Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.mft
File:                     4478F2E563AE0EF528070FBFA4422FE0B7926F26.mft (raw, json)
Hash identifier:          pJtX203jZTJ74rIrW4D63KrqUg3t2VkiA4RU9cd2dsM=
Subject key identifier:   70:FB:18:0C:57:DD:76:57:93:3C:8E:5E:06:35:58:04:5F:E4:F5:89
Authority key identifier: 44:78:F2:E5:63:AE:0E:F5:28:07:0F:BF:A4:42:2F:E0:B7:92:6F:26
Certificate issuer:       /CN=4478F2E563AE0EF528070FBFA4422FE0B7926F26
Certificate serial:       7B105339D67360C7C2785160CBC718FAC300EBDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.mft
Manifest number:          02E0
Signing time:             Fri 17 Oct 2025 09:52:19 +0000
Manifest this update:     Fri 17 Oct 2025 09:47:19 +0000
Manifest next update:     Sat 18 Oct 2025 10:23:19 +0000
Files and hashes:         1: 4478F2E563AE0EF528070FBFA4422FE0B7926F26.crl (hash: O3cqSYqKnMAJ87mElePOOZhwTnWEz8yH5U8ZVZkceFs=)
                          2: 3137302e37392e36302e302f32322d3234203d3e20323636323837.roa (hash: JU0ndViKXqUAXr/TD06BzCsmneclMRpentBb6uvu5qg=)
                          3: 323830343a333537343a3a2f33322d3438203d3e20323636323837.roa (hash: ejTdoyV5jiOu2+jPwKEbu0ofbGbnepdKMOzykdNYcns=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:10:53:39:d6:73:60:c7:c2:78:51:60:cb:c7:18:fa:c3:00:eb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4478F2E563AE0EF528070FBFA4422FE0B7926F26
        Validity
            Not Before: Oct 17 09:47:19 2025 GMT
            Not After : Oct 18 10:23:19 2025 GMT
        Subject: CN=70FB180C57DD7657933C8E5E063558045FE4F589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:fe:07:ca:19:25:16:55:8f:a3:00:ad:f8:
                    e7:3a:57:bd:84:ff:5d:0a:b1:f0:7e:26:3a:f5:b1:
                    92:34:28:95:13:e9:42:a1:57:e0:c5:5a:16:94:6f:
                    be:f7:e6:83:37:33:14:5b:df:2d:02:18:20:f9:38:
                    2a:c7:26:b6:35:a7:5e:21:0d:a6:67:fa:37:2a:bb:
                    d5:9e:1b:e2:53:1d:e1:f0:02:44:22:39:50:d6:25:
                    6f:32:23:da:56:dc:a0:d0:20:bf:e4:6a:bf:03:d5:
                    33:a8:eb:c0:86:a5:6f:b2:56:2c:71:7e:9d:ae:65:
                    87:85:94:6d:39:cb:19:5e:85:3c:20:af:37:d9:36:
                    8a:25:af:d6:7f:c5:36:68:9a:42:1b:8c:ba:64:70:
                    44:18:47:7f:d4:77:c7:83:6a:d5:2e:2a:7f:fa:b3:
                    a1:00:f5:3b:44:67:be:c1:b3:c9:cb:0f:3e:56:3f:
                    fb:f3:d1:6e:14:1a:bb:01:05:36:8f:40:f2:ba:f8:
                    7d:b0:0c:a8:5b:75:9d:92:59:68:07:fa:0b:95:7d:
                    10:2d:6a:4d:cd:72:c1:ea:fe:eb:95:c3:87:8c:27:
                    97:5f:be:25:28:0c:c5:9b:c8:c1:72:b2:06:66:c0:
                    4d:5c:1b:5c:6f:71:d6:e0:7a:25:6a:35:0c:0f:2b:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:18:0C:57:DD:76:57:93:3C:8E:5E:06:35:58:04:5F:E4:F5:89
            X509v3 Authority Key Identifier:
                keyid:44:78:F2:E5:63:AE:0E:F5:28:07:0F:BF:A4:42:2F:E0:B7:92:6F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:d0:cb:72:61:73:a9:24:2d:ce:f9:a1:b9:cc:8a:80:52:
         e5:da:3d:b5:86:d7:39:61:35:3a:30:b7:9e:04:ae:78:43:40:
         12:5b:ce:7b:4e:b8:86:18:fc:1c:34:af:4e:1a:6a:51:f1:2f:
         28:e1:4b:cc:61:1e:5e:a3:a8:7a:82:02:28:30:5c:af:ae:bb:
         7d:bb:27:59:44:97:ef:0c:bc:ce:2a:a2:73:a6:91:70:72:f2:
         12:a7:64:9b:4e:34:08:b6:b3:0f:61:5a:4b:26:4e:ad:a4:3f:
         96:79:58:49:9a:04:18:7f:4c:f9:73:41:df:25:40:a9:2d:8e:
         a1:67:e6:e7:0a:d5:44:bd:31:61:e8:05:93:4a:fa:87:58:a9:
         52:5c:e3:6b:e8:e7:79:f3:b5:77:6a:81:13:1d:98:24:79:2e:
         71:97:72:fc:2d:1d:08:69:c4:26:59:7c:81:4a:17:e3:68:6a:
         f2:3e:bc:6c:b2:e1:73:ac:40:75:e7:da:ed:69:66:c8:90:5d:
         13:dc:46:18:1c:c1:e1:d5:3c:35:cf:57:28:72:93:a8:73:0a:
         a3:a4:f4:1f:4c:d9:41:6f:11:21:cc:10:2a:88:b8:a7:95:8e:
         34:df:62:ca:d9:44:f7:d9:0b:30:2d:9d:82:ef:af:c5:fc:51:
         9c:d6:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----