Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GdVHSE5GqkrrySNNop9nj5VwJn5zYSqVwUhNGAk8H5BU/0/E094105F32A2B97FBB22CA662AE1D8F276454A9D.mft
File:                     E094105F32A2B97FBB22CA662AE1D8F276454A9D.mft (raw, json)
Hash identifier:          G3sfscoMcIG30D4bp0nkwT8CMzfmTgBvWohNoYnD4sk=
Subject key identifier:   4F:26:A8:9E:B2:AC:9F:33:92:4E:39:3E:2B:5A:C3:4B:BF:AB:CA:B6
Authority key identifier: E0:94:10:5F:32:A2:B9:7F:BB:22:CA:66:2A:E1:D8:F2:76:45:4A:9D
Certificate issuer:       /CN=E094105F32A2B97FBB22CA662AE1D8F276454A9D
Certificate serial:       62654DBF56E687BF62DC4BFF90D2F2DAC1D75428
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E094105F32A2B97FBB22CA662AE1D8F276454A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GdVHSE5GqkrrySNNop9nj5VwJn5zYSqVwUhNGAk8H5BU/0/E094105F32A2B97FBB22CA662AE1D8F276454A9D.mft
Manifest number:          016B
Signing time:             Sun 19 Oct 2025 13:09:37 +0000
Manifest this update:     Sun 19 Oct 2025 13:04:37 +0000
Manifest next update:     Mon 20 Oct 2025 14:55:37 +0000
Files and hashes:         1: 32342e3135322e32322e302f32332d3233203d3e20323733373137.roa (hash: QSFcypSOcKZ/ufsQrWvkbfF4r7/ViDb5S+taxcM1bgY=)
                          2: E094105F32A2B97FBB22CA662AE1D8F276454A9D.crl (hash: a830htSQR3XkSlt6O3LeYFY9yXeP0Rpd75BXCPl5Ra4=)
                          3: 32342e3135322e32332e302f32342d3234203d3e20323733373137.roa (hash: e9HhzaCNl+rQjcI0xP4zQD9pyfnonW5ejvtxhK7yix4=)
                          4: 32342e3135322e32322e302f32342d3234203d3e20323733373137.roa (hash: g3VQM254H5zohpexBxaW1Hnrb/jKusO93W9IGVDAHY8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:4d:bf:56:e6:87:bf:62:dc:4b:ff:90:d2:f2:da:c1:d7:54:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E094105F32A2B97FBB22CA662AE1D8F276454A9D
        Validity
            Not Before: Oct 19 13:04:37 2025 GMT
            Not After : Oct 20 14:55:37 2025 GMT
        Subject: CN=4F26A89EB2AC9F33924E393E2B5AC34BBFABCAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:11:ab:b7:cc:7a:a0:69:aa:be:48:61:f3:
                    85:88:f4:28:81:4c:8d:7d:9d:f4:0e:b3:cd:b8:a2:
                    6d:df:11:08:60:e7:ce:bc:98:52:7d:ee:f3:f4:c9:
                    97:ff:5f:d3:73:fc:8c:8b:47:0f:e1:6c:7c:f7:b4:
                    36:d3:39:07:b2:e3:46:b6:df:c3:57:e6:20:31:94:
                    d9:10:55:a1:9b:a2:5f:96:77:64:b0:81:58:3f:66:
                    0a:a7:4b:e3:f5:a8:32:b7:db:9a:f6:27:82:fa:c7:
                    8c:5f:2d:94:87:b4:52:c3:20:01:25:93:27:8d:f8:
                    3c:cb:2e:7b:66:82:95:c8:db:9b:9a:5b:7a:42:d6:
                    34:a9:84:99:d5:62:33:bd:40:9e:b0:e2:0c:4f:0b:
                    74:3b:dc:96:a4:6c:a7:45:6d:c3:5e:51:af:7a:19:
                    03:8c:cf:25:eb:06:eb:da:17:89:6b:bf:f1:66:9e:
                    65:eb:30:e2:2b:6d:cf:ba:5e:be:54:49:f6:db:92:
                    ec:33:1a:42:41:d8:5a:ef:77:7b:2c:e3:a8:88:7e:
                    c9:49:7a:44:33:ae:f5:60:3c:64:b5:a2:b8:28:4f:
                    1a:45:51:65:8c:ab:8b:a1:11:d1:30:50:9c:1d:ee:
                    7e:df:53:2c:19:f4:c8:73:13:f5:f0:56:e8:c4:8c:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:A8:9E:B2:AC:9F:33:92:4E:39:3E:2B:5A:C3:4B:BF:AB:CA:B6
            X509v3 Authority Key Identifier:
                keyid:E0:94:10:5F:32:A2:B9:7F:BB:22:CA:66:2A:E1:D8:F2:76:45:4A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GdVHSE5GqkrrySNNop9nj5VwJn5zYSqVwUhNGAk8H5BU/0/E094105F32A2B97FBB22CA662AE1D8F276454A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E094105F32A2B97FBB22CA662AE1D8F276454A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GdVHSE5GqkrrySNNop9nj5VwJn5zYSqVwUhNGAk8H5BU/0/E094105F32A2B97FBB22CA662AE1D8F276454A9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:66:81:99:45:81:1f:43:da:4d:22:b5:d7:26:15:f7:98:
         70:76:3c:f9:f4:af:06:0e:4b:83:2c:27:67:d0:f6:e9:34:9e:
         a1:e1:53:30:b4:c9:93:9f:a8:0a:a9:23:9e:79:82:f9:41:5a:
         68:21:ab:57:96:8d:90:ae:30:24:01:6c:b2:c2:fc:89:9b:2a:
         c5:9c:fd:43:6e:1f:8c:44:60:42:90:62:0c:f3:a4:8e:75:4c:
         70:c8:c0:75:5e:f3:81:f7:32:e5:6c:ce:07:70:57:3c:93:bc:
         db:6c:6b:86:9c:b8:6f:02:e7:a7:e9:ae:f5:cf:a4:2a:73:1f:
         4b:d2:3e:6a:06:16:68:09:af:d2:d3:52:24:09:b0:2d:99:cb:
         b9:3c:b8:bd:05:58:8d:3c:49:70:db:1d:0f:3d:98:45:81:9a:
         d6:d1:b6:55:5f:ac:52:2d:75:6c:e7:72:96:cb:1c:1f:0a:df:
         d5:ac:7c:ef:f7:aa:4f:a3:94:78:d5:c8:32:04:9f:18:91:19:
         f8:d5:1a:da:da:64:fd:46:3a:e8:80:19:b4:85:dc:9d:ad:65:
         1e:15:c8:bd:68:dd:67:6a:9a:13:d4:ef:3c:8c:fa:70:b5:7a:
         1b:58:ff:ae:2c:16:e7:9a:d7:79:4c:1f:8e:26:3c:ec:54:17:
         37:9a:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----