Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          gQdANbMhM8gvjp1RRuURxbKAV8W7kNEXfBL2QYKG670=
Subject key identifier:   7F:45:8A:CF:C6:13:E0:6E:69:26:9B:BC:17:D0:C9:50:55:89:A2:D7
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       5E829E3F21F700E8F14CCF0272637C1E5E7AB55D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          0116
Signing time:             Thu 16 Oct 2025 22:01:09 +0000
Manifest this update:     Thu 16 Oct 2025 21:56:09 +0000
Manifest next update:     Sat 18 Oct 2025 01:09:09 +0000
Files and hashes:         1: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=)
                          2: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: 9K91i127md1BFwSFtH/WC2J1+mPpXiI8I3x6ed+cI+U=)
                          3: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=)
                          4: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=)
                          5: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:82:9e:3f:21:f7:00:e8:f1:4c:cf:02:72:63:7c:1e:5e:7a:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Oct 16 21:56:09 2025 GMT
            Not After : Oct 18 01:09:09 2025 GMT
        Subject: CN=7F458ACFC613E06E69269BBC17D0C9505589A2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:b4:6f:d6:86:8a:2f:96:31:09:b4:37:d6:
                    89:b4:08:7a:ac:75:11:d0:0c:6e:23:30:d0:88:a3:
                    10:d3:2e:4e:44:ee:73:66:27:25:fd:64:f8:36:57:
                    fc:40:5e:06:f7:ec:46:00:bd:5a:3b:d4:3b:cd:34:
                    d8:af:fb:7c:11:ba:02:94:a7:dc:63:61:cc:71:64:
                    d1:d7:d5:c2:38:c9:fe:ca:d4:3f:a2:9c:ac:10:1f:
                    e9:0e:14:f6:48:8e:cc:51:aa:4c:57:a7:b3:de:aa:
                    59:f2:fb:af:8c:e1:4e:ac:44:3a:0c:8b:6a:e7:fb:
                    be:15:17:93:ad:3d:77:ee:8d:37:58:a4:60:4f:fe:
                    cf:bd:e7:05:26:5e:df:28:ba:52:e4:1c:e8:b8:ae:
                    fb:c2:fb:00:22:7a:6c:3a:78:62:c1:8c:c1:68:e3:
                    ff:3b:c4:17:b0:a1:fc:ef:88:12:59:a5:d5:e3:a6:
                    57:84:b1:54:e4:04:e9:8f:5a:e6:85:1c:a7:57:39:
                    d2:65:49:e1:92:a5:80:15:a7:1f:65:ac:86:b9:fd:
                    af:1f:59:b7:99:df:c8:89:79:9e:d0:bb:8b:9f:33:
                    5a:66:7c:ee:50:25:a1:8b:63:a6:0b:f5:49:22:b9:
                    5b:48:00:a6:c1:c4:19:a9:0c:8d:af:b3:85:36:5c:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:8A:CF:C6:13:E0:6E:69:26:9B:BC:17:D0:C9:50:55:89:A2:D7
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:e0:78:27:d2:39:a2:d2:dc:fd:3f:9e:cd:70:ea:79:cb:
         42:01:27:10:49:db:fa:1e:f4:8f:cf:4a:f9:ef:ce:fd:28:ad:
         e3:a2:3b:ea:aa:65:1f:0a:b9:b7:32:00:02:24:a4:d7:9b:59:
         07:fc:02:74:bf:2d:45:a8:27:b9:e8:1e:11:ce:44:cf:59:76:
         c6:68:59:36:f6:67:65:dc:a2:3b:27:f1:f3:d1:f4:c3:1b:97:
         d5:14:1e:f4:f9:e8:0d:fd:66:f6:64:c3:6e:c5:a0:f0:9a:43:
         cc:6c:00:d3:c1:41:f5:15:46:27:db:ce:67:d8:eb:11:ff:e3:
         e5:0c:f0:97:d7:97:1c:23:ae:54:21:3b:44:39:ad:73:70:c0:
         d4:ac:64:dc:30:e5:b1:da:6e:3c:d4:cf:a2:b9:13:76:05:d0:
         e9:e8:97:c6:6d:9e:3b:28:8c:fc:df:a8:36:61:6b:e7:5e:de:
         09:b7:21:9f:c8:db:b7:dd:ba:fc:e6:59:b7:20:21:87:83:2f:
         ca:52:be:b4:77:c0:02:49:cd:59:53:7c:18:6c:37:ed:39:42:
         ff:cf:0e:28:7d:51:4f:b2:e8:5e:99:29:fb:43:f1:67:8a:a1:
         3e:57:ff:9b:95:11:1f:08:b9:5e:4c:46:a7:1b:b9:80:ba:41:
         fb:e7:92:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXoKePyH3AOjxTM8CcmN8Hl56tV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD
ODlENDlGMzAeFw0yNTEwMTYyMTU2MDlaFw0yNTEwMTgwMTA5MDlaMDMxMTAvBgNV
BAMTKDdGNDU4QUNGQzYxM0UwNkU2OTI2OUJCQzE3RDBDOTUwNTU4OUEyRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVErRv1oaKL5YxCbQ31om0CHqs
dRHQDG4jMNCIoxDTLk5E7nNmJyX9ZPg2V/xAXgb37EYAvVo71DvNNNiv+3wRugKU
p9xjYcxxZNHX1cI4yf7K1D+inKwQH+kOFPZIjsxRqkxXp7Peqlny+6+M4U6sRDoM
i2rn+74VF5OtPXfujTdYpGBP/s+95wUmXt8oulLkHOi4rvvC+wAiemw6eGLBjMFo
4/87xBewofzviBJZpdXjpleEsVTkBOmPWuaFHKdXOdJlSeGSpYAVpx9lrIa5/a8f
WbeZ38iJeZ7Qu4ufM1pmfO5QJaGLY6YL9UkiuVtIAKbBxBmpDI2vs4U2XNJzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUf0WKz8YT4G5pJpu8F9DJUFWJotcwHwYDVR0j
BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz
NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y
MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC5TgeCfSOaLS3P0/ns1w6nnLQgEnEEnb+h70j89K+e/O/Sit46I76qplHwq5
tzIAAiSk15tZB/wCdL8tRagnuegeEc5Ez1l2xmhZNvZnZdyiOyfx89H0wxuX1RQe
9PnoDf1m9mTDbsWg8JpDzGwA08FB9RVGJ9vOZ9jrEf/j5Qzwl9eXHCOuVCE7RDmt
c3DA1Kxk3DDlsdpuPNTPorkTdgXQ6eiXxm2eOyiM/N+oNmFr517eCbchn8jbt926
/OZZtyAhh4MvylK+tHfAAknNWVN8GGw37TlC/88OKH1RT7LoXpkp+0PxZ4qhPlf/
m5URHwi5XkxGpxu5gLpB++eSiw==
-----END CERTIFICATE-----