Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/8470BF47412546F699845D7E90AEEABDCCF60F18.mft
File:                     8470BF47412546F699845D7E90AEEABDCCF60F18.mft (raw, json)
Hash identifier:          LyjOxVZDhjrw3N/hbvZRy7RgYF0oYDdM3DMkv4z+ogA=
Subject key identifier:   73:24:40:74:0D:F1:F3:C5:3A:74:31:AE:D1:0E:4B:2A:BD:31:1D:F5
Authority key identifier: 84:70:BF:47:41:25:46:F6:99:84:5D:7E:90:AE:EA:BD:CC:F6:0F:18
Certificate issuer:       /CN=8470BF47412546F699845D7E90AEEABDCCF60F18
Certificate serial:       0C0A3C7DCAC6477753C60BCE1E4DD34312DCDEF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8470BF47412546F699845D7E90AEEABDCCF60F18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/8470BF47412546F699845D7E90AEEABDCCF60F18.mft
Manifest number:          86
Signing time:             Tue 21 Jul 2026 17:57:21 +0000
Manifest this update:     Tue 21 Jul 2026 17:52:21 +0000
Manifest next update:     Wed 22 Jul 2026 21:08:21 +0000
Files and hashes:         1: 3136382e302e3130342e302f32322d3332203d3e20323632353537.roa (hash: DhcwMExKiWLqRkJ3xoMfeiFGtKTxdPJTFTjP3i6vM1I=)
                          2: 3137372e37332e3234302e302f32312d3332203d3e20323632353537.roa (hash: gEOiANR8z4i/GNmgUzSkBDvsLC2qw5iM8ilk7PLqvko=)
                          3: 323830343a3634633a3a2f33322d313238203d3e20323632353537.roa (hash: mW1SJuBJZpJq5c6wJTqinQV780V5VXK61/tGmMsOU9U=)
                          4: 3230312e3134382e3234302e302f32322d3332203d3e20323632353537.roa (hash: BJPwizDim2Y+Y7P9gI2j/ibJbB4fZ4Tjr1OurDFDHXs=)
                          5: 8470BF47412546F699845D7E90AEEABDCCF60F18.crl (hash: gKVdqYVOLVqLqLYgHVQfdKeHVapohPolZQ9hC591y/A=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:3c:7d:ca:c6:47:77:53:c6:0b:ce:1e:4d:d3:43:12:dc:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8470BF47412546F699845D7E90AEEABDCCF60F18
        Validity
            Not Before: Jul 21 17:52:21 2026 GMT
            Not After : Jul 22 21:08:21 2026 GMT
        Subject: CN=732440740DF1F3C53A7431AED10E4B2ABD311DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:64:fb:dc:90:49:de:2f:32:a0:9a:39:9c:
                    64:9a:2d:fa:74:6e:c8:26:d4:4d:06:47:09:9b:e9:
                    c0:8d:fa:7c:59:36:c2:a8:5a:09:78:2b:fd:ae:df:
                    9b:4d:41:a0:35:5d:9e:cf:49:75:38:63:5b:34:71:
                    56:ed:43:53:80:e7:94:db:2b:14:bf:f4:b0:d2:ec:
                    27:4d:c0:8f:0e:6f:ca:40:bd:3b:28:9e:0e:4c:67:
                    19:e9:81:bd:79:e4:f4:a5:88:b0:bc:65:a7:52:c1:
                    4e:3c:17:fa:58:21:5c:d0:4d:21:0d:81:a8:4d:07:
                    2d:0e:7f:14:a4:42:1c:46:4c:29:68:0a:ed:3b:b3:
                    8a:74:c9:67:ab:d3:6c:0f:fc:ce:13:e4:35:19:73:
                    f5:9c:70:56:12:72:07:66:9b:ad:f9:82:c4:40:6b:
                    53:e2:67:bd:ab:bc:4f:6d:9a:21:e8:68:0d:9f:9f:
                    8e:e0:01:4b:0e:8d:45:c5:67:ca:b2:4e:86:e9:d7:
                    49:97:2c:0e:14:d7:a6:21:4f:e3:a9:eb:6a:c0:14:
                    0e:ac:28:28:78:89:b3:ca:6f:8f:2f:22:7b:59:82:
                    2b:f5:bd:6a:0c:53:b4:42:4d:6a:dd:a4:3c:96:2d:
                    22:07:0e:ff:8e:6a:3a:64:1b:e7:fa:45:81:82:81:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:40:74:0D:F1:F3:C5:3A:74:31:AE:D1:0E:4B:2A:BD:31:1D:F5
            X509v3 Authority Key Identifier:
                keyid:84:70:BF:47:41:25:46:F6:99:84:5D:7E:90:AE:EA:BD:CC:F6:0F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/8470BF47412546F699845D7E90AEEABDCCF60F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8470BF47412546F699845D7E90AEEABDCCF60F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/8470BF47412546F699845D7E90AEEABDCCF60F18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:7f:7d:ce:0c:94:36:e8:61:0a:5b:21:3b:19:00:af:13:
         b7:3d:17:94:8c:d6:d2:da:c9:f8:17:b3:77:66:a8:0a:41:8b:
         61:18:2a:33:8b:94:81:58:ee:75:6c:c9:01:a0:00:49:45:51:
         20:ed:98:8a:aa:81:54:5b:79:7e:82:03:bc:bb:b2:8f:c5:22:
         23:9a:b7:0a:b8:e0:33:02:97:5b:87:25:3f:7a:aa:4f:71:dc:
         f2:50:9b:50:19:8b:05:d4:6b:e7:47:d9:37:9c:51:40:81:7f:
         48:0b:b8:a7:aa:27:54:fe:8a:85:fd:36:8b:34:20:a7:60:e1:
         42:96:b5:f7:cf:32:4c:82:6b:c1:6a:b8:dc:eb:c6:8d:83:f2:
         b0:68:ae:da:13:4b:ef:03:2b:9a:0e:1a:04:4f:00:bd:1d:90:
         18:db:4d:74:ca:3b:91:3c:68:6c:60:0b:b5:c5:dc:41:90:a2:
         3e:3e:5c:d7:0a:a5:ab:28:05:28:74:a1:cb:36:4d:da:56:be:
         6a:b7:ea:fd:5c:48:14:f0:9f:7f:0c:31:65:12:60:79:f0:15:
         06:9b:ea:24:50:79:82:af:a1:3a:46:98:3e:f5:ae:43:ff:43:
         50:de:e2:5f:07:ae:72:09:ed:27:b6:38:b1:26:65:2c:e0:b3:
         b6:43:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----