Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.mft
File:                     9CE419EFBCFDCE6FB074E7287D4774A9026E366C.mft (raw, json)
Hash identifier:          qMBXgNbD5lXEbYqdjIEWbqvSfk4kSsZTGVDnNWjE1+M=
Subject key identifier:   D8:F8:A1:D2:E9:1B:22:63:36:B4:9F:7B:8F:D2:14:51:8B:93:FE:18
Authority key identifier: 9C:E4:19:EF:BC:FD:CE:6F:B0:74:E7:28:7D:47:74:A9:02:6E:36:6C
Certificate issuer:       /CN=9CE419EFBCFDCE6FB074E7287D4774A9026E366C
Certificate serial:       58E1342513B2060E2D9726DE4E8B25005A7E0DA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.mft
Manifest number:          86
Signing time:             Wed 22 Jul 2026 07:42:05 +0000
Manifest this update:     Wed 22 Jul 2026 07:37:05 +0000
Manifest next update:     Thu 23 Jul 2026 10:14:05 +0000
Files and hashes:         1: 323830343a6431383a3a2f33322d3438203d3e203532353939.roa (hash: QkqqB5uoAk5t8hmTrFVbPY/o3aGWbbCh69368sqKvv4=)
                          2: 9CE419EFBCFDCE6FB074E7287D4774A9026E366C.crl (hash: ykE+bIvYFO0ACIUidhUUoYPzk9rByc5UZA702MNsDBc=)
                          3: 3137372e3132342e34302e302f32322d3234203d3e203532353939.roa (hash: xZzAFT4DaUoC1G61sEwkpMRG8nU4Uifix2m1JRjIRKc=)
                          4: 3137372e3132342e34342e302f32322d3234203d3e203532353939.roa (hash: nDcsaC8/b1LeFJoDjTXKts7Nh1h16piMzvfm/CC1reM=)
                          5: 3136382e3139372e33322e302f32322d3234203d3e203532353939.roa (hash: Q1wL7w5Zqh60necQgLheInKSKGsm4/6DGgY02kkCXj8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e1:34:25:13:b2:06:0e:2d:97:26:de:4e:8b:25:00:5a:7e:0d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE419EFBCFDCE6FB074E7287D4774A9026E366C
        Validity
            Not Before: Jul 22 07:37:05 2026 GMT
            Not After : Jul 23 10:14:05 2026 GMT
        Subject: CN=D8F8A1D2E91B226336B49F7B8FD214518B93FE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:9b:d0:c7:89:94:2d:22:08:d9:f1:9a:bb:
                    1e:4d:75:e8:76:76:60:43:f0:f0:20:19:b0:84:1f:
                    8b:cf:a9:5f:e1:4c:78:63:2c:3d:90:f6:ae:9c:00:
                    8c:6d:82:71:51:2e:aa:9a:ac:a3:eb:89:8e:d9:dd:
                    a4:93:d4:a1:ec:0a:27:62:04:d8:4c:6c:3a:6b:c7:
                    63:79:bb:e1:dc:78:94:07:88:2b:ae:45:30:20:72:
                    06:c2:9b:51:bd:16:0c:6d:b8:41:44:b8:aa:15:99:
                    45:ab:c0:28:26:cc:58:2a:2e:f7:c4:88:33:6d:0e:
                    48:2e:78:c2:73:a8:59:f9:a2:8f:ce:e1:ee:83:c7:
                    b7:4b:2c:ec:36:9a:c6:de:f4:97:5e:c1:7f:b1:52:
                    05:ab:0b:b1:b6:17:56:ef:13:b6:6d:dc:81:c0:50:
                    47:dc:53:bf:e4:4a:e7:6f:af:09:8c:08:88:3c:f4:
                    fd:8f:90:b0:ae:db:0f:f6:58:a2:0e:db:5d:57:11:
                    4e:4e:77:d2:6d:f7:32:86:1f:76:13:c8:34:40:68:
                    a9:6c:7d:c5:5f:bc:4e:7f:a0:45:a9:2e:8b:01:3b:
                    69:94:95:f3:f9:98:ca:7e:93:7b:21:f1:39:45:83:
