Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
File:                     3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft (raw, json)
Hash identifier:          U7mKtcQ9/cKsaIqcvh+DS0DBNvAT9Tgi23qd7kn0458=
Subject key identifier:   70:AF:71:4F:0F:26:E2:01:80:F9:F4:D4:19:5F:5E:4D:99:E4:3F:C1
Authority key identifier: 3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB
Certificate issuer:       /CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
Certificate serial:       23E378C3D1A06D4A6F9CECFAF305C2280DB83BE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
Manifest number:          0113
Signing time:             Sat 22 Aug 2026 08:47:21 +0000
Manifest this update:     Sat 22 Aug 2026 08:42:21 +0000
Manifest next update:     Sun 23 Aug 2026 10:14:21 +0000
Files and hashes:         1: 3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl (hash: dHecWS5DJoz2hEkoElH1v8XuoCk+6pj0OjIqcYZN7TE=)
                          2: 323830343a343662343a3a2f33322d313238203d3e20323637303036.roa (hash: 3ESTssKrO59TEX6cyJb31b74gWXJaUZoZeY9XHKgg/A=)
                          3: 34352e3232362e3232302e302f32322d3332203d3e20323637303036.roa (hash: 0s2HaJKOn3j8CJ3qgV+m0DcSdboj4mNkfAoqYIL3c70=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e3:78:c3:d1:a0:6d:4a:6f:9c:ec:fa:f3:05:c2:28:0d:b8:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
        Validity
            Not Before: Aug 22 08:42:21 2026 GMT
            Not After : Aug 23 10:14:21 2026 GMT
        Subject: CN=70AF714F0F26E20180F9F4D4195F5E4D99E43FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:a0:bb:21:29:aa:8f:a1:ea:f0:1f:09:e6:
                    7a:af:75:81:c4:ba:ed:a5:e6:94:b6:02:cd:c5:b8:
                    ab:17:79:8d:c0:3c:5a:79:95:d0:9d:61:2d:5c:cb:
                    99:c0:b2:03:58:42:5b:95:6c:6d:0f:d0:e7:03:7f:
                    dc:5c:c9:7e:59:c5:ab:9b:0d:95:87:e2:ba:87:66:
                    98:66:86:3a:bd:9c:3a:a8:da:19:fe:b5:d7:c2:44:
                    96:ab:ca:50:64:f3:c9:09:0c:e4:96:67:83:94:8a:
                    56:ce:c0:52:e9:72:bb:59:9c:85:c4:7e:8f:21:18:
                    29:bf:50:b9:82:da:e9:54:a6:bb:fe:d4:72:05:84:
                    d9:14:8e:d4:2c:fe:a5:f7:e8:09:a1:64:3f:b2:39:
                    ff:9d:ca:78:23:04:90:6e:5a:ca:d8:0d:98:60:cc:
                    a7:9d:58:2b:c2:2c:a3:8a:ba:bc:98:c6:02:88:6a:
                    a5:73:4b:e8:6d:34:44:57:44:3e:1a:70:39:86:e4:
                    a1:48:12:94:90:fc:90:4a:98:4d:7d:e0:ce:f1:80:
                    9a:0d:7b:76:24:78:d3:c9:4d:9a:3f:6a:25:ee:cb:
                    5e:6f:36:4f:9e:bb:9c:f6:de:a9:b0:25:36:e0:12:
                    3e:8f:56:66:12:7b:07:12:a3:49:b9:ff:5f:90:dc:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AF:71:4F:0F:26:E2:01:80:F9:F4:D4:19:5F:5E:4D:99:E4:3F:C1
