Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.mft
File:                     993AE132DC884AC348347F783A9BA4B1DA5CF832.mft (raw, json)
Hash identifier:          t77mAmZUqicRwmGe9fDYQ5kRVwHEBPM64QTkuIlqS5k=
Subject key identifier:   C1:A5:76:C4:EC:93:41:E9:14:5F:9A:1A:63:A1:12:F1:CA:54:A4:0E
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Certificate issuer:       /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial:       576F8380CC43EB6F6A32D3BF3B65BD8F7C1EEF0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.mft
Manifest number:          12
Signing time:             Fri 31 Oct 2025 10:09:11 +0000
Manifest this update:     Fri 31 Oct 2025 10:04:11 +0000
Manifest next update:     Sat 01 Nov 2025 13:17:11 +0000
Files and hashes:         1: 34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa (hash: 4Xlkp6QO8ZAY9USvyBRQUCLp485pvheaeJ2/totgZe0=)
                          2: 993AE132DC884AC348347F783A9BA4B1DA5CF832.crl (hash: KHLiEiMinVD0dDRgirEMVBFs/Fd5ZU2+qCv8rQnd/8g=)
                          3: 34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa (hash: fsXg7CSzcjQlt0tc6dpPvsXHabb+Etqrtuc7Q+fx69A=)
                          4: 3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa (hash: fwxNGjuFd1h/w5YXs47b9c93tB+N0ptgGKj+lj20XNM=)
                          5: 3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa (hash: kODHeoFn/xnrE/33Kfx7sYV6wtwXz0ElamDkvxtDFBc=)
                          6: 3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa (hash: O4+zS8lCOaMsvsjoWDL4FLCCR37InThXhpMau/B/VWE=)
                          7: 323830343a3930383a3a2f33322d3336203d3e20323633303437.roa (hash: 0Lp/WoGyOfGtJ/5OtqFQ3EMUMsmvl62lmaWpXHzdZm4=)
                          8: AS263047.asa (hash: YwzBwYxABo/Uebi5i6dUeYiklp5/Aqyr78IWsCQqzHE=)
                          9: 3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa (hash: Emd8k7A9Xse7/jr6PuUOCbsQghReKm8DSzwT/IxG0Ks=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6f:83:80:cc:43:eb:6f:6a:32:d3:bf:3b:65:bd:8f:7c:1e:ef:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
        Validity
            Not Before: Oct 31 10:04:11 2025 GMT
            Not After : Nov  1 13:17:11 2025 GMT
        Subject: CN=C1A576C4EC9341E9145F9A1A63A112F1CA54A40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:a3:b6:ca:9d:f0:2f:d9:7c:0a:59:05:93:
                    10:88:e8:4c:53:4e:df:84:81:da:7b:5c:fc:0c:ca:
                    c3:58:4c:f8:50:46:6c:73:2e:a2:1b:f3:36:3a:4c:
                    e3:1d:9c:37:05:71:e5:ed:17:75:4a:e8:db:7d:2f:
                    f6:06:9f:27:39:d4:5c:97:ef:54:8d:ac:50:ec:3c:
                    5d:60:09:c0:50:0d:13:d2:ee:ce:ed:1e:b5:85:e5:
                    27:e5:03:78:ab:6d:45:5c:94:4a:0b:d0:6a:4d:b2:
                    28:e8:d2:ac:8f:87:94:dd:2b:8f:08:6f:a5:4a:a0:
                    40:2b:5d:84:ec:c6:7f:7e:77:cd:ad:ed:46:d9:54:
                    db:ee:ff:ac:7a:f3:a3:01:54:52:89:7d:15:f9:a4:
                    c2:e2:b9:30:a9:99:97:f5:99:12:46:46:63:ab:77:
                    a8:18:c8:54:73:c6:21:07:94:1b:a6:79:86:1a:ef:
