Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
File:                     DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft (raw, json)
Hash identifier:          q184uL+SgT6Qmk02uShHDk42vEyDgBe+eugYLMm6798=
Subject key identifier:   91:0B:63:A2:29:3A:F5:64:BE:E5:92:8A:B8:D8:45:77:37:B3:32:BC
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Certificate issuer:       /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial:       64A112B14A070E98520F2DCD9E4AEE2903FE1EA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
Manifest number:          0213
Signing time:             Fri 17 Oct 2025 05:04:52 +0000
Manifest this update:     Fri 17 Oct 2025 04:59:52 +0000
Manifest next update:     Sat 18 Oct 2025 05:50:52 +0000
Files and hashes:         1: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (hash: whp/BD+wi9XYnIXQaoAxbgPYxul9G7VU+PRWIyVk3sY=)
                          2: DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl (hash: sL+fTi9yh2PcfBaU6I6IPbMSLTcJQLh20UTfpbzsrP0=)
                          3: 34352e3137372e3138342e302f32322d3332203d3e20323638393933.roa (hash: Bhcl4QNuIisUlCDdMxjaHBjL1Vsw0/XGrDgzWErfU/o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:12:b1:4a:07:0e:98:52:0f:2d:cd:9e:4a:ee:29:03:fe:1e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
        Validity
            Not Before: Oct 17 04:59:52 2025 GMT
            Not After : Oct 18 05:50:52 2025 GMT
        Subject: CN=910B63A2293AF564BEE5928AB8D8457737B332BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:bf:6f:93:bd:e8:95:60:c5:0c:38:9b:6b:
                    ab:8c:ba:f3:68:cb:b8:29:e6:ea:9c:c0:f5:b2:2b:
                    d3:c7:85:e2:08:67:84:72:3a:e8:3a:6f:bd:d3:79:
                    e2:a7:c6:c2:a9:f9:3a:d0:52:0e:a9:58:03:ce:e5:
                    5d:5b:48:ba:a7:f7:12:1b:a4:a9:29:2b:31:63:46:
                    2b:87:38:2f:80:d4:e4:2d:28:09:59:12:43:49:6c:
                    b4:2b:6d:0d:71:7f:4a:67:c6:40:ed:db:73:84:fb:
                    01:ed:27:16:96:76:96:bb:be:99:96:08:48:26:5e:
                    fb:99:27:1b:96:8f:d4:62:e5:81:12:7a:bc:ac:bd:
                    1c:47:da:c9:f0:93:4d:04:5c:15:55:5c:f5:c4:cf:
                    2c:92:f0:22:f6:d8:a8:29:69:50:91:d4:5e:b1:20:
                    87:52:bc:43:54:20:ac:77:4c:96:6d:d8:46:08:34:
                    96:9b:bd:3a:94:75:68:d2:16:53:47:31:45:2a:09:
                    3a:ab:b1:78:ae:e2:2a:56:9e:71:f8:a6:69:b6:cf:
                    8e:18:b1:42:cd:82:27:8d:e7:96:04:49:3e:02:06:
                    e2:e6:7f:5d:cf:53:8a:eb:45:ec:77:e8:5c:64:e0:
                    aa:e4:a0:5a:d0:70:f7:06:42:ab:96:80:82:69:6b:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:63:A2:29:3A:F5:64:BE:E5:92:8A:B8:D8:45:77:37:B3:32:BC
            X509v3 Authority Key Identifier:
                keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:86:77:1e:57:7b:f2:99:eb:9f:ac:e5:2a:72:44:73:c7:
         fa:3a:27:f6:87:c1:31:fe:c3:f0:3d:9e:60:bf:45:46:b8:f3:
         49:a2:d1:c2:69:af:0f:ee:de:d6:df:04:92:7b:f1:95:2b:3b:
         6c:be:4f:69:5e:65:63:8f:15:da:58:df:38:1d:05:e8:1e:ee:
         fc:69:b0:ec:e4:f5:5d:a8:f2:d2:76:eb:87:16:cb:5d:89:76:
         4e:cf:d4:dc:41:ad:26:28:34:cb:75:6c:4c:d8:d7:7a:b9:eb:
         37:bf:c3:8f:94:e0:2a:e2:92:21:e8:5d:8a:c1:1d:95:43:5d:
         6b:bc:30:7e:1e:0f:44:9a:48:38:79:cd:a5:60:97:d0:29:0b:
         bf:ff:9d:b0:f8:f5:90:27:e3:ea:06:75:ae:1d:38:5b:2a:1f:
         32:46:0b:c6:77:e6:20:8c:07:aa:82:9a:de:d8:b2:64:03:e6:
         fc:e8:e5:60:14:e9:44:9f:0d:76:82:64:e4:97:dd:91:0f:8d:
         36:7e:45:36:94:36:64:3e:ab:b9:68:eb:26:af:87:72:a7:64:
         cc:12:72:89:85:dc:5f:e5:06:fd:96:90:43:1f:6a:b9:60:20:
         2a:70:86:c2:85:73:93:18:a2:32:ae:7c:8c:8b:79:5f:3d:a0:
         ed:7f:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:50 2025 by rpki-client