Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft
File:                     CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft (raw, json)
Hash identifier:          d6z/PQDeTYdJH+jeZrTWbnMQhF0JMAxMu/LgJsXXSrs=
Subject key identifier:   35:C6:B8:FE:39:C2:69:CB:9C:60:68:13:8B:09:6C:62:A6:1B:8C:B4
Authority key identifier: CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F
Certificate issuer:       /CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F
Certificate serial:       2DB6D2B843EC94FF75840B6EAB68CC38EBC2006E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft
Manifest number:          70
Signing time:             Fri 20 Feb 2026 20:41:36 +0000
Manifest this update:     Fri 20 Feb 2026 20:36:36 +0000
Manifest next update:     Sat 21 Feb 2026 22:40:36 +0000
Files and hashes:         1: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: 1gpLziXMEm5Gaj6XBFqM4YKMYoLov6pbubzfCgNkF88=)
                          2: CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl (hash: 7HnZOiLpViUcUlI7O0eFNDZENQ/PCqrQsdOPEC/XIug=)
                          3: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: cUSb3xGZji/PVYflxGYzoQBBJzeEF3qTS0JH9zJ4eWo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b6:d2:b8:43:ec:94:ff:75:84:0b:6e:ab:68:cc:38:eb:c2:00:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F
        Validity
            Not Before: Feb 20 20:36:36 2026 GMT
            Not After : Feb 21 22:40:36 2026 GMT
        Subject: CN=35C6B8FE39C269CB9C6068138B096C62A61B8CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:81:75:1a:42:bf:07:8d:c2:6e:5c:14:70:
                    b8:29:85:da:f5:b9:5c:7f:3e:a8:c4:47:d6:06:cf:
                    92:67:74:e4:16:86:de:50:ee:2b:11:92:cf:29:6a:
                    37:c5:1a:87:36:ab:11:51:04:32:10:70:a4:37:b0:
                    68:06:29:95:dc:3b:97:64:e6:9a:ee:ba:f1:25:46:
                    eb:76:23:bb:6d:95:ab:c5:94:b3:39:17:b8:d5:cc:
                    d8:fb:bd:18:8e:d4:08:0e:ab:7f:08:c0:37:07:a5:
                    2f:5c:fa:9e:3d:e5:58:4c:86:fd:8e:11:6a:32:6a:
                    f3:f1:38:59:a3:95:df:da:54:df:68:41:5f:81:71:
                    81:d1:8a:d9:e7:dd:01:dc:f0:84:3a:49:76:f0:70:
                    a9:d8:51:69:ce:83:4c:e5:b1:23:ec:45:b3:ae:ef:
                    02:e7:d2:f5:dd:5b:b7:bc:4a:04:34:b1:7a:1b:21:
                    d7:fa:90:43:50:81:62:42:0b:12:e6:01:b1:96:99:
                    ea:d2:a9:c9:e8:37:d8:53:f9:e6:23:09:16:90:9e:
                    97:69:e3:19:d5:eb:0f:08:b5:8b:08:12:57:f2:4e:
                    e4:18:08:44:4a:8d:6f:cb:41:2c:2e:04:9f:e5:da:
                    2e:9d:1c:b1:27:80:5c:6b:17:96:a5:4d:a9:01:54:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:B8:FE:39:C2:69:CB:9C:60:68:13:8B:09:6C:62:A6:1B:8C:B4
            X509v3 Authority Key Identifier:
                keyid:CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:28:92:38:ac:07:92:a9:96:87:a5:a0:16:21:f2:af:e9:
         11:85:5b:08:1e:c4:80:7c:d3:b9:e7:c0:8e:3d:ed:cf:50:b9:
         c2:2b:c6:db:33:b4:8d:de:38:70:5d:79:84:89:f8:75:c0:9b:
         0e:17:ec:fd:72:78:a4:22:0e:fd:f1:c0:75:e9:bb:e9:66:8d:
         7a:c0:88:74:3d:e8:b6:f0:31:ef:58:f5:ee:f4:05:d5:53:b2:
         e4:6f:37:00:ac:26:9a:cd:25:b3:bc:6d:60:cd:a6:2f:d5:55:
         c3:eb:77:df:be:ed:8c:03:07:4e:33:c9:fa:9b:62:2a:2a:ef:
         6b:50:9f:49:1e:5b:24:e1:08:49:1d:64:ea:40:f7:49:b1:91:
         fa:e1:d1:11:99:e3:e0:37:80:4e:3b:fc:f2:10:d2:b8:35:c3:
         1a:a3:da:09:ba:53:0c:65:ad:b5:50:1f:7b:58:9e:e0:ff:35:
         b5:05:e5:a8:e4:97:0a:7f:63:c0:7e:a9:68:0c:55:3d:7a:06:
         2e:d8:9d:db:02:dc:94:36:84:e9:95:3e:e8:44:c0:29:75:0c:
         4a:4c:b2:e3:5e:79:26:5d:c9:ee:f0:de:23:a5:cf:50:90:8e:
         b3:b7:44:fa:9a:e8:f9:a0:45:20:44:d8:89:57:c0:7f:98:40:
         89:d2:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:46:34 2026 by rpki-client