                    9a:2f:11:01:0e:38:f3:78:54:52:a7:96:e4:3f:19:
                    a2:ff:42:2d:8a:87:f5:9b:41:db:49:d7:25:40:b2:
                    ae:7b:ac:8a:be:fb:f7:62:98:d5:8a:ea:d3:17:06:
                    45:6e:0f:fa:3a:0e:29:8b:28:c8:e3:15:41:7a:7a:
                    29:1a:76:d6:c0:65:12:c1:ea:b3:dc:f6:92:7e:2f:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A5:76:C4:EC:93:41:E9:14:5F:9A:1A:63:A1:12:F1:CA:54:A4:0E
            X509v3 Authority Key Identifier:
                keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:e7:41:cf:94:77:e6:52:9f:e8:f6:33:0f:f9:c7:ab:7d:
         af:cf:37:f4:50:8f:32:4e:c6:94:00:66:8b:72:02:19:9e:8f:
         fa:66:5d:d0:17:91:d6:c8:e9:be:93:86:5c:8e:93:af:e2:72:
         79:72:8a:37:0d:c6:3e:01:43:91:fc:3d:af:b4:e9:3a:19:33:
         cf:34:c3:4c:da:4b:31:67:31:c0:99:9f:dc:e0:3f:1a:a8:f7:
         07:ec:6a:ec:18:2f:ba:47:94:b4:c5:b1:67:f4:70:d2:bd:d2:
         7d:72:17:ad:da:6b:42:6c:42:2a:d6:d4:96:85:f8:88:dc:2a:
         0b:04:50:7a:31:1a:b7:f6:17:99:92:ef:3e:2a:0b:26:2a:93:
         46:39:bf:15:4d:ff:08:a8:f9:a3:44:dc:00:d3:ea:fd:85:92:
         20:2a:fe:2b:00:d2:d3:09:eb:00:ab:cf:b5:87:49:5d:a6:ff:
         d7:08:13:a8:6c:e1:cd:c6:0e:8a:0b:48:37:78:bc:ef:78:be:
         85:c5:e2:76:6a:6d:7b:6b:df:61:37:42:cc:22:c2:a1:08:14:
         45:da:f0:ac:22:a4:d8:eb:ea:cc:75:d0:dc:64:8f:4f:6d:99:
         46:06:97:8b:aa:42:3a:e2:13:f2:e1:23:3f:04:13:93:60:7e:
         4d:d6:42:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV2+DgMxD629qMtO/O2W9j3we7wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkzQUUxMzJEQzg4NEFDMzQ4MzQ3Rjc4M0E5QkE0QjFE
QTVDRjgzMjAeFw0yNTEwMzExMDA0MTFaFw0yNTExMDExMzE3MTFaMDMxMTAvBgNV
BAMTKEMxQTU3NkM0RUM5MzQxRTkxNDVGOUExQTYzQTExMkYxQ0E1NEE0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSaO2yp3wL9l8ClkFkxCI6ExT
Tt+Egdp7XPwMysNYTPhQRmxzLqIb8zY6TOMdnDcFceXtF3VK6Nt9L/YGnyc51FyX
71SNrFDsPF1gCcBQDRPS7s7tHrWF5SflA3irbUVclEoL0GpNsijo0qyPh5TdK48I
b6VKoEArXYTsxn9+d82t7UbZVNvu/6x686MBVFKJfRX5pMLiuTCpmZf1mRJGRmOr
d6gYyFRzxiEHlBumeYYa75ovEQEOOPN4VFKnluQ/GaL/Qi2Kh/WbQdtJ1yVAsq57
rIq++/dimNWK6tMXBkVuD/o6DimLKMjjFUF6eikadtbAZRLB6rPc9pJ+L02zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwaV2xOyTQekUX5oaY6ES8cpUpA4wHwYDVR0j
BBgwFoAUmTrhMtyISsNINH94Opuksdpc+DIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC85OTNBRTEzMkRDODg0QUMzNDgzNDdGNzgzQTlCQTRCMURBNUNGODMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5M0FFMTMyREM4ODRBQzM0
ODM0N0Y3ODNBOUJBNEIxREE1Q0Y4MzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2enUvMC85
OTNBRTEzMkRDODg0QUMzNDgzNDdGNzgzQTlCQTRCMURBNUNGODMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAILbnQc+Ud+ZSn+j2Mw/5x6t9r8839FCPMk7GlABmi3ICGZ6P+mZd0BeR1sjp
vpOGXI6Tr+JyeXKKNw3GPgFDkfw9r7TpOhkzzzTDTNpLMWcxwJmf3OA/Gqj3B+xq
7BgvukeUtMWxZ/Rw0r3SfXIXrdprQmxCKtbUloX4iNwqCwRQejEat/YXmZLvPioL
JiqTRjm/FU3/CKj5o0TcANPq/YWSICr+KwDS0wnrAKvPtYdJXab/1wgTqGzhzcYO
igtIN3i873i+hcXidmpte2vfYTdCzCLCoQgURdrwrCKk2OvqzHXQ3GSPT22ZRgaX
i6pCOuIT8uEjPwQTk2B+TdZC4Q==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:25 2025 by rpki-client