Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft
File:                     CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft (raw, json)
Hash identifier:          20QjfNuDbVgIWOCCYrwVbiC/5ASVfD+rtcEdEejry/8=
Subject key identifier:   61:03:EB:E8:D3:24:93:50:59:A8:7A:AC:6E:67:09:8F:3B:51:37:4A
Authority key identifier: CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1
Certificate issuer:       /CN=CDF9B344093A732ACA13F9626B1A7EE142D0CFF1
Certificate serial:       47ECD28039A06DB24974604A8A752019E21CCD39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft
Manifest number:          08
Signing time:             Thu 16 Oct 2025 21:11:40 +0000
Manifest this update:     Thu 16 Oct 2025 21:06:40 +0000
Manifest next update:     Fri 17 Oct 2025 21:21:40 +0000
Files and hashes:         1: 323830343a373965383a3a2f33322d3335203d3e20323731333335.roa (hash: +cC4h/GB9ys5eDvWW7kEqs1BNxue4K5GqEcKCwMAHMs=)
                          2: CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.crl (hash: xVe9pYIp4zrtZqF01yTvxaVoxhtAh6mM95HEFBCdAwk=)
                          3: 3230372e3234382e32302e302f32322d3234203d3e20323731333335.roa (hash: WNQReu+QTS9FmTINMDOaEocIS4tiWW+Fbi1D2OIuncI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ec:d2:80:39:a0:6d:b2:49:74:60:4a:8a:75:20:19:e2:1c:cd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDF9B344093A732ACA13F9626B1A7EE142D0CFF1
        Validity
            Not Before: Oct 16 21:06:40 2025 GMT
            Not After : Oct 17 21:21:40 2025 GMT
        Subject: CN=6103EBE8D324935059A87AAC6E67098F3B51374A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:55:37:35:c9:d3:8d:ed:fc:99:d8:14:67:
                    c6:0a:08:ad:44:70:02:8e:82:21:dd:c9:c9:84:34:
                    47:07:94:08:51:74:a1:09:98:ac:0b:4f:12:6f:0e:
                    9b:3b:b6:7f:0b:6b:e3:3a:a6:2d:7f:c9:ff:93:ae:
                    fe:bd:29:bd:43:56:d8:06:ca:0a:fa:63:11:84:a2:
                    fc:c1:06:23:b1:ef:50:68:3a:f3:f8:27:65:40:f5:
                    6e:d9:0b:21:d7:bf:85:07:7b:7a:a0:48:21:1c:58:
                    2c:e6:30:0b:67:fb:cc:2b:f3:c5:75:a5:62:0a:7a:
                    7e:a9:a9:4e:44:d1:d2:d4:ab:90:29:81:c3:1b:52:
                    7d:03:1d:77:46:9b:a6:de:5e:28:d1:31:f1:4b:76:
                    d7:0c:b9:e4:a5:d4:74:19:27:13:f5:59:19:a6:c4:
                    38:91:73:0d:8a:aa:16:b6:38:74:ec:7b:b3:7f:9c:
                    6e:43:7a:a4:fc:81:37:0a:be:8d:99:d7:86:81:2f:
                    3c:4c:64:fb:0d:6d:17:3a:73:f8:4b:23:89:e5:31:
                    9f:c9:b6:d1:e3:dd:3e:0d:0a:20:92:a6:7b:c0:22:
                    a3:7f:e0:65:23:ae:7c:47:8e:45:c0:9b:0d:a3:d4:
                    5c:57:b5:4c:97:8a:be:c1:80:a8:f2:85:18:8e:a9:
                    6f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:EB:E8:D3:24:93:50:59:A8:7A:AC:6E:67:09:8F:3B:51:37:4A
            X509v3 Authority Key Identifier:
                keyid:CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:37:a9:fa:3c:12:f6:23:b1:9f:7f:ad:31:45:a1:60:f8:e9:
         df:69:c9:28:53:03:f8:4d:12:e4:20:7b:a1:e1:3c:68:7e:d2:
         71:6b:2f:aa:14:e0:f8:4c:20:1e:9a:04:cf:d2:6a:8a:3f:26:
         7e:c7:57:c2:19:7f:ed:59:e4:18:11:d2:ed:9f:5d:62:4e:89:
         f2:bf:a9:99:84:a0:dc:e0:ab:46:b0:ca:53:0c:f2:ab:d0:c6:
         00:eb:ba:d5:ab:2b:e8:59:01:cf:b6:17:4c:f3:57:11:45:fe:
         fe:86:4e:f2:3d:39:94:39:39:6a:06:bf:93:2c:33:61:51:40:
         ab:af:ed:c1:34:11:95:c5:30:9a:b6:c8:c5:1d:76:47:8e:1e:
         65:f9:e8:41:f9:80:c1:d0:28:d2:8a:3b:77:db:3a:ee:cb:ce:
         48:f2:da:7c:f6:2b:8c:a1:3f:cd:0a:00:fe:67:a5:fc:89:a1:
         d3:e2:3a:95:a2:55:ac:70:d2:9e:cf:6f:38:e5:0a:c9:46:cc:
         c1:c4:1b:5e:2f:06:15:64:da:06:83:99:ca:cd:4d:71:10:26:
         d4:6f:95:f1:1f:33:4d:55:b9:aa:69:25:31:cd:b9:f2:1b:b0:
         60:37:99:b6:e1:07:78:d0:2f:1f:44:66:ee:70:75:b7:0b:2e:
         79:dd:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----