Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft
File:                     3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft (raw, json)
Hash identifier:          DFQ0Cl/1otf7y5XI4LkFlLVf2/JwxxEv/qnjUqFeu1w=
Subject key identifier:   68:61:DC:73:D0:93:24:F9:9E:44:7E:22:83:B6:22:83:B9:99:8E:41
Authority key identifier: 39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C
Certificate issuer:       /CN=3959E4DDE5432F578D571DA91D8B83E05EB7679C
Certificate serial:       4000010594554E3AB427708C54BDA71E7794FDEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft
Manifest number:          D0
Signing time:             Sun 19 Oct 2025 00:36:28 +0000
Manifest this update:     Sun 19 Oct 2025 00:31:28 +0000
Manifest next update:     Mon 20 Oct 2025 03:17:28 +0000
Files and hashes:         1: 323830343a383061633a3a2f33322d3332203d3e20323731373636.roa (hash: oYm9EmAU7e4JNo/jo4XUavlPZqVPPvY8ULsf4wEO8fA=)
                          2: 3959E4DDE5432F578D571DA91D8B83E05EB7679C.crl (hash: 2ZOaefvW91YBPc9973bBCZkFE2St3OR+luLhc1pmUBE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:00:01:05:94:55:4e:3a:b4:27:70:8c:54:bd:a7:1e:77:94:fd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3959E4DDE5432F578D571DA91D8B83E05EB7679C
        Validity
            Not Before: Oct 19 00:31:28 2025 GMT
            Not After : Oct 20 03:17:28 2025 GMT
        Subject: CN=6861DC73D09324F99E447E2283B62283B9998E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:d7:4d:5a:04:ad:15:f5:56:1f:9f:9c:3c:
                    bf:f4:b8:df:d0:00:b2:ef:5a:d2:ad:bc:1b:fb:f9:
                    4f:f4:e5:d7:d9:66:e7:5a:7f:36:0c:0a:ac:83:51:
                    0f:15:40:2a:94:43:ca:55:b9:78:33:60:89:3c:d0:
                    87:af:06:56:a1:54:57:7a:ff:5b:a0:31:ba:d3:de:
                    42:cb:3e:c4:4e:bf:cd:5c:f9:24:70:9d:a2:6c:d9:
                    58:96:6f:94:cf:cd:eb:49:80:38:f2:2a:ab:43:8c:
                    df:4b:4c:19:e7:71:48:84:ba:e0:97:36:53:e4:1a:
                    58:f6:be:88:be:ef:29:a8:3a:09:30:9d:fe:02:c7:
                    fe:fb:32:c9:a8:f4:ca:b1:d8:7a:07:22:61:8c:38:
                    3c:b5:7d:95:61:3b:b5:26:90:52:0b:0d:c2:69:cf:
                    3e:1d:03:cf:05:ed:fd:33:2f:7a:9b:2e:f8:27:83:
                    82:53:63:ce:c1:d2:2e:e4:da:28:26:be:2b:e2:3a:
                    01:d7:fa:90:ca:f8:d5:96:90:07:94:ed:69:0b:a4:
                    88:c4:7e:32:aa:6b:64:13:c9:9a:5b:ca:a9:fe:a6:
                    6b:80:4f:ff:43:80:6a:b6:a9:6c:c9:26:ab:f2:15:
                    b8:5c:87:3c:58:b6:b4:83:1a:f1:1f:12:2d:9f:e6:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:DC:73:D0:93:24:F9:9E:44:7E:22:83:B6:22:83:B9:99:8E:41
            X509v3 Authority Key Identifier:
                keyid:39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:e3:68:80:c1:5e:91:9a:a3:ac:1c:7c:df:c3:3d:43:0b:
         44:7e:d6:02:18:8a:45:65:21:40:a4:56:c3:86:95:01:c1:a2:
         e2:32:ad:ec:37:2e:d8:4b:64:7f:f4:6f:f2:3f:c9:bc:97:da:
         ca:70:cd:23:b2:d7:b9:24:c5:6d:b4:a0:86:b2:3a:6a:77:64:
         9f:46:c9:70:58:e2:71:17:6d:3d:ad:8b:c1:ab:9b:46:06:7b:
         05:9e:a6:a7:b3:08:ef:32:ae:62:d2:0e:b4:cf:0e:69:52:c3:
         b2:2d:91:b3:25:10:10:ce:b2:91:3a:c7:ee:08:f4:63:ce:a0:
         37:9e:8e:f0:42:6f:da:7f:04:6a:75:f2:cd:85:93:7a:8a:8d:
         fb:ce:54:6c:53:e1:18:94:5d:85:d4:16:51:2b:d0:69:a9:f0:
         38:43:57:45:ef:2c:3b:19:02:56:fe:6d:b2:9f:88:6b:50:7a:
         d1:9d:22:2d:63:07:8c:9d:94:86:81:38:f1:8a:a6:49:e4:26:
         77:ac:c6:b4:39:2c:58:54:36:33:5a:51:6a:fd:9e:1a:06:15:
         5c:7a:f9:28:27:bc:f9:e3:6a:bc:41:53:30:d0:4a:d2:6a:3e:
         10:bd:3a:7e:e0:4c:c9:35:eb:9f:4c:de:99:62:c4:e0:8f:5a:
         7f:2c:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----