Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
File:                     E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft (raw, json)
Hash identifier:          8aszxFhAiuCNz8X0klpAKWumlDWINLGlLnFXRjY9k7I=
Subject key identifier:   A7:D2:A7:AE:0F:9E:B0:8B:04:2C:CD:CD:A1:EE:40:07:E6:1B:2C:6B
Authority key identifier: E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B
Certificate issuer:       /CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
Certificate serial:       483DDAF1E875B1E6D49B62C437BEE03F226B5CD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
Manifest number:          0484
Signing time:             Fri 21 Aug 2026 00:02:50 +0000
Manifest this update:     Thu 20 Aug 2026 23:57:50 +0000
Manifest next update:     Sat 22 Aug 2026 03:20:50 +0000
Files and hashes:         1: 3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa (hash: StQpTbAcv83XXLPZ6Oh/IL99HW6O2I6LqldGtvk9K/o=)
                          2: E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl (hash: A9r/SofAARkd50Zn4HFG6Ng8vGrDJ3SSwgCAErm2wWo=)
                          3: 323830343a316532633a3a2f33322d3438203d3e20323634343132.roa (hash: VtJb+krI2nLGuZfeTGYjiXpSq+r7J1vjusSEHjpvIzs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:