Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft
File:                     163A822EB1F1299E4F1A306D50A95304A748A422.mft (raw, json)
Hash identifier:          fRfqZmnru/JoXyT6Ldao0o/xvzv7+4+sqFRowd8dNYQ=
Subject key identifier:   36:BE:E9:3E:30:56:98:10:AF:36:F0:E3:8C:CA:66:3B:26:23:3E:82
Authority key identifier: 16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22
Certificate issuer:       /CN=163A822EB1F1299E4F1A306D50A95304A748A422
Certificate serial:       2408731ABAB6D87014CADF926FA44C4302FB47D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft
Manifest number:          26
Signing time:             Sat 01 Nov 2025 04:22:00 +0000
Manifest this update:     Sat 01 Nov 2025 04:17:00 +0000
Manifest next update:     Sun 02 Nov 2025 04:22:00 +0000
Files and hashes:         1: 163A822EB1F1299E4F1A306D50A95304A748A422.crl (hash: 6vuOP3XU8yYMzdllEC/MaWKrMYq8V+v0BiMsubm89Zw=)
                          2: 323830343a323463343a3a2f33322d313238203d3e20323634323431.roa (hash: Gu+JifuKVApjMmCxlhs8UaEBxzdI15g4rrBo/YBHj/w=)
                          3: 3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (hash: V9iU0IGgSrgs5zXf2CyRI1MVJTBDc7PcXwvFbVV6GnI=)
                          4: 3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (hash: IfLNqYf/h/KlEskBZnGAEUBOcmiboQLx50e3BD0fkPM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:08:73:1a:ba:b6:d8:70:14:ca:df:92:6f:a4:4c:43:02:fb:47:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163A822EB1F1299E4F1A306D50A95304A748A422
        Validity
            Not Before: Nov  1 04:17:00 2025 GMT
            Not After : Nov  2 04:22:00 2025 GMT
        Subject: CN=36BEE93E30569810AF36F0E38CCA663B26233E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:de:56:f9:26:b8:ea:e9:de:83:87:29:64:
                    b0:64:af:71:a6:28:4a:02:59:1d:48:f5:26:2b:91:
                    06:c3:08:3d:6c:f4:2c:e4:5d:98:78:ff:d2:f3:09:
                    11:4f:68:ed:0e:9e:19:24:a8:3e:10:2e:76:c8:3f:
                    a1:b5:3f:9f:36:44:60:ee:57:7f:e7:c2:c2:d1:fc:
                    a0:0e:8d:d5:2f:1b:e4:ad:61:12:df:5a:6f:f5:42:
                    51:41:2e:b7:41:fb:96:7b:33:2a:4c:78:a8:62:88:
                    93:fa:73:49:3e:ed:c6:c9:d6:95:82:08:35:50:6b:
                    63:25:8b:a0:8f:a2:4f:8d:a0:bf:a8:92:cc:d0:e4:
                    c7:1b:e6:8d:62:2b:7d:cd:b4:e0:58:d0:25:39:c2:
                    d1:26:bc:ee:24:de:df:8e:e0:cc:06:a8:fe:50:d7:
                    dc:e8:5c:cd:96:80:e6:ee:41:d0:43:63:d0:b1:8f:
                    5e:e2:2a:99:e0:2c:f8:69:5a:09:53:f9:a5:6c:4c:
                    2c:5d:a0:20:f4:2d:d4:2b:7e:98:16:3f:b3:5f:d3:
                    ee:87:a2:11:a8:50:c1:7e:71:b2:cc:4d:4d:96:29:
                    c8:92:46:2c:05:91:85:bf:7c:6d:09:c2:f5:fb:0a:
                    ff:a7:c6:20:f4:fe:97:9a:8d:16:08:79:cb:d6:ff:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:E9:3E:30:56:98:10:AF:36:F0:E3:8C:CA:66:3B:26:23:3E:82
            X509v3 Authority Key Identifier:
                keyid:16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:39:3f:92:8a:79:64:64:7e:f7:b3:9a:46:c2:8a:ca:91:
         98:ea:74:2e:1e:2a:6f:b0:e7:6f:a8:24:4a:07:a9:ac:e5:db:
         83:c9:ca:37:98:70:f8:52:35:f5:62:9d:94:da:52:92:02:bd:
         a6:de:32:0a:11:4f:6e:d1:e0:4f:ab:f2:1c:4c:4c:89:cc:cf:
         f3:3c:8c:f4:37:1c:1b:bc:a0:cf:d6:3e:17:09:dc:21:a7:03:
         3a:81:d7:ca:3f:16:46:88:7f:39:67:21:35:36:b1:d1:ca:81:
         07:11:87:16:2a:fc:85:39:f7:b6:d1:6e:65:76:f9:38:32:7d:
         16:23:63:fa:3c:0b:98:09:2f:4c:4a:3c:fa:0f:59:9a:d7:cc:
         4f:a7:59:c1:82:f5:80:f9:e2:70:be:71:ac:40:c3:b8:76:e4:
         e3:32:cf:3e:bb:6b:10:ec:58:f9:a2:24:05:e9:75:17:3b:e2:
         23:15:31:61:d6:07:34:3a:41:62:77:ee:75:15:1e:cf:d9:44:
         de:0d:b6:6a:dc:6b:b0:6b:e1:74:20:f2:8f:89:62:b8:4f:c3:
         f0:76:57:38:de:46:69:cd:14:0e:b1:25:75:60:a1:29:7d:4b:
         95:7b:bf:47:87:1a:63:9b:a5:bf:b9:dd:2b:9b:e2:4e:e8:bd:
         22:2d:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:11:43 2025 by rpki-client