Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
File:                     0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft (raw, json)
Hash identifier:          agjfY0FHz/sugAh4drhphttZuiJQK/eFeyjzIQR7ObE=
Subject key identifier:   A7:BA:7A:39:C5:F0:25:01:76:F9:C5:70:1D:6F:11:3D:54:2B:F0:50
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Certificate issuer:       /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial:       7B3A659B921088B56F60FD7E9DA2B6C8A8F6C69D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft
Manifest number:          0375
Signing time:             Wed 25 Mar 2026 06:15:32 +0000
Manifest this update:     Wed 25 Mar 2026 06:10:32 +0000
Manifest next update:     Thu 26 Mar 2026 08:58:32 +0000
Files and hashes:         1: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (hash: m/CLB44LJRAq/Oz0l5MCen5Lt61UcnSQDV4dCfw/NQU=)
                          2: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (hash: XgBlpZ2YWGl10rtXvXfEPslvjzYnNUY6N7Y1fE4i87A=)
                          3: 0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl (hash: j1JywQi/MEQDlu+an8u+u6FKNb2K0cTAZA4lQk7Lz9s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3a:65:9b:92:10:88:b5:6f:60:fd:7e:9d:a2:b6:c8:a8:f6:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
        Validity
            Not Before: Mar 25 06:10:32 2026 GMT
            Not After : Mar 26 08:58:32 2026 GMT
        Subject: CN=A7BA7A39C5F0250176F9C5701D6F113D542BF050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:0f:53:37:25:19:ad:36:80:32:d1:14:c7:
                    fe:7a:83:86:ff:c5:26:c1:28:e3:ae:06:bc:a6:92:
                    c9:6d:36:8f:07:16:3c:e4:6e:32:ac:db:61:b3:41:
                    a9:29:3d:27:af:94:ab:73:45:4a:9e:77:fe:e5:03:
                    c4:11:d9:89:94:16:ba:01:68:f6:29:a8:70:01:cd:
                    a0:e6:7f:99:2e:22:7a:5a:c5:32:83:07:cd:1f:27:
                    a0:c0:e2:1b:47:dd:98:3b:81:fb:89:d9:1d:72:74:
                    3b:8e:c9:8a:de:c2:77:95:65:3b:4e:51:41:fa:2c:
                    57:b4:d2:c9:a5:ee:e4:4a:30:67:c8:9c:9b:3e:d0:
                    00:64:b3:fd:7f:bd:e6:85:64:80:c5:4b:e1:49:da:
                    ee:c7:31:17:02:bf:a7:92:9e:00:f1:7b:a7:73:82:
                    3a:03:30:b1:18:9e:45:31:19:6a:3c:dc:6a:f6:69:
                    e6:a5:ad:c9:b4:72:83:6b:3b:ca:98:41:10:7a:e1:
                    da:a5:92:d5:f2:1e:f3:ef:93:3a:36:96:56:ab:3f:
                    5a:1e:9e:34:95:31:f6:98:78:26:d7:98:3e:2e:8f:
                    01:8b:79:ca:10:10:d8:8e:59:e9:34:a1:48:bc:63:
                    48:4e:b1:76:00:42:67:30:5f:3f:c9:a2:ec:9b:ad:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:7A:39:C5:F0:25:01:76:F9:C5:70:1D:6F:11:3D:54:2B:F0:50
            X509v3 Authority Key Identifier:
                keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:50:a8:86:bd:5f:44:7e:e8:9d:09:1c:eb:32:9b:75:7c:ad:
         f3:c5:7d:d9:1b:f7:5f:52:9b:18:d1:a0:da:18:7c:f0:d6:82:
         cc:0d:67:a7:1b:34:85:32:a5:b8:2b:1b:00:62:30:d0:fe:27:
         5d:aa:43:bc:e6:df:ea:95:91:6c:fb:7d:c2:49:7c:66:29:c8:
         ee:ed:66:ae:e8:1a:ab:85:3b:94:9f:ef:08:83:e2:36:10:f2:
         ce:7a:f7:80:a1:5f:2f:1d:8c:74:7d:b1:ed:80:ef:96:f5:ea:
         a1:2d:81:29:f5:04:af:ba:09:88:37:38:0c:59:02:a8:f4:e0:
         95:c6:b5:bc:83:82:83:ea:78:0d:07:56:73:5d:99:b6:15:64:
         3c:24:90:2f:1b:e5:52:09:5b:50:30:e6:66:fb:3a:9c:0b:05:
         d7:06:f7:24:bd:36:f2:c0:e9:17:69:b5:4e:f0:07:f5:1f:cf:
         9d:3e:77:d5:81:5d:0a:82:01:76:b0:c3:de:20:44:d4:a8:c0:
         f9:14:34:bb:a4:28:5c:53:ca:c7:9c:90:eb:ba:c5:42:43:35:
         e8:8b:ed:08:6c:10:7d:e4:30:be:24:38:82:13:80:8d:0d:0f:
         c9:d6:74:02:b6:fe:23:96:ee:c6:96:5f:53:2d:8a:99:ec:d3:
         29:ef:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----