Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.mft
File:                     F1C375D471B4D722362E4ABDD82A797ED63216FF.mft (raw, json)
Hash identifier:          PMHG79hCAyY4bPCHTs9JDTfrhiTN5aAkhqLp9LsFgUg=
Subject key identifier:   D1:04:CA:2B:1A:E3:D0:8A:0C:C4:26:85:B2:AF:53:CF:6C:84:86:23
Authority key identifier: F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF
Certificate issuer:       /CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
Certificate serial:       77A8CE0863813D5E67B381875AAEDEE7134A1916
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.mft
Manifest number:          6F
Signing time:             Sun 19 Oct 2025 16:31:33 +0000
Manifest this update:     Sun 19 Oct 2025 16:26:33 +0000
Manifest next update:     Mon 20 Oct 2025 19:27:33 +0000
Files and hashes:         1: 3138312e3232342e35302e302f32332d3233203d3e20323731343936.roa (hash: pt0Rs1ewPGim6Ob+ldyfkphr7MoCxVviqZzFoIwqaJ8=)
                          2: 3138312e3232342e34382e302f32332d3233203d3e20323731343936.roa (hash: ynjWgXrJmwUXHU6QmTt/PZzdRVX8JbXeeUlhHCGjE/A=)
                          3: 3138312e3232342e34392e302f32342d3234203d3e20323731343936.roa (hash: he3kF8sny79m1qoG+4zGg4+jf7OPAdUIlg+r+DQ+k0I=)
                          4: 3138312e3232342e34382e302f32342d3234203d3e20323731343936.roa (hash: 7usXAaLv8rNTXVXAqZjzEbpFzFzHpz65ViP//WJmB3I=)
                          5: 3138312e3232342e35312e302f32342d3234203d3e20323731343936.roa (hash: 2bgn7Q2QkFI47+KCYDvGq2isspfekuyMvESpVz3zWrw=)
                          6: 3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa (hash: FPCFswJ8ifLFMPQLQQLKFV1YPpyHZAIGmI9I5XnrlME=)
                          7: F1C375D471B4D722362E4ABDD82A797ED63216FF.crl (hash: aufylB2tVuBre5JuD7o+6tBenDlVx7dsl6uLnhGTPWc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a8:ce:08:63:81:3d:5e:67:b3:81:87:5a:ae:de:e7:13:4a:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
        Validity
            Not Before: Oct 19 16:26:33 2025 GMT
            Not After : Oct 20 19:27:33 2025 GMT
        Subject: CN=D104CA2B1AE3D08A0CC42685B2AF53CF6C848623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:f9:40:9a:b0:ff:18:a7:4a:a8:ff:b3:77:
                    85:29:13:90:67:cf:ad:bc:b8:d5:a9:29:6c:86:4c:
                    ad:fe:58:05:b2:99:75:b6:dd:11:ea:f0:b9:1e:c9:
                    4a:67:78:6e:87:66:17:f4:f1:b4:82:72:6a:60:9f:
                    ed:c4:ba:1e:ad:75:ae:da:53:e6:4e:dc:d5:97:db:
                    b6:df:b7:e4:72:52:52:e9:92:44:0e:07:c8:0b:43:
                    53:de:7c:83:4a:ab:53:02:23:5a:fb:b6:a8:8f:cf:
                    5a:d7:36:09:0d:48:0c:26:1f:ec:31:eb:db:ec:fc:
                    20:17:c5:f8:b6:17:e8:8a:53:f1:55:ff:87:f1:c9:
                    86:b3:2e:da:12:ba:b4:d5:a2:7f:53:da:db:06:28:
                    61:6c:61:8a:cd:41:b6:46:60:08:b7:a6:23:15:af:
                    47:62:d8:82:28:81:12:a8:1e:0f:46:f6:d4:57:c5:
                    f0:be:52:cb:af:a7:07:52:bf:ea:71:ad:1b:64:18:
                    40:92:e5:5a:e2:3f:ee:0f:ce:7e:c0:87:4d:ee:be:
                    a4:3d:98:31:db:57:14:94:50:c0:a1:dd:48:84:b0:
                    0d:5f:0b:54:e9:ba:d1:94:e5:b4:65:c2:5b:d5:3c:
                    25:d4:a4:86:37:e0:fd:a4:91:60:42:51:d3:c5:18:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:CA:2B:1A:E3:D0:8A:0C:C4:26:85:B2:AF:53:CF:6C:84:86:23
            X509v3 Authority Key Identifier:
                keyid:F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:06:f8:62:ab:a1:da:e0:83:94:a7:c8:37:f6:6b:04:ce:f5:
         56:02:71:b4:93:66:e8:2b:31:21:e7:c7:a8:b1:7e:8a:34:c8:
         19:93:37:c9:f8:9f:9d:b7:48:5c:47:d5:0d:a4:dc:60:fc:80:
         9f:ac:2f:7c:99:6f:52:f2:83:3c:21:92:cc:4e:79:69:5c:db:
         07:61:53:ec:b6:ab:5f:ff:79:5f:c9:ce:82:75:6e:d5:37:e1:
         26:46:17:c9:60:fa:01:8d:f2:91:02:4d:65:90:fd:94:76:bd:
         fe:70:30:ba:c7:2a:61:47:d3:41:32:c0:7e:a0:72:7e:ec:95:
         58:68:fb:12:ec:df:11:33:e6:8c:92:9d:11:8b:a6:83:1b:1d:
         e5:9a:aa:ef:dd:6e:98:40:47:ab:4d:08:01:f0:c2:98:4f:6f:
         d0:47:e0:c3:e8:5e:94:e0:e2:72:3c:8c:f2:f2:6b:7e:44:ae:
         39:62:5d:f3:28:e3:a3:14:4b:62:c5:cc:74:81:ac:50:90:5f:
         a7:b7:b6:c9:fb:6f:b2:73:8e:19:75:55:be:74:5f:2d:fd:54:
         66:21:f5:49:54:b0:33:78:b7:ae:76:e1:d0:af:80:c1:f6:d7:
         cc:4e:d9:c8:6b:ab:ea:8c:5e:0f:59:06:d4:8b:d0:e0:92:99:
         93:05:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----