Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.mft
File:                     BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.mft (raw, json)
Hash identifier:          8XAk7u0+TxCFD840R32XrVH1JWZ2LSP8LuznkCQRuDU=
Subject key identifier:   DD:50:ED:AE:41:8B:A3:98:45:A8:4C:1C:88:76:C8:A1:9D:43:9C:D0
Authority key identifier: BD:06:61:DE:CE:4F:B2:22:96:96:CF:40:96:DC:D8:CC:61:B8:7A:5D
Certificate issuer:       /CN=BD0661DECE4FB2229696CF4096DCD8CC61B87A5D
Certificate serial:       2DBA492A25B7B0D1823B89921C107AAE0C19653A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.mft
Manifest number:          B1
Signing time:             Sun 11 Oct 2026 08:35:22 +0000
Manifest this update:     Sun 11 Oct 2026 08:30:22 +0000
Manifest next update:     Mon 12 Oct 2026 08:59:22 +0000
Files and hashes:         1: 323830343a363039633a3a2f33322d313238203d3e20323639313830.roa (hash: A8zi2r1gc093bOEDkZl1u6+tfeuQDeAL4MB9/zvCibw=)
                          2: BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.crl (hash: Tp9Cx4Vv4Vs+mcUrJLDCU9WwRpoUB/WwBDdvywfnxlM=)
                          3: 34352e3138312e3130342e302f32322d3332203d3e20323639313830.roa (hash: AcB+/XHgJyRvhlDVxBi5qtxMnBbfl12Bb8rAI5D9eIc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ba:49:2a:25:b7:b0:d1:82:3b:89:92:1c:10:7a:ae:0c:19:65:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD0661DECE4FB2229696CF4096DCD8CC61B87A5D
        Validity
            Not Before: Oct 11 08:30:22 2026 GMT
            Not After : Oct 12 08:59:22 2026 GMT
        Subject: CN=DD50EDAE418BA39845A84C1C8876C8A19D439CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:eb:a0:2e:fe:f4:72:40:35:77:12:2c:b9:
                    d3:02:ba:48:52:06:f2:9b:dd:e7:09:83:4e:d3:8a:
                    4e:ed:db:79:60:c9:4c:9f:1e:58:91:82:c7:f8:6c:
                    6d:2e:6d:d4:fc:13:7d:b0:c8:17:95:cf:d1:29:8d:
                    fa:44:38:de:0f:c8:c7:74:b5:0e:9d:4a:9d:75:3d:
                    87:5f:f0:a6:d5:d1:88:2e:89:9e:87:6e:4a:e7:42:
                    4f:6a:d8:2f:0a:c9:de:23:21:bc:6a:16:57:29:40:
                    f9:e8:de:19:25:59:0a:42:e9:ac:e3:10:bc:bf:49:
                    30:ab:a9:ba:06:18:7f:5a:74:36:51:03:8d:44:a9:
                    82:36:27:18:0a:0f:41:3f:d7:d4:d9:dd:55:ac:a9:
                    87:b5:29:a8:72:84:dd:99:aa:e9:09:de:e1:b5:27:
                    09:fc:d9:f3:4c:92:99:99:0f:be:90:c9:14:58:6b:
                    d4:40:50:1a:8f:cd:33:63:2d:d0:6c:26:fa:09:a2:
                    56:1f:23:bf:26:57:e7:c1:1e:7e:2f:c0:55:30:ee:
                    28:c5:90:59:f4:c2:2b:ce:74:b3:f3:f6:36:a8:e2:
                    5d:8f:c7:00:1d:99:27:5e:48:36:0a:4c:e5:fc:07:
                    5a:03:f5:f1:7d:ce:8f:c7:eb:e7:20:86:6b:c1:d9:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:ED:AE:41:8B:A3:98:45:A8:4C:1C:88:76:C8:A1:9D:43:9C:D0
            X509v3 Authority Key Identifier:
                keyid:BD:06:61:DE:CE:4F:B2:22:96:96:CF:40:96:DC:D8:CC:61:B8:7A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/BD0661DECE4FB2229696CF4096DCD8CC61B87A5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:95:35:0f:56:08:19:03:e0:d1:e0:6d:a0:79:1b:34:9c:
         57:b3:a4:44:b4:63:9b:fe:1c:b5:ba:c0:29:a4:ca:5d:99:b6:
         e0:3d:18:e3:8a:f7:07:07:fd:c4:67:fd:fd:f8:d7:e1:48:32:
         ef:39:43:be:b0:cd:d7:b0:b4:7e:d5:e8:d0:fc:3f:04:7c:b6:
         f8:2c:b8:25:01:bb:8e:01:ec:f2:41:83:08:af:c4:d7:eb:ea:
         e9:5f:ce:c6:b2:16:57:89:94:d0:dc:77:34:cb:bd:66:55:31:
         69:8d:d5:2e:36:94:c1:67:d1:6a:a8:ba:93:b4:5b:40:9c:77:
         5b:b3:15:b6:07:f7:f2:0f:d1:ab:f2:1e:52:f2:a2:69:d4:8c:
         c5:fd:ba:4e:d0:4a:b2:9a:af:02:6c:57:02:f7:fa:f4:17:35:
         b1:2a:cd:2f:ba:1c:32:8e:d3:26:14:0a:4d:26:db:54:9f:72:
         e3:3a:54:27:02:16:f5:ec:bf:4a:e5:4e:c5:49:89:b9:cf:f7:
         e9:e1:90:c9:d3:ff:f9:92:46:9c:5d:e5:46:81:a9:71:16:40:
         d3:15:01:08:3d:83:92:d9:7f:5b:62:5c:eb:57:63:de:76:32:
         9a:7c:94:06:1d:d1:b9:3a:24:ab:ab:c0:0b:f3:67:30:87:bf:
         84:ca:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----