BCAD555D5260D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317D8B3789BE9C11B1A05D85547B70E51F2948CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.mft
Manifest number:          B2
Signing time:             Sun 11 Oct 2026 22:15:30 +0000
Manifest this update:     Sun 11 Oct 2026 22:10:30 +0000
Manifest next update:     Tue 13 Oct 2026 00:47:30 +0000
Files and hashes:         1: 323830343a316533633a3a2f33322d313238203d3e20323634343136.roa (hash: 9XFV2yX/+akVbTBrOKmEQUVnptEC08a8cFb8d5CkJ+Y=)
                          2: 3133312e3232312e3132302e302f32322d3332203d3e20323634343136.roa (hash: k9fFU88DbXBVuE6wuwZEJOt71e5Y4qpyBcnX9Y7GccQ=)
                          3: 317D8B3789BE9C11B1A05D85547B70E51F2948CF.crl (hash: XBZI6gv/i8fR4bkMCCQCVbhLbbnWlVTatrJIjeMuMxw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2c:f4:39:53:44:3b:23:36:c7:64:f3:41:1b:ca:d5:55:d5:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317D8B3789BE9C11B1A05D85547B70E51F2948CF
        Validity
            Not Before: Oct 11 22:10:30 2026 GMT
            Not After : Oct 13 00:47:30 2026 GMT
        Subject: CN=618CF5E719F71E2C1477F39CD92172D665D3E6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:de:86:a3:4e:d3:7d:b7:68:85:ed:c6:21:
                    df:0a:2a:b1:50:24:8a:00:6a:af:3e:85:ce:8d:f7:
                    9c:2d:d1:0f:bd:b2:a1:69:32:1f:25:91:bf:7c:a7:
                    4f:a9:61:f5:34:74:fb:87:90:f5:52:20:a7:3b:84:
                    55:ff:89:e0:63:09:32:c5:77:dd:89:c2:86:e7:c0:
                    2a:cc:d0:84:6f:d6:1b:55:37:0d:6a:0f:ec:b3:7e:
                    fe:df:02:b5:de:f7:0c:98:9c:6b:4a:6e:ce:fd:df:
                    c6:8a:22:e7:22:2b:6d:9f:4f:ca:39:56:cd:b4:4d:
                    10:0f:8d:da:39:f4:bb:a5:7f:18:16:00:a9:ba:dc:
                    ae:75:3d:77:7f:6f:58:f6:c2:13:d6:96:3e:30:08:
                    7b:29:65:5f:b8:00:b6:12:7e:62:96:c2:f1:38:2f:
                    60:70:11:a4:0b:35:3c:1c:de:3b:58:42:56:6a:2f:
                    06:bc:aa:28:cd:dc:9d:f8:3b:3b:0c:7e:03:8e:9b:
                    bc:fd:c6:c1:32:8f:7b:40:d2:d8:01:bd:4b:94:5d:
                    03:22:ab:c8:03:67:53:ff:d9:31:b6:e9:29:d7:f8:
                    1a:10:c2:6a:d0:77:a4:8b:b4:0b:1f:c4:6a:4f:c9:
                    74:8b:98:d8:f6:b1:1c:bd:5c:bb:0c:d9:05:f1:48:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8C:F5:E7:19:F7:1E:2C:14:77:F3:9C:D9:21:72:D6:65:D3:E6:E0
            X509v3 Authority Key Identifier:
                keyid:31:7D:8B:37:89:BE:9C:11:B1:A0:5D:85:54:7B:70:E5:1F:29:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317D8B3789BE9C11B1A05D85547B70E51F2948CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:57:5e:28:be:16:9f:c1:59:26:9e:1a:cd:70:f9:a8:29:
         9d:0a:c4:83:c3:8b:1d:3a:4f:e3:b7:e6:17:6d:38:21:6f:15:
         dd:3f:f5:85:0a:b9:56:8f:ae:d2:aa:0d:30:e0:71:81:c5:e3:
         85:a5:e2:e2:01:6c:54:b4:0e:1a:5f:fe:d1:17:fe:fd:d9:4c:
         f8:ab:84:0a:c8:aa:2f:b4:b3:8e:b3:6b:20:0a:a8:20:30:89:
         bc:8a:e9:f6:07:35:83:c3:ca:ee:93:a7:72:3f:4a:9b:4d:89:
         93:91:85:39:9e:c6:99:3e:10:fa:db:e8:40:ed:4e:87:9a:ac:
         85:8b:ad:02:f1:a9:09:5b:46:94:28:b3:3f:f4:d0:ed:6d:20:
         e4:04:78:84:53:ea:ed:61:89:c4:7f:6f:68:25:7d:c1:e0:0d:
         70:af:a6:57:79:b5:2f:be:e7:82:63:b2:85:f4:26:5d:9c:76:
         22:84:05:13:e2:92:81:b4:03:43:aa:32:4e:c1:74:06:4c:6d:
         94:1c:48:e7:6a:57:42:c0:f9:e9:5c:54:7a:41:1f:39:0e:71:
         92:2a:38:68:5f:91:ed:69:b0:40:b6:71:e4:0a:f5:4e:d8:b2:
         0a:19:99:fa:81:bf:43:19:ad:c5:eb:04:7e:31:4e:56:e6:c5:
         bd:5e:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----