                    02:e3:4b:1d:70:34:97:3e:bc:6c:b8:d1:66:be:b1:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F8:A1:D2:E9:1B:22:63:36:B4:9F:7B:8F:D2:14:51:8B:93:FE:18
            X509v3 Authority Key Identifier:
                keyid:9C:E4:19:EF:BC:FD:CE:6F:B0:74:E7:28:7D:47:74:A9:02:6E:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/9CE419EFBCFDCE6FB074E7287D4774A9026E366C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:55:c6:d2:53:58:9f:00:06:be:72:56:c2:f4:2e:b9:ef:
         70:02:60:a6:30:a4:7c:a4:11:a8:f1:2c:cb:a6:f2:38:c4:76:
         37:10:31:01:2d:f7:89:bc:8e:a1:61:b3:f7:ae:1b:f9:80:f4:
         9a:4e:b1:80:9c:07:5c:4d:77:a2:6a:b5:26:1e:09:70:ee:10:
         fb:32:60:27:74:77:c3:25:1c:17:95:3d:df:1b:57:10:0a:dc:
         10:6f:d0:99:b6:2a:9e:79:52:c0:1d:73:f9:61:3b:29:0d:a0:
         4b:a3:d6:93:ff:29:1b:36:7a:e1:c9:4d:24:4d:00:a9:bd:59:
         96:47:7a:8e:bc:f1:28:80:b9:b4:d3:23:24:1b:d1:d9:da:38:
         f8:44:6e:65:75:f0:8f:ef:24:d3:d5:74:aa:bf:9f:ac:50:14:
         6a:e7:ff:ad:53:6b:e7:c8:4b:01:f1:fa:40:85:0c:ca:93:69:
         94:ad:4d:1c:40:5f:ab:03:bb:02:c7:a0:4c:af:76:9f:a6:a1:
         cd:c9:87:06:a9:13:81:54:df:e9:63:a4:63:1e:a1:2f:7f:97:
         1d:54:e1:0b:1b:57:91:88:ed:f5:43:8a:0b:6d:95:46:5f:4d:
         5a:d8:7c:3b:b4:93:09:7d:ea:bb:eb:a5:7f:3b:26:4d:22:2a:
         c5:51:67:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWOE0JROyBg4tlybeToslAFp+DaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNFNDE5RUZCQ0ZEQ0U2RkIwNzRFNzI4N0Q0Nzc0QTkw
MjZFMzY2QzAeFw0yNjA3MjIwNzM3MDVaFw0yNjA3MjMxMDE0MDVaMDMxMTAvBgNV
BAMTKEQ4RjhBMUQyRTkxQjIyNjMzNkI0OUY3QjhGRDIxNDUxOEI5M0ZFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gJvQx4mULSII2fGaux5Ndeh2
dmBD8PAgGbCEH4vPqV/hTHhjLD2Q9q6cAIxtgnFRLqqarKPriY7Z3aST1KHsCidi
BNhMbDprx2N5u+HceJQHiCuuRTAgcgbCm1G9FgxtuEFEuKoVmUWrwCgmzFgqLvfE
iDNtDkgueMJzqFn5oo/O4e6Dx7dLLOw2msbe9JdewX+xUgWrC7G2F1bvE7Zt3IHA
UEfcU7/kSudvrwmMCIg89P2PkLCu2w/2WKIO211XEU5Od9Jt9zKGH3YTyDRAaKls
fcVfvE5/oEWpLosBO2mUlfP5mMp+k3sh8TlFgwLjSx1wNJc+vGy40Wa+sUh5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2Pih0ukbImM2tJ97j9IUUYuT/hgwHwYDVR0j
BBgwFoAUnOQZ77z9zm+wdOcofUd0qQJuNmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRteTVpdEpUVFVqYUJ6QktrTUhpRnlFZG5XOW9qYzVtbkNyenZSWWhW
bkEvMC85Q0U0MTlFRkJDRkRDRTZGQjA3NEU3Mjg3RDQ3NzRBOTAyNkUzNjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRTQxOUVGQkNGRENFNkZC
MDc0RTcyODdENDc3NEE5MDI2RTM2NkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRteTVpdEpUVFVqYUJ6QktrTUhpRnlFZG5XOW9qYzVtbkNyenZSWWhWbkEvMC85
Q0U0MTlFRkJDRkRDRTZGQjA3NEU3Mjg3RDQ3NzRBOTAyNkUzNjZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWKxVxtJTWJ8ABr5yVsL0LrnvcAJgpjCkfKQRqPEsy6byOMR2NxAxAS33ibyO
oWGz964b+YD0mk6xgJwHXE13omq1Jh4JcO4Q+zJgJ3R3wyUcF5U93xtXEArcEG/Q
mbYqnnlSwB1z+WE7KQ2gS6PWk/8pGzZ64clNJE0Aqb1Zlkd6jrzxKIC5tNMjJBvR
2do4+ERuZXXwj+8k09V0qr+frFAUauf/rVNr58hLAfH6QIUMypNplK1NHEBfqwO7
AsegTK92n6ahzcmHBqkTgVTf6WOkYx6hL3+XHVThCxtXkYjt9UOKC22VRl9NWth8
O7STCX3qu+ulfzsmTSIqxVFnNA==
-----END CERTIFICATE-----