Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.mft
File:                     9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.mft (raw, json)
Hash identifier:          kCLX2XJ8JFSnIZUUSeDeWKdLVxGeXvuP1CoJvuf4jlY=
Subject key identifier:   48:CE:CC:A2:85:C3:02:CD:A8:50:B9:28:84:60:E4:84:31:98:C8:E1
Authority key identifier: 92:84:A1:CB:43:B0:0C:70:AA:1D:5B:65:BC:F7:59:0E:CB:2A:5F:55
Certificate issuer:       /CN=9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55
Certificate serial:       1C3F9657A98361325C79F34C03920CF713D8979D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.mft
Manifest number:          03
Signing time:             Wed 29 Oct 2025 16:50:07 +0000
Manifest this update:     Wed 29 Oct 2025 16:45:07 +0000
Manifest next update:     Thu 30 Oct 2025 17:33:07 +0000
Files and hashes:         1: 323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (hash: os3rfmcSAuW3L+vAi7U6eR6KB4U9HAdMdl6A8SYc4dM=)
                          2: 3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa (hash: uWRCx3jq5qgK6WN7cU6PUOhssMHFhg0Rqx/pMlSF6Z0=)
                          3: 9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.crl (hash: z4oPBKnbhaQIktLq8Ud30Z8+tY0qxp9jt35d2NVEJ3s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3f:96:57:a9:83:61:32:5c:79:f3:4c:03:92:0c:f7:13:d8:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55
        Validity
            Not Before: Oct 29 16:45:07 2025 GMT
            Not After : Oct 30 17:33:07 2025 GMT
        Subject: CN=48CECCA285C302CDA850B9288460E4843198C8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:1a:64:b9:3c:27:f9:ef:1f:8e:18:23:36:
                    98:6b:bd:bb:54:ad:3e:10:18:20:75:14:e5:5b:0e:
                    29:28:c4:8f:76:bb:df:b7:39:aa:aa:5d:bf:e8:7d:
                    95:cc:77:7a:fd:a9:87:99:97:3d:0f:d4:ba:36:d2:
                    d2:f7:1c:68:ff:48:ce:92:e8:49:35:9a:d8:29:d9:
                    ac:53:3f:2e:81:bb:94:14:5b:94:36:10:4d:06:b3:
                    18:59:40:3a:63:5c:bf:4d:15:22:e5:4f:7b:46:b7:
                    5d:4e:54:8e:6f:cd:c3:46:0d:0a:9f:c1:b7:4e:4a:
                    0a:95:7d:f4:13:10:a4:9b:3f:72:35:29:f4:fb:8b:
                    82:9c:86:5c:42:29:d3:eb:58:02:e8:d1:9c:68:63:
                    4e:23:bf:66:f8:04:d2:d2:6f:56:46:d5:7f:d2:7f:
                    9d:c8:1a:20:71:e4:d5:f5:40:1c:c9:6d:aa:87:8f:
                    44:10:14:7b:b8:6e:4d:e8:ea:10:61:46:a3:cc:72:
                    26:ce:4a:64:bc:64:04:79:97:bd:ce:b6:6f:b0:5a:
                    c3:51:87:fb:52:64:2c:61:f2:9b:45:95:47:2d:a9:
                    77:ec:b5:b8:4d:ef:b7:37:a9:a1:f5:f1:5c:4c:c0:
                    fb:f6:72:b2:f7:87:b6:6b:f6:b1:4b:a4:d2:e2:b3:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:CC:A2:85:C3:02:CD:A8:50:B9:28:84:60:E4:84:31:98:C8:E1
            X509v3 Authority Key Identifier:
                keyid:92:84:A1:CB:43:B0:0C:70:AA:1D:5B:65:BC:F7:59:0E:CB:2A:5F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:b7:5f:c5:91:e2:d5:09:e7:9f:be:c5:8b:32:73:9b:38:
         09:f5:cb:d5:87:39:f5:8a:a2:00:6c:cc:b6:e8:a8:0d:13:05:
         93:c0:7b:33:be:88:04:fa:3e:e9:94:16:e5:a1:6b:04:f5:06:
         84:01:18:5a:c4:5b:47:e5:84:17:11:82:f7:ba:6b:3d:a3:bf:
         a4:72:c7:66:d5:fc:76:5c:9e:66:5a:57:a7:7f:1b:6e:8b:50:
         dc:41:35:73:91:a6:f9:63:7b:52:ea:37:d4:a9:58:99:fa:fe:
         57:5c:48:6b:77:da:96:7d:f6:e9:c1:2d:85:a3:3a:f5:b7:d4:
         c0:0d:de:8e:4d:c6:3c:66:d5:78:7a:c4:64:b8:ae:5a:49:84:
         94:0e:e2:08:b3:2c:f7:26:39:f8:fc:78:23:ce:99:98:44:3d:
         62:c4:8c:4e:20:47:33:ab:bd:2c:2f:4b:e7:6e:f5:1f:20:b7:
         dd:87:dc:1f:d5:50:49:cd:34:81:ac:00:b3:65:35:c6:93:d1:
         6d:90:a8:56:b8:80:52:ab:19:3f:f7:dc:8a:d7:e6:da:a8:50:
         74:4d:c9:6c:2c:ba:ad:c0:7d:b0:96:df:8f:6a:3e:ff:5a:f9:
         b2:c4:c1:b4:37:3f:45:80:67:2e:28:20:17:39:19:1d:c8:6b:
         19:11:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----