Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft
File:                     FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft (raw, json)
Hash identifier:          8iiH1by4gwZ09BdkP41zyGS+0ynbd3ATzZPFlrToGF4=
Subject key identifier:   AA:56:55:58:8F:00:85:15:83:A8:C5:EA:8E:EF:0E:39:6F:20:FB:87
Authority key identifier: FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0
Certificate issuer:       /CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0
Certificate serial:       071C4EEC2C012144222E4DEA249D38961E47E124
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft
Manifest number:          015F
Signing time:             Thu 16 Oct 2025 17:24:28 +0000
Manifest this update:     Thu 16 Oct 2025 17:19:28 +0000
Manifest next update:     Fri 17 Oct 2025 21:06:28 +0000
Files and hashes:         1: FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.crl (hash: cJTiY727HmxHX/R2oeyKZEw5rMavxLsHhBGHWf08FWs=)
                          2: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (hash: dOPWjzLf58Xg8+78zynzRo1Zcc4f68mh1/wiOicmq2g=)
                          3: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (hash: VZwDngqkhya51Z4Otd6caCDQlz5inoyuG/UVVEZB+Yc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1c:4e:ec:2c:01:21:44:22:2e:4d:ea:24:9d:38:96:1e:47:e1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0
        Validity
            Not Before: Oct 16 17:19:28 2025 GMT
            Not After : Oct 17 21:06:28 2025 GMT
        Subject: CN=AA5655588F00851583A8C5EA8EEF0E396F20FB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:ae:f5:ea:87:e7:a2:b1:26:aa:40:c8:1e:
                    ab:71:b2:27:4e:fe:72:35:36:1f:e3:8b:50:8a:9a:
                    8d:4b:5e:da:1f:6a:6a:47:86:54:4a:9f:18:e7:7b:
                    7a:ca:bd:a8:0a:d6:01:e3:40:8e:e6:c5:a3:46:4c:
                    ed:c1:c3:60:4f:6a:a2:95:e9:51:20:a7:11:d3:2d:
                    76:98:d3:6b:07:01:f9:f0:13:1b:25:63:11:7a:ff:
                    0c:60:19:4a:15:99:3d:60:39:c5:bf:3d:5b:0b:98:
                    86:00:48:26:02:8a:ba:b5:f5:4c:ff:77:ef:59:53:
                    47:bb:96:1b:3a:0a:a3:15:17:26:ba:8c:34:87:04:
                    e5:da:52:3b:84:de:74:09:5a:9c:14:7d:58:6e:62:
                    43:12:c5:57:e1:06:af:5c:eb:c9:6f:61:85:a4:50:
                    3d:c4:7c:d5:99:53:b3:fa:f7:3e:48:32:e4:99:0d:
                    56:86:63:88:43:93:ff:ad:7d:dd:df:b7:f2:b8:41:
                    a1:2b:68:b7:e1:a1:d1:07:65:b7:6d:bb:cb:46:fa:
                    e8:79:b5:e2:f7:bd:09:15:9c:3b:bd:77:2a:de:50:
                    3c:45:9a:90:13:0d:55:5a:8a:70:ef:72:40:4d:ec:
                    66:c5:14:26:17:d3:6b:5e:be:e3:81:fc:65:dd:dd:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:56:55:58:8F:00:85:15:83:A8:C5:EA:8E:EF:0E:39:6F:20:FB:87
            X509v3 Authority Key Identifier:
                keyid:FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:3e:1f:0f:9e:bc:d5:c5:55:e6:a1:12:f6:ad:b1:c9:aa:
         97:50:ae:84:f7:04:22:56:e5:32:ba:9b:02:35:a1:d2:96:39:
         af:f6:64:70:5b:ac:a4:fb:dd:b1:e9:53:5b:72:99:09:82:d4:
         52:64:11:02:8b:9d:f4:54:56:06:0e:10:60:73:3a:7a:51:c8:
         2c:a8:a1:b4:ea:c7:d4:25:ea:02:1a:b5:77:74:07:23:b5:2f:
         67:9a:8f:ea:23:7d:7e:29:eb:e3:5c:6b:32:37:0f:df:bc:9a:
         5c:b6:18:71:bf:ba:ca:b8:db:3d:a1:45:01:ea:3c:d8:05:43:
         02:bd:2a:6c:59:ce:4c:f8:d6:a0:07:5c:f2:b9:cb:51:43:57:
         04:57:ab:03:a1:97:0d:28:48:5b:7e:80:18:48:0f:d0:b0:b0:
         3c:d9:70:63:c7:ad:9e:e6:d0:61:7f:ff:ac:2a:b8:76:3b:a2:
         f3:55:50:2b:b2:a9:03:10:d7:df:2d:11:2a:be:16:44:92:dd:
         f9:00:17:71:85:52:c0:88:1f:e6:c2:77:d2:97:e6:3c:90:c3:
         84:9b:15:1e:ef:e2:c1:1e:0f:15:ce:11:2e:78:32:45:53:b8:
         46:3a:ec:c7:73:6d:41:c3:25:67:86:33:b6:83:80:17:0a:4b:
         f4:82:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----