Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
File:                     8B5B625A528EC464925ACB69248E90494483E3F7.mft (raw, json)
Hash identifier:          80TqJwpgExZW7W0VBLz1G3qSlvGnXUaN1O5k3td6drI=
Subject key identifier:   81:1C:C5:38:52:CA:A5:3B:24:F9:CE:1A:81:50:3C:CF:38:28:4C:F8
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       0AC339FC7A5358F0D8CF0AEE260D0445C108C129
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
Manifest number:          02E8
Signing time:             Fri 17 Oct 2025 04:57:18 +0000
Manifest this update:     Fri 17 Oct 2025 04:52:18 +0000
Manifest next update:     Sat 18 Oct 2025 06:33:18 +0000
Files and hashes:         1: 8B5B625A528EC464925ACB69248E90494483E3F7.crl (hash: PB2r0DnyqUVm9xGEqo5h2Y/eF5Ktl7mbrKmJ1scoByc=)
                          2: 3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (hash: ObqAafyNZ+1poxt3i+2GRujB4s5MDqvrCcZ2DXBseOg=)
                          3: 323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (hash: +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:39:fc:7a:53:58:f0:d8:cf:0a:ee:26:0d:04:45:c1:08:c1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Oct 17 04:52:18 2025 GMT
            Not After : Oct 18 06:33:18 2025 GMT
        Subject: CN=811CC53852CAA53B24F9CE1A81503CCF38284CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:61:24:ec:d6:f7:9a:6e:b1:29:ab:03:fe:
                    c2:a6:97:88:42:d2:5a:e3:c7:62:a5:89:aa:01:01:
                    cf:c6:9a:ae:72:2f:91:1c:0f:80:8c:22:ad:66:3b:
                    de:c0:d2:16:cf:f7:8a:f3:52:a0:b4:9f:06:82:32:
                    b3:ea:f0:f3:62:ca:16:51:56:ab:69:ee:d3:ea:02:
                    84:fd:bd:3d:92:6f:03:90:33:cb:da:8a:f9:f4:2c:
                    8c:bc:9e:23:3c:6d:d6:86:3b:d6:b8:e5:2d:cf:c8:
                    e9:3d:f6:11:d3:2b:97:92:2b:fb:54:42:58:aa:9a:
                    6b:aa:11:b7:70:26:b7:5c:15:8e:c1:a2:c5:77:84:
                    1c:05:3e:74:8b:e2:1d:0c:68:bc:02:f1:9f:df:7e:
                    e6:d9:44:5c:a3:b7:4d:1c:34:bf:38:5f:f5:e7:ba:
                    43:57:50:74:e2:25:46:38:91:ab:c0:e4:68:69:e3:
                    ab:d4:f6:ee:2d:7b:d4:78:52:31:c9:c9:0d:4b:47:
                    bc:c9:b0:ef:71:2a:e9:85:f7:1b:9f:13:63:a4:a6:
                    25:1e:d1:bd:4e:55:a4:98:cf:9c:2a:ca:1e:42:39:
                    c1:1c:9e:b1:7b:c9:aa:74:f5:a3:0a:39:0b:2e:cd:
                    f8:2c:ad:3a:52:bd:18:18:de:58:26:1a:24:16:21:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1C:C5:38:52:CA:A5:3B:24:F9:CE:1A:81:50:3C:CF:38:28:4C:F8
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:f4:30:6c:7c:63:64:83:72:7d:01:b6:38:1a:3e:d5:42:
         7b:f5:aa:43:40:c5:4d:73:7b:c0:2b:f9:5a:df:4f:e9:75:6f:
         d4:d8:6e:01:a1:87:8c:21:3c:a4:8e:9f:97:08:88:3d:36:93:
         ae:86:39:36:c7:bb:87:4a:b9:7f:4e:d5:b4:e6:42:81:59:cc:
         f9:b1:d8:27:29:83:ff:ea:6a:bc:b2:0b:57:18:de:8d:f0:7d:
         b8:04:32:93:60:23:4f:66:80:41:e7:cb:71:64:42:03:de:c0:
         54:b8:de:34:f5:28:65:cd:f2:0c:42:e7:88:ad:47:cb:ce:86:
         4e:7d:49:28:cd:9c:21:31:3a:e5:a0:0c:49:d4:89:6f:49:89:
         e8:f3:46:b8:16:5a:81:14:b9:27:4f:7c:80:bb:56:46:40:a3:
         c5:ab:28:f0:fc:1c:e9:47:62:53:65:6e:3a:48:5a:51:d4:47:
         b4:83:fd:16:24:6a:95:8e:ad:87:8d:0b:91:60:de:97:ed:5c:
         09:3e:23:7f:c9:59:78:d5:a2:37:4a:de:7f:30:5b:4e:64:72:
         54:a3:43:9a:81:a5:0d:f4:2f:0a:a6:51:30:8e:59:48:ab:39:
         a3:32:07:3d:c7:1f:c2:92:d9:79:e2:66:f5:5b:d6:ea:de:b9:
         28:7d:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----