Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft
File:                     9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft (raw, json)
Hash identifier:          PQoqKoxCYlmZVv3kOxeE7Rho11/7oG/MuRPI3GNZZeA=
Subject key identifier:   7A:82:50:5B:7A:22:08:6D:9C:40:7C:F4:80:1D:28:70:04:D5:87:BB
Authority key identifier: 9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF
Certificate issuer:       /CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF
Certificate serial:       49E55228171DF9008843E19213D41B780B30D271
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft
Manifest number:          0218
Signing time:             Fri 17 Oct 2025 16:14:55 +0000
Manifest this update:     Fri 17 Oct 2025 16:09:55 +0000
Manifest next update:     Sat 18 Oct 2025 17:13:55 +0000
Files and hashes:         1: 9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl (hash: KXWgEqrE47IUB69S7KjwgK31HFFmS7/1j1RNlLrNv64=)
                          2: 323830343a313535343a3a2f33322d313238203d3e20323633333834.roa (hash: vYVkCme4pBRU1lKRGxz35ZXZfH/Z7kjYp6ehY4o+mPk=)
                          3: 3137372e38372e32382e302f32322d3332203d3e20323633333834.roa (hash: G0CeK+AHeRa3+Wye7uL8TGBW+zmjtRBpD/9+x2RGZGs=)
                          4: 3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa (hash: A9MeL/JDVl++ev4+9Ts1WR5HzgScEfXvpvxPxUBNQkg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e5:52:28:17:1d:f9:00:88:43:e1:92:13:d4:1b:78:0b:30:d2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF
        Validity
            Not Before: Oct 17 16:09:55 2025 GMT
            Not After : Oct 18 17:13:55 2025 GMT
        Subject: CN=7A82505B7A22086D9C407CF4801D287004D587BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:51:42:51:0e:9f:83:ab:3f:28:e4:c5:b4:
                    b5:d8:7c:ca:0e:31:78:f6:a0:72:86:30:f2:75:d7:
                    1f:1a:16:96:2b:a3:d2:50:52:79:25:cc:32:9d:87:
                    8b:3a:83:91:6f:9e:20:0b:c3:fb:08:9f:73:4e:f8:
                    e0:e0:7b:33:b1:64:ee:41:a8:bd:55:8a:10:00:0b:
                    ec:0b:ad:67:2d:cf:9d:da:e4:b5:c1:e8:78:49:99:
                    4b:27:87:cd:c1:34:ac:c6:de:40:76:3e:c7:9f:b7:
                    a0:80:e4:13:7b:58:64:2e:ce:14:02:5c:26:0a:d1:
                    ba:db:d6:b4:e3:df:4e:75:da:43:77:1a:2c:63:46:
                    bc:00:9c:27:3e:47:ce:2c:cc:87:a6:3c:23:62:4a:
                    90:b3:b9:fe:78:6a:b9:ae:58:ee:1f:33:9e:68:98:
                    12:5d:74:28:05:a5:df:83:b0:6f:4d:d8:3e:c9:d0:
                    36:3b:67:0e:a3:7d:39:cb:25:3d:a5:8f:48:4d:7d:
                    e4:f5:a4:e9:82:24:8c:83:08:f2:b4:7f:70:6b:ed:
                    15:58:43:1a:2e:0b:b7:73:d2:96:84:00:91:08:74:
                    69:51:6a:18:c6:81:60:49:c7:bd:56:a0:43:12:43:
                    96:bd:fc:f1:a8:78:f6:3a:30:20:d6:dc:46:97:c7:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:50:5B:7A:22:08:6D:9C:40:7C:F4:80:1D:28:70:04:D5:87:BB
            X509v3 Authority Key Identifier:
                keyid:9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:fb:98:ad:3a:6f:6e:e7:ef:af:a9:1e:90:47:ff:25:93:
         4f:dd:05:ae:ab:ff:6a:5f:d2:19:7c:6c:23:30:86:ef:19:8b:
         eb:00:1c:f4:ec:51:08:0a:89:da:22:29:fd:0c:37:77:36:4e:
         93:cf:95:8a:fa:de:a6:b8:f5:41:68:f5:9e:62:76:86:48:d7:
         7f:9b:b1:67:62:5a:95:0f:e1:d8:41:f0:aa:29:cb:f1:e6:4e:
         be:d0:e3:a6:9b:04:2b:03:f7:3f:5e:a7:2a:84:93:77:9b:2d:
         fa:ae:c2:d6:87:aa:5f:b8:9a:f8:50:f3:96:5a:3e:76:a4:81:
         cf:64:ac:2d:59:f1:d7:ef:cc:71:5a:67:fb:d1:bb:89:4d:f8:
         54:89:7e:a5:35:5d:f1:73:9a:2b:0b:de:92:98:e6:cd:ed:f4:
         7b:99:63:2f:2e:ff:45:68:b5:4b:b3:2c:6d:37:d3:ff:5a:18:
         5b:dd:2f:70:43:a3:ef:4e:76:26:19:c4:87:09:05:ca:f5:ee:
         9f:7c:f8:e6:37:f4:e9:6b:d0:ca:fb:7b:35:3b:58:da:ba:83:
         48:53:b0:6f:fb:53:4e:56:cc:9f:e1:9c:91:d2:76:ad:5c:8c:
         74:a5:a0:c9:87:b2:a0:83:a0:c3:e5:54:91:cd:8e:5c:72:1f:
         e2:1b:64:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSeVSKBcd+QCIQ+GSE9QbeAsw0nEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU5RTVFNTdENUJFMjM5NTFBNEY0RkU0N0U4QjYxRjQz
RDVBRkZBRjAeFw0yNTEwMTcxNjA5NTVaFw0yNTEwMTgxNzEzNTVaMDMxMTAvBgNV
BAMTKDdBODI1MDVCN0EyMjA4NkQ5QzQwN0NGNDgwMUQyODcwMDRENTg3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNVFCUQ6fg6s/KOTFtLXYfMoO
MXj2oHKGMPJ11x8aFpYro9JQUnklzDKdh4s6g5FvniALw/sIn3NO+ODgezOxZO5B
qL1VihAAC+wLrWctz53a5LXB6HhJmUsnh83BNKzG3kB2Pseft6CA5BN7WGQuzhQC
XCYK0brb1rTj30512kN3GixjRrwAnCc+R84szIemPCNiSpCzuf54armuWO4fM55o
mBJddCgFpd+DsG9N2D7J0DY7Zw6jfTnLJT2lj0hNfeT1pOmCJIyDCPK0f3Br7RVY
QxouC7dz0paEAJEIdGlRahjGgWBJx71WoEMSQ5a9/PGoePY6MCDW3EaXx6tHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUeoJQW3oiCG2cQHz0gB0ocATVh7swHwYDVR0j
BBgwFoAUnp5eV9W+I5UaT0/kfoth9D1a/68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC85RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOUU1RTU3RDVCRTIzOTUx
QTRGNEZFNDdFOEI2MUY0M0Q1QUZGQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC85
RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGqn7mK06b27n76+pHpBH/yWTT90Frqv/al/SGXxsIzCG7xmL6wAc9OxRCAqJ
2iIp/Qw3dzZOk8+Vivreprj1QWj1nmJ2hkjXf5uxZ2JalQ/h2EHwqinL8eZOvtDj
ppsEKwP3P16nKoSTd5st+q7C1oeqX7ia+FDzllo+dqSBz2SsLVnx1+/McVpn+9G7
iU34VIl+pTVd8XOaKwvekpjmze30e5ljLy7/RWi1S7MsbTfT/1oYW90vcEOj7052
JhnEhwkFyvXun3z45jf06WvQyvt7NTtY2rqDSFOwb/tTTlbMn+GckdJ2rVyMdKWg
yYeyoIOgw+VUkc2OXHIf4htk/A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:17 2025 by rpki-client