Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.mft
File:                     B94000B22033682A1205F93C185BD01DF4C1083A.mft (raw, json)
Hash identifier:          eewJpJKsbrP8dsSCQMPEOls4xDJlIVD6ffZ1Yo7t2r4=
Subject key identifier:   D8:D2:6B:98:62:89:9E:BD:EC:D6:0E:91:91:0F:5D:4B:68:53:4F:6B
Authority key identifier: B9:40:00:B2:20:33:68:2A:12:05:F9:3C:18:5B:D0:1D:F4:C1:08:3A
Certificate issuer:       /CN=B94000B22033682A1205F93C185BD01DF4C1083A
Certificate serial:       34CAC1789B6EE0AD678E24E75F90ED5F50DD0C11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94000B22033682A1205F93C185BD01DF4C1083A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.mft
Manifest number:          01CE
Signing time:             Sat 21 Mar 2026 08:21:06 +0000
Manifest this update:     Sat 21 Mar 2026 08:16:06 +0000
Manifest next update:     Sun 22 Mar 2026 11:52:06 +0000
Files and hashes:         1: 323830343a373163343a3a2f33322d3438203d3e20323730383130.roa (hash: cDf18qzzAWPnwDzpWmLQwtlVQ+WA7W5cZ8GARwQYpUo=)
                          2: B94000B22033682A1205F93C185BD01DF4C1083A.crl (hash: TOzpJupBaN/G4CPpjcmXrr0IIY0VcfuCH7JLxnDqpYw=)
                          3: 3230302e3231392e31362e302f32322d3234203d3e20323730383130.roa (hash: YBAfetLB1wb83dzv0SkQn4dNOlJc//g+aMrgECkV0kA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ca:c1:78:9b:6e:e0:ad:67:8e:24:e7:5f:90:ed:5f:50:dd:0c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94000B22033682A1205F93C185BD01DF4C1083A
        Validity
            Not Before: Mar 21 08:16:06 2026 GMT
            Not After : Mar 22 11:52:06 2026 GMT
        Subject: CN=D8D26B9862899EBDECD60E91910F5D4B68534F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:1d:07:6e:9f:4f:12:f7:82:60:a9:f8:29:
                    be:c9:aa:b4:ea:69:56:29:48:1a:da:43:78:02:80:
                    48:04:7e:90:01:33:25:40:1a:2b:45:98:16:81:61:
                    9f:14:2e:76:a7:6c:24:35:b7:4b:23:c9:1f:a7:a0:
                    fb:0d:c9:c6:b2:5e:86:4f:1f:af:94:1c:5d:ad:dd:
                    66:80:57:a4:fb:e8:42:34:0a:5d:51:0d:7b:bf:2e:
                    77:3c:40:d2:50:13:92:d9:d0:cf:6c:3b:53:17:a6:
                    79:a7:56:ba:57:f9:e6:f2:ba:1c:5f:c0:8b:b5:fa:
                    c3:d0:44:15:39:58:25:4e:22:10:d6:93:d1:cf:47:
                    1b:74:2d:05:64:29:e4:8f:3b:3e:ff:3a:bf:67:1b:
                    98:4a:3d:7c:68:10:6b:f9:2c:b7:c9:11:90:7d:73:
                    f9:c5:64:64:cd:39:46:6e:18:4f:ce:11:3a:f7:08:
                    e8:96:d2:d9:87:16:d9:ed:64:e5:7f:e9:02:d5:9f:
                    06:c9:ea:4a:78:39:a0:3f:aa:2a:68:c0:c3:bd:8e:
                    e0:5b:b9:78:6d:19:08:ba:29:fe:a2:0f:05:82:02:
                    a6:5a:12:1a:41:18:3e:71:c5:7b:54:fd:34:a6:d3:
                    86:b6:f2:4b:91:49:b2:f7:0f:80:79:c2:1f:70:d9:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:6B:98:62:89:9E:BD:EC:D6:0E:91:91:0F:5D:4B:68:53:4F:6B
            X509v3 Authority Key Identifier:
                keyid:B9:40:00:B2:20:33:68:2A:12:05:F9:3C:18:5B:D0:1D:F4:C1:08:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B94000B22033682A1205F93C185BD01DF4C1083A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/B94000B22033682A1205F93C185BD01DF4C1083A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:eb:a5:fc:3e:c7:05:3e:70:d5:b1:0c:0d:5a:4a:0b:40:f7:
         02:93:a7:ea:14:cb:b6:12:35:96:cf:3e:3a:e4:97:25:86:83:
         9f:44:28:60:97:42:5b:cf:a4:c4:c5:32:6d:9b:3d:54:90:b0:
         98:d8:54:83:ed:cc:b7:7b:42:fb:f7:46:fd:c8:4a:a0:da:da:
         07:fe:82:8b:08:4e:d8:d4:f1:59:0b:78:ca:54:44:75:f9:c6:
         30:48:13:e2:69:a5:eb:9c:9a:cd:4f:40:c6:09:27:99:ae:cc:
         6b:7c:ee:fd:d9:7d:42:8e:40:a4:2e:98:81:e6:9f:df:17:28:
         d6:ac:e9:08:e9:73:a0:5d:aa:c8:1d:03:92:69:ad:ff:51:2b:
         2e:c3:80:88:2f:7a:c9:93:1c:e2:c9:78:ea:a4:6d:b7:3d:7e:
         4d:72:54:d6:8b:dd:48:e9:fb:99:0c:31:f3:a4:4b:ef:ea:2a:
         f9:90:13:96:d6:a9:3b:a2:26:72:85:02:6f:28:d0:1d:6d:f2:
         ad:9d:f9:e2:16:5a:68:29:3f:7c:d2:1a:d4:2c:31:a9:26:3f:
         3e:4d:9c:61:d8:87:a7:44:e6:0b:05:50:91:96:23:a0:e6:73:
         d9:4b:69:4b:a4:ac:02:47:62:30:72:d5:5c:7b:3d:a7:98:b8:
         02:43:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----