Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft
File:                     3845FCC306058DF56E24A27FE05C403B0CF9597A.mft (raw, json)
Hash identifier:          QpXYi+KSCi7gAPN6K/uI9BYn0o76aTsjwCmVro4FMK8=
Subject key identifier:   D7:1F:16:04:24:39:FB:8C:D1:20:F3:A2:8C:90:6F:53:F9:10:60:E4
Authority key identifier: 38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A
Certificate issuer:       /CN=3845FCC306058DF56E24A27FE05C403B0CF9597A
Certificate serial:       60152CE5C33A5714D769F5C4509E0056EBBC3297
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft
Manifest number:          02E8
Signing time:             Fri 17 Oct 2025 00:16:45 +0000
Manifest this update:     Fri 17 Oct 2025 00:11:45 +0000
Manifest next update:     Sat 18 Oct 2025 00:49:45 +0000
Files and hashes:         1: 3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (hash: qYbJ+s+v4as8Tkn3cc5BQl3DUNfCUvrZ4/ne27A5SWM=)
                          2: 323830343a313238303a3a2f33322d3438203d3e20323633343830.roa (hash: hSuvKjeqad6bOQr4GenPJdxVrQ60GclVGkNW1bLpnCs=)
                          3: 3845FCC306058DF56E24A27FE05C403B0CF9597A.crl (hash: wiJiVc1MoQH/PVbH0rmMSnRbtNKu3Qh1TCAxx5+qoxc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:15:2c:e5:c3:3a:57:14:d7:69:f5:c4:50:9e:00:56:eb:bc:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3845FCC306058DF56E24A27FE05C403B0CF9597A
        Validity
            Not Before: Oct 17 00:11:45 2025 GMT
            Not After : Oct 18 00:49:45 2025 GMT
        Subject: CN=D71F16042439FB8CD120F3A28C906F53F91060E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:ff:91:69:6e:1a:f0:68:ab:2d:d3:a4:85:
                    ce:d5:72:38:02:58:fd:27:13:72:12:75:88:e7:29:
                    0b:17:3b:24:57:e7:bc:66:45:b9:6a:da:d7:aa:2b:
                    db:e9:ed:64:82:54:17:93:9b:6e:d7:84:a7:87:fb:
                    30:e6:f2:49:07:d8:34:26:b4:35:ac:9a:9b:b3:21:
                    cb:5c:7a:f1:b1:9e:57:29:51:07:5e:cb:db:e9:7c:
                    54:68:aa:7f:cc:a5:b7:da:da:f5:4c:a2:90:9c:66:
                    7e:a7:f3:4a:71:57:e5:b9:2b:7e:2d:a8:dc:19:67:
                    dc:31:0c:e5:9d:e7:63:e0:9b:5c:95:28:b4:23:42:
                    9e:18:fd:d4:7a:69:85:6a:cc:89:7a:49:9b:8b:e3:
                    6c:d6:e8:66:b3:c5:a4:5b:35:e5:1e:64:79:46:76:
                    80:50:fe:06:cf:39:df:17:1b:f2:3b:66:a1:81:8e:
                    c4:59:53:4b:64:fb:5e:92:56:4a:de:5f:64:01:3f:
                    6f:bd:bf:ca:a1:7e:81:e3:f7:e0:57:6f:c7:b9:33:
                    4d:c9:db:09:65:80:7a:e1:66:c6:55:2a:8c:ad:3c:
                    d5:7f:b7:31:2f:10:6f:2f:ce:e8:7b:2b:1f:a1:3c:
                    03:60:6b:f4:73:49:b1:1a:b3:1d:3a:de:65:d9:9f:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1F:16:04:24:39:FB:8C:D1:20:F3:A2:8C:90:6F:53:F9:10:60:E4
            X509v3 Authority Key Identifier:
                keyid:38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:df:73:63:0d:d5:79:74:dd:93:b2:53:5b:49:e9:01:48:07:
         e1:33:65:50:ee:17:20:1a:2a:0e:af:22:38:cd:dc:d3:ec:89:
         d7:ba:54:2c:4d:70:61:81:ad:e0:36:60:22:3c:c7:5d:6e:4c:
         07:f1:d4:8f:45:85:14:ee:86:ff:44:16:0c:d6:9a:35:5d:14:
         23:5f:00:3c:5d:2a:ec:73:a4:f7:7c:b0:6a:b9:c1:d8:ec:2b:
         d1:f0:d6:f8:d4:07:ca:37:03:74:41:8f:ec:76:66:e3:9e:4b:
         61:9b:75:53:45:8f:22:c9:f0:94:fb:b3:34:ed:12:fb:2a:87:
         34:cb:cd:7c:39:85:a4:cd:8a:02:32:c9:a7:93:97:14:85:c7:
         b3:01:3b:ec:75:ab:d7:a0:9b:f6:68:6e:c7:13:22:2e:d2:58:
         fb:d0:df:72:38:6e:0a:0a:c3:94:3b:bb:da:21:d6:11:67:f4:
         77:2f:9d:ad:43:8f:69:a4:5d:73:d0:5f:42:de:b3:27:c7:c8:
         65:8a:32:ef:fb:da:86:a1:ad:14:d3:08:83:5b:65:b2:71:69:
         9e:3d:9c:ca:39:1a:2f:72:b9:53:10:5a:a8:d7:46:94:ee:5e:
         6b:e6:16:75:06:4e:86:26:5d:33:ae:df:df:fd:1f:70:98:00:
         81:83:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----