Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.mft
File:                     DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.mft (raw, json)
Hash identifier:          Q+IwVTpghB9pgYwamDWI/8r5zLFVBc6jE2Fct7sj7Wg=
Subject key identifier:   F1:27:F7:8E:33:62:16:18:1D:B8:07:19:F3:C6:77:6B:23:22:64:63
Authority key identifier: DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5
Certificate issuer:       /CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
Certificate serial:       7C94C3E8E2AD78485038FB03CD768E5E62AF1755
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.mft
Manifest number:          13
Signing time:             Thu 30 Oct 2025 18:11:46 +0000
Manifest this update:     Thu 30 Oct 2025 18:06:46 +0000
Manifest next update:     Fri 31 Oct 2025 19:54:46 +0000
Files and hashes:         1: 3137372e35352e39322e302f32332d3234203d3e20323732373234.roa (hash: +wdeYWyxN+grDI1xZgY4y10lvXzJwCBdYS7CDHjVyPg=)
                          2: 323830343a383761383a3a2f33322d3334203d3e20323732373234.roa (hash: qrMfEHo3kth+XzhpxPWzSc0v7zpyllQBgczBBI1WYcQ=)
                          3: DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.crl (hash: kTYFmuHU3vJdWPFbjyXZSj7Z8MwCqUMYQxQKC95gAN4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:94:c3:e8:e2:ad:78:48:50:38:fb:03:cd:76:8e:5e:62:af:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
        Validity
            Not Before: Oct 30 18:06:46 2025 GMT
            Not After : Oct 31 19:54:46 2025 GMT
        Subject: CN=F127F78E336216181DB80719F3C6776B23226463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:76:34:3d:74:3b:4e:35:41:9c:de:df:e9:
                    e9:9a:cf:8e:e2:5f:e2:ff:06:87:13:dc:4e:1b:5a:
                    ce:f3:63:35:d2:d0:48:fe:48:87:0a:a9:34:41:99:
                    18:f9:1b:71:29:0c:e9:16:be:96:f3:4a:b6:92:76:
                    c6:6b:a9:2f:fc:a5:68:49:ab:49:da:69:bc:16:50:
                    16:85:52:65:73:c9:21:5a:f8:5e:ac:b7:a1:37:0d:
                    02:2f:76:8b:40:0f:75:a8:85:7f:5b:7d:d3:1e:a8:
                    c6:83:fe:46:f0:1b:a4:75:41:20:54:d4:e1:a3:92:
                    5f:e2:cf:48:84:c4:6f:14:ab:ea:ff:28:4c:ea:68:
                    81:3f:66:ec:e7:92:a9:f7:7a:54:2e:d7:c2:74:a6:
                    ca:97:6e:d1:f0:f4:13:91:76:1e:e1:7b:f2:59:31:
                    19:80:1d:77:0e:48:1e:2f:dc:62:1a:e4:ce:0d:1a:
                    ee:c5:59:b7:78:3c:93:a3:68:94:25:2b:b9:ca:6b:
                    66:60:7c:33:ff:7a:12:a4:a0:0a:51:de:98:e9:71:
                    99:a2:bf:c1:a8:bf:05:bd:49:13:ed:59:a0:3c:df:
                    32:02:bb:84:5a:17:c5:6a:3d:17:b4:c6:95:15:ae:
                    1c:fd:70:85:79:a2:b6:1c:39:0f:94:1c:f3:34:5c:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:27:F7:8E:33:62:16:18:1D:B8:07:19:F3:C6:77:6B:23:22:64:63
            X509v3 Authority Key Identifier:
                keyid:DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:93:32:79:61:c5:4a:ed:f4:0f:a2:02:6c:db:40:0c:cb:4d:
         54:e7:9f:00:99:6d:fd:93:33:f6:e1:5a:9c:e6:f3:b6:fd:02:
         5a:bb:db:bd:db:f9:02:02:9a:5e:b5:dd:1f:2c:b8:2c:f5:0f:
         19:28:fa:af:26:ab:a5:0f:1f:92:13:e9:0c:dc:74:05:07:53:
         47:9a:86:5d:e2:6e:6a:a5:6a:b4:38:32:1b:0b:f1:db:c6:b7:
         68:0f:49:b8:cf:d1:7a:a4:c6:1c:cf:55:9a:92:4a:1d:8a:f4:
         93:23:7e:93:94:ed:0c:c1:c1:63:25:f8:cd:97:5f:b1:fa:03:
         6c:c9:04:1c:01:70:e5:95:0e:f0:e8:b2:9b:1c:ba:b4:b2:47:
         8b:71:be:c3:75:b4:65:c9:24:02:d9:6a:0b:2c:92:ea:83:6e:
         db:cf:07:a1:ac:cb:a2:df:62:28:95:ae:4e:17:ed:a2:64:80:
         2f:75:cf:62:6f:c0:aa:f7:16:fe:29:fb:43:b0:ed:65:35:18:
         db:f6:d9:df:a6:c5:6b:17:77:0f:cc:ad:f4:88:61:23:b0:eb:
         72:db:d0:14:5d:58:59:46:cf:8f:ce:57:76:5b:72:56:19:e1:
         66:21:a2:37:e0:32:6d:14:70:86:94:75:f2:f9:49:f7:88:be:
         19:a1:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:14:57 2025 by rpki-client