Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.mft
File:                     6480808F2DB085F4192DC9A7B2841A9AB635552E.mft (raw, json)
Hash identifier:          vFXrs1Blx0d6OE7pFmsmFpijUG1Fsti784DPtEx+HhI=
Subject key identifier:   BD:AE:23:B7:A4:BA:49:5E:BF:78:C4:12:77:96:DF:63:58:B8:BA:75
Authority key identifier: 64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E
Certificate issuer:       /CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
Certificate serial:       1227A05349D4DDED87F27DEF0933C26F36FE876E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.mft
Manifest number:          3D
Signing time:             Fri 31 Oct 2025 17:19:12 +0000
Manifest this update:     Fri 31 Oct 2025 17:14:12 +0000
Manifest next update:     Sat 01 Nov 2025 17:40:12 +0000
Files and hashes:         1: 323830343a6134343a3a2f33322d3634203d3e20323632363735.roa (hash: EF8s79DIPtqSsTK+vuDXYMXLGdVIV65VrOpXO1VCGAY=)
                          2: 3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (hash: 2SuLyeJw5M7jnTgtpm7VTmUusWq6X5LX3paqEUlMnlE=)
                          3: 3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa (hash: OFmuTZ5VWSmP+/aUhwH4ESEiQhoz2OMx9jOncGXA/NY=)
                          4: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (hash: 3w6Krw4LoMGWshcuAXsLa2gVX7bnYMBso8HKpcrS0Ps=)
                          5: 6480808F2DB085F4192DC9A7B2841A9AB635552E.crl (hash: JAZ6bB3652XnCBhotTNF9WLPRmp7SZTM4qm3ZGHmMmM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:27:a0:53:49:d4:dd:ed:87:f2:7d:ef:09:33:c2:6f:36:fe:87:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
        Validity
            Not Before: Oct 31 17:14:12 2025 GMT
            Not After : Nov  1 17:40:12 2025 GMT
        Subject: CN=BDAE23B7A4BA495EBF78C4127796DF6358B8BA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:d8:2b:fc:94:e3:5b:7e:27:c4:0a:be:f7:
                    01:c2:b1:b0:6d:43:73:4c:4d:2b:36:b8:ee:c2:f0:
                    39:4b:98:e8:31:6a:a1:c2:9a:80:6a:02:0b:86:4f:
                    7b:fa:8b:1c:96:1b:a5:80:61:b0:84:de:dc:d1:fd:
                    b4:65:1d:20:da:80:b1:89:76:09:82:c7:46:bb:16:
                    45:96:ed:25:5c:c5:fa:ba:40:fc:39:c1:e7:15:05:
                    77:ad:7e:cc:ce:59:a6:87:46:4f:10:0b:92:5a:5c:
                    c9:83:7f:a4:c6:ac:53:f3:e5:d3:b2:36:3b:e7:eb:
                    b7:48:ec:cc:8f:ba:d1:d0:54:ac:11:96:6a:75:5a:
                    54:73:90:fd:81:dd:94:44:7e:28:50:92:78:7a:cd:
                    9b:01:0c:06:da:29:3c:2f:1b:dd:f2:e0:b5:e6:51:
                    80:d3:1a:d6:95:6d:ab:dc:4e:3b:8c:7d:b0:db:f1:
                    ee:b8:8d:7a:46:8a:2a:fe:44:96:7f:65:4d:1d:aa:
                    4f:83:a8:42:e6:76:73:c3:c3:8a:86:4c:7f:4c:a2:
                    e5:6d:1d:ca:ec:27:0b:d8:48:b3:00:ea:21:68:6c:
                    f6:8a:01:62:79:f5:18:2e:df:bf:f2:10:86:40:fa:
                    2f:32:47:91:c8:62:06:01:68:ba:e9:5e:7d:c1:28:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AE:23:B7:A4:BA:49:5E:BF:78:C4:12:77:96:DF:63:58:B8:BA:75
            X509v3 Authority Key Identifier:
                keyid:64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4e:00:51:a7:be:a4:84:e6:89:e9:ed:bd:cc:54:32:97:5a:
         f7:39:3a:db:67:e0:6a:57:27:e8:7b:57:37:7e:f2:95:e9:8b:
         33:6b:e4:21:80:bb:c8:07:29:99:b9:a1:92:03:4e:e9:17:67:
         a6:36:7f:11:6e:10:dd:11:55:a1:1b:6d:9a:7b:d7:c0:f8:58:
         2c:d9:be:3c:2e:f9:78:6c:4e:f9:98:05:0c:ca:61:87:21:5a:
         0b:4b:1b:3b:4d:ab:58:5f:ce:bf:2a:60:7f:96:54:b3:f1:fd:
         dc:a4:3b:5c:32:2c:a4:67:ae:20:d0:a6:b0:bf:c5:2b:49:5f:
         d1:87:48:d9:12:55:2c:0d:aa:32:cb:95:a9:1e:c6:1c:2f:dc:
         fa:7e:5f:89:73:0c:00:2a:b3:5f:9d:0b:f8:83:cf:3c:76:62:
         8d:15:ff:9c:3a:5a:d2:11:a8:cc:4c:5e:00:76:d7:04:2f:b5:
         4b:ad:15:bc:06:95:92:36:82:71:e3:b9:d8:28:78:9a:c9:b1:
         f7:79:4f:b7:e1:89:16:e7:07:2f:6e:5f:95:c3:d4:06:2f:ce:
         7c:5c:b5:ec:c8:bd:7c:f7:1c:ae:b8:55:c0:1d:59:93:e9:fd:
         7d:d6:3a:96:98:92:f1:3e:9c:49:22:4d:8a:99:47:85:88:f6:
         e7:db:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:15:23 2025 by rpki-client