            X509v3 Authority Key Identifier:
                keyid:3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:42:fd:ea:66:b0:44:95:fa:df:70:1a:39:63:02:c7:ef:c1:
         07:7a:e6:12:14:c5:20:32:26:75:e9:75:fe:27:f9:cb:3b:a0:
         4f:1f:63:69:bc:43:e7:ee:a2:63:90:d9:7b:38:ad:b2:00:01:
         4a:9c:6d:4c:f3:6b:e1:91:63:aa:ce:24:de:fb:44:fb:fa:2c:
         29:70:c7:05:f1:eb:4e:ab:5a:7c:41:08:51:f1:df:28:42:ba:
         b2:44:c1:3f:f5:88:12:79:e5:1b:df:bf:63:62:f4:bb:e3:db:
         1c:ad:c6:41:65:5f:18:08:3e:ae:1a:3e:4c:47:52:bd:e9:01:
         8a:34:e4:36:cf:66:a2:c8:ab:05:ab:35:24:6e:ed:a7:95:ba:
         f0:45:34:06:ea:ca:7c:8f:33:28:12:4c:da:73:d1:c4:bc:c7:
         47:98:1b:60:c9:53:a8:0d:7d:6d:86:fe:da:b4:c0:e0:6e:50:
         1e:c0:f0:41:c5:7e:26:4f:9a:95:88:79:28:d8:f1:ec:39:72:
         23:8b:18:cc:76:47:68:68:df:b1:76:97:4d:4a:de:d3:ef:52:
         84:ed:72:ba:f2:c2:1d:34:b9:6f:7e:31:eb:6d:a4:dc:13:15:
         0c:d1:e2:27:a4:73:58:22:d2:a4:d5:53:45:b7:9b:07:ae:4f:
         66:e3:5f:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI+N4w9GgbUpvnOz68wXCKA24O+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YyNTBFNkZCQ0Y1QkU2REVEMzg1MUUwNUIwMjRCQjgz
REU3NTBBQjAeFw0yNjA4MjIwODQyMjFaFw0yNjA4MjMxMDE0MjFaMDMxMTAvBgNV
BAMTKDcwQUY3MTRGMEYyNkUyMDE4MEY5RjRENDE5NUY1RTREOTlFNDNGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmKC7ISmqj6Hq8B8J5nqvdYHE
uu2l5pS2As3FuKsXeY3APFp5ldCdYS1cy5nAsgNYQluVbG0P0OcDf9xcyX5Zxaub
DZWH4rqHZphmhjq9nDqo2hn+tdfCRJarylBk88kJDOSWZ4OUilbOwFLpcrtZnIXE
fo8hGCm/ULmC2ulUprv+1HIFhNkUjtQs/qX36AmhZD+yOf+dyngjBJBuWsrYDZhg
zKedWCvCLKOKuryYxgKIaqVzS+htNERXRD4acDmG5KFIEpSQ/JBKmE194M7xgJoN
e3YkeNPJTZo/aiXuy15vNk+eu5z23qmwJTbgEj6PVmYSewcSo0m5/1+Q3OdlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcK9xTw8m4gGA+fTUGV9eTZnkP8EwHwYDVR0j
BBgwFoAUPyUOb7z1vm3tOFHgWwJLuD3nUKswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYR012YVJxZmN6QzNDdEZoNXc5S0hqMWlhYVhTWWlMZUhENHFqcTN2
WFEvMC8zRjI1MEU2RkJDRjVCRTZERUQzODUxRTA1QjAyNEJCODNERTc1MEFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMjUwRTZGQkNGNUJFNkRF
RDM4NTFFMDVCMDI0QkI4M0RFNzUwQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEdYR012YVJxZmN6QzNDdEZoNXc5S0hqMWlhYVhTWWlMZUhENHFqcTN2WFEvMC8z
RjI1MEU2RkJDRjVCRTZERUQzODUxRTA1QjAyNEJCODNERTc1MEFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM0L96mawRJX633AaOWMCx+/BB3rmEhTFIDImdel1/if5yzugTx9jabxD5+6i
Y5DZezitsgABSpxtTPNr4ZFjqs4k3vtE+/osKXDHBfHrTqtafEEIUfHfKEK6skTB
P/WIEnnlG9+/Y2L0u+PbHK3GQWVfGAg+rho+TEdSvekBijTkNs9mosirBas1JG7t
p5W68EU0BurKfI8zKBJM2nPRxLzHR5gbYMlTqA19bYb+2rTA4G5QHsDwQcV+Jk+a
lYh5KNjx7DlyI4sYzHZHaGjfsXaXTUre0+9ShO1yuvLCHTS5b34x622k3BMVDNHi
J6RzWCLSpNVTRbebB65PZuNfHg==
-----END CERTIFICATE-----