Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft
File:                     EB258E43B37369C45A1A85EEBA98325264F76352.mft (raw, json)
Hash identifier:          1DiQf/0f2esMACqI2UnnWXvc52DvHuHsIxKhAd1fkxA=
Subject key identifier:   74:9E:74:48:E7:00:36:60:95:D4:E2:ED:61:48:04:19:FB:D0:65:40
Authority key identifier: EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52
Certificate issuer:       /CN=EB258E43B37369C45A1A85EEBA98325264F76352
Certificate serial:       07073530C3AB9270A2F9BC59181D6DCEFCAF6D13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft
Manifest number:          012C
Signing time:             Sun 19 Oct 2025 08:39:38 +0000
Manifest this update:     Sun 19 Oct 2025 08:34:38 +0000
Manifest next update:     Mon 20 Oct 2025 10:08:38 +0000
Files and hashes:         1: 3139322e3134312e3235322e302f32322d3332203d3e20323637353033.roa (hash: BApgtwiek5EN0+iwlWsGZMs5IswMsL7FMkxZBhqpISE=)
                          2: 323830343a343237633a3a2f33322d313238203d3e20323637353033.roa (hash: 6SVKNJcqojY0QK10B1/hcJM1AG9uIN8oJoWfYqa7cmQ=)
                          3: EB258E43B37369C45A1A85EEBA98325264F76352.crl (hash: piRrQe/KU6mXTDYiDeMTHow71zIj92St7CNy2hA7p5c=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:07:35:30:c3:ab:92:70:a2:f9:bc:59:18:1d:6d:ce:fc:af:6d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB258E43B37369C45A1A85EEBA98325264F76352
        Validity
            Not Before: Oct 19 08:34:38 2025 GMT
            Not After : Oct 20 10:08:38 2025 GMT
        Subject: CN=749E7448E700366095D4E2ED61480419FBD06540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:76:1c:62:8b:eb:c4:20:f0:07:45:50:1e:
                    6d:b5:df:41:f0:96:40:7e:2a:e7:d9:60:d2:b3:fe:
                    b8:fc:87:16:94:9d:39:85:0a:d3:08:00:77:3c:3f:
                    15:a0:9d:f9:1e:51:63:b6:47:91:f4:f9:e2:c4:ca:
                    bf:dc:09:d6:c6:4a:c7:ed:b9:bd:e6:4b:04:9e:ed:
                    26:1b:1e:12:d3:58:59:36:e4:0d:bb:90:25:6e:3a:
                    00:ce:dc:76:8e:4e:89:91:e8:2d:87:42:5f:5f:a9:
                    14:6d:0c:a4:b5:a3:5d:a6:17:47:46:cc:46:71:55:
                    b5:08:85:71:66:81:c3:3d:b9:83:40:de:d6:53:d1:
                    04:83:04:c2:a8:34:72:9d:2a:96:17:45:5f:5f:0e:
                    c5:a6:33:8f:7e:e4:4a:19:59:50:78:ca:d6:42:6e:
                    ad:48:fd:67:62:97:e2:68:76:70:01:1a:69:fb:48:
                    a3:77:28:22:6d:81:ca:b0:d8:82:c4:27:78:bd:b2:
                    28:1c:4d:83:e8:ff:4b:24:0f:05:ff:fa:9c:07:4e:
                    cb:60:07:b3:f8:1c:29:55:31:d3:e6:5a:db:c1:1b:
                    75:d3:d1:af:13:9b:40:a1:0e:ac:97:f8:84:37:a0:
                    fb:32:2e:0c:33:ff:08:9e:84:47:e6:27:1a:cc:97:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:74:48:E7:00:36:60:95:D4:E2:ED:61:48:04:19:FB:D0:65:40
            X509v3 Authority Key Identifier:
                keyid:EB:25:8E:43:B3:73:69:C4:5A:1A:85:EE:BA:98:32:52:64:F7:63:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB258E43B37369C45A1A85EEBA98325264F76352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/yXgZhVMENQBq7w5iQHDdBGLjuEhc9sruxD4BzQGg2Z1/0/EB258E43B37369C45A1A85EEBA98325264F76352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:58:35:f5:19:7c:24:a2:3b:b3:2b:3d:eb:f2:9a:ce:13:
         0b:3d:31:bf:d3:61:6d:bb:98:68:3b:78:bd:64:4a:d9:ee:52:
         31:fd:9e:91:b1:6e:89:aa:3e:30:9f:81:fd:66:23:34:63:49:
         f6:d2:13:6b:d7:58:f2:d4:02:61:31:d3:00:c2:a9:9d:48:4a:
         7d:4d:25:5a:ef:0e:85:55:dd:7b:40:cb:76:34:d9:ba:06:39:
         d1:c4:62:12:62:d2:62:55:4d:f9:6e:3b:13:ed:ce:0f:00:74:
         68:f8:8d:ea:f2:6a:3b:73:e5:2b:3e:1a:9b:c8:68:f1:e4:ff:
         1a:fc:36:97:b1:3d:77:9a:c5:6a:0a:0e:d5:77:b3:81:6c:18:
         14:e9:cd:11:95:72:eb:c5:1a:44:f6:97:45:bb:57:6b:90:fa:
         a3:ac:5d:f3:9b:5d:0b:54:7e:88:1a:62:a6:d9:a4:12:7c:ea:
         9a:60:8a:d0:bf:45:54:f9:ed:f0:ad:0e:cf:11:f4:85:0b:43:
         f6:b8:22:d3:e8:f4:a4:cc:5e:cb:ca:40:8a:e9:5c:d3:5b:08:
         20:88:83:82:e6:25:69:da:98:a6:f1:eb:c6:47:a1:ef:b7:dc:
         11:57:13:dc:1c:1d:92:f4:ad:ca:2c:2f:67:08:a1:32:6a:4d:
         ff:cc:cc:eb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUBwc1MMOrknCi+bxZGB1tzvyvbRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyNThFNDNCMzczNjlDNDVBMUE4NUVFQkE5ODMyNTI2
NEY3NjM1MjAeFw0yNTEwMTkwODM0MzhaFw0yNTEwMjAxMDA4MzhaMDMxMTAvBgNV
BAMTKDc0OUU3NDQ4RTcwMDM2NjA5NUQ0RTJFRDYxNDgwNDE5RkJEMDY1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS63YcYovrxCDwB0VQHm2130Hw
lkB+KufZYNKz/rj8hxaUnTmFCtMIAHc8PxWgnfkeUWO2R5H0+eLEyr/cCdbGSsft
ub3mSwSe7SYbHhLTWFk25A27kCVuOgDO3HaOTomR6C2HQl9fqRRtDKS1o12mF0dG
zEZxVbUIhXFmgcM9uYNA3tZT0QSDBMKoNHKdKpYXRV9fDsWmM49+5EoZWVB4ytZC
bq1I/Wdil+JodnABGmn7SKN3KCJtgcqw2ILEJ3i9sigcTYPo/0skDwX/+pwHTstg
B7P4HClVMdPmWtvBG3XT0a8Tm0ChDqyX+IQ3oPsyLgwz/wiehEfmJxrMl2wzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUdJ50SOcANmCV1OLtYUgEGfvQZUAwHwYDVR0j
BBgwFoAU6yWOQ7NzacRaGoXuupgyUmT3Y1IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby95WGdaaFZNRU5RQnE3dzVpUUhEZEJHTGp1RWhjOXNydXhENEJ6UUdnMlox
LzAvRUIyNThFNDNCMzczNjlDNDVBMUE4NUVFQkE5ODMyNTI2NEY3NjM1Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQjI1OEU0M0IzNzM2OUM0NUEx
QTg1RUVCQTk4MzI1MjY0Rjc2MzUyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3lY
Z1poVk1FTlFCcTd3NWlRSERkQkdManVFaGM5c3J1eEQ0QnpRR2cyWjEvMC9FQjI1
OEU0M0IzNzM2OUM0NUExQTg1RUVCQTk4MzI1MjY0Rjc2MzUyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
fttYNfUZfCSiO7MrPevyms4TCz0xv9NhbbuYaDt4vWRK2e5SMf2ekbFuiao+MJ+B
/WYjNGNJ9tITa9dY8tQCYTHTAMKpnUhKfU0lWu8OhVXde0DLdjTZugY50cRiEmLS
YlVN+W47E+3ODwB0aPiN6vJqO3PlKz4am8ho8eT/Gvw2l7E9d5rFagoO1XezgWwY
FOnNEZVy68UaRPaXRbtXa5D6o6xd85tdC1R+iBpiptmkEnzqmmCK0L9FVPnt8K0O
zxH0hQtD9rgi0+j0pMxey8pAiulc01sIIIiDguYladqYpvHrxkeh77fcEVcT3Bwd
kvStyiwvZwihMmpN/8zM6w==
-----END CERTIFICATE-----