Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.mft
File:                     1895ECB6D9509F32313CB621B29E507AE1048B65.mft (raw, json)
Hash identifier:          9BA0LHENS1VQRoOP3z+bkb8OEHPkx/ccFP7E91yTO2s=
Subject key identifier:   87:B0:A8:1C:2B:A7:A8:D5:C9:E7:E4:F6:77:1F:0F:0D:30:21:8E:EA
Authority key identifier: 18:95:EC:B6:D9:50:9F:32:31:3C:B6:21:B2:9E:50:7A:E1:04:8B:65
Certificate issuer:       /CN=1895ECB6D9509F32313CB621B29E507AE1048B65
Certificate serial:       36A179E9A3DC0A16D6AA3D918C8AE28C3535BDAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1895ECB6D9509F32313CB621B29E507AE1048B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.mft
Manifest number:          B9
Signing time:             Fri 17 Oct 2025 10:43:19 +0000
Manifest this update:     Fri 17 Oct 2025 10:38:19 +0000
Manifest next update:     Sat 18 Oct 2025 13:43:19 +0000
Files and hashes:         1: 1895ECB6D9509F32313CB621B29E507AE1048B65.crl (hash: 6d94HVFH6z11S/e9ZtwVUN+9a2ggVtwYoaCVF/5e/E0=)
                          2: 323830343a316564633a3a2f33322d313238203d3e20323634343530.roa (hash: 4kZ2wmSTLV8sgzi4noIBaR5mxxts/uJ/cCkrfm+miA8=)
                          3: 3133312e3235352e33362e302f32322d3332203d3e20323634343530.roa (hash: iQOUJ3vEqWQz6zVoIR8nwyECBAcVsWDlMKK93QvFtmY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a1:79:e9:a3:dc:0a:16:d6:aa:3d:91:8c:8a:e2:8c:35:35:bd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1895ECB6D9509F32313CB621B29E507AE1048B65
        Validity
            Not Before: Oct 17 10:38:19 2025 GMT
            Not After : Oct 18 13:43:19 2025 GMT
        Subject: CN=87B0A81C2BA7A8D5C9E7E4F6771F0F0D30218EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:2f:f8:aa:46:e1:a7:17:54:47:ab:b6:30:
                    15:bd:f8:e7:51:76:3e:7b:62:72:66:ec:d6:a5:ee:
                    c6:78:b9:5e:dc:37:51:b3:0a:2d:56:35:81:f2:cc:
                    4e:ca:2c:48:d5:a2:20:a8:ee:8e:3c:e6:95:4f:e2:
                    a7:12:54:b2:56:b7:b5:bf:87:fe:12:83:c7:3c:e7:
                    5e:24:15:65:cf:a1:40:fc:ba:89:8c:70:6e:1b:a6:
                    20:4c:54:c5:a8:f4:df:6a:40:0c:85:49:4a:d6:b5:
                    f9:2a:7b:45:95:fa:9b:03:78:c5:39:69:8f:be:b8:
                    1e:79:ed:2c:13:76:8b:55:21:56:c6:23:b5:99:0e:
                    47:8b:0a:99:5b:20:af:93:65:54:c3:a6:d6:b3:56:
                    01:1f:2b:1b:11:f4:99:6f:a1:2b:a3:b7:d5:b6:49:
                    19:89:6f:1c:1b:19:6c:4d:87:1b:07:63:c0:70:84:
                    82:9e:29:b0:bc:a7:c5:1e:d8:0c:86:35:37:fa:99:
                    9a:5a:14:94:a8:10:34:03:b6:b1:01:0d:6e:73:15:
                    05:cf:f2:11:f1:22:9e:6f:d6:90:aa:c6:73:40:94:
                    44:a2:14:1c:6e:3c:ba:3c:5b:ba:fa:db:88:18:b0:
                    4e:66:82:96:03:04:d7:cd:48:bc:b3:02:5e:c0:53:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:A8:1C:2B:A7:A8:D5:C9:E7:E4:F6:77:1F:0F:0D:30:21:8E:EA
            X509v3 Authority Key Identifier:
                keyid:18:95:EC:B6:D9:50:9F:32:31:3C:B6:21:B2:9E:50:7A:E1:04:8B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1895ECB6D9509F32313CB621B29E507AE1048B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a9:71:05:7f:6c:70:fd:f0:60:96:df:7b:f1:ea:d2:02:25:
         39:1d:ce:e4:6a:6a:39:18:e3:64:b7:a7:fd:35:59:66:39:23:
         5c:74:90:7b:a1:9a:a3:34:bf:f2:ea:d9:7a:36:10:fb:6b:b7:
         b6:8c:db:74:1c:0d:27:59:4c:eb:b3:63:44:e3:db:23:21:06:
         3f:c4:98:be:e4:91:0a:58:b1:26:49:d2:5c:e7:d3:5a:a6:5c:
         d2:09:11:79:21:68:0d:b3:7e:5c:53:82:89:58:86:81:0f:20:
         73:1b:c4:48:55:b0:02:13:b5:c3:c5:4f:57:09:bf:13:3e:9b:
         5b:4f:4d:9a:1c:bc:2b:d4:43:6c:3b:d5:44:bd:ed:50:a0:83:
         73:9e:a4:57:73:2f:3f:42:27:49:ed:87:c8:2c:c5:94:ea:30:
         2d:8f:c1:e5:f7:87:c5:28:37:5e:53:31:c0:89:89:d9:9c:c3:
         d8:01:8a:1a:2d:fe:66:82:9c:44:89:16:71:14:5a:5d:21:9e:
         57:82:74:40:37:22:65:1a:bb:c5:ed:14:00:31:cd:86:bc:90:
         be:8e:81:bb:79:2d:93:79:b7:c1:0a:f0:44:b1:d4:5d:0f:e1:
         13:08:bd:47:37:ee:0c:1f:91:1e:8a:26:43:56:15:68:9a:8c:
         da:18:2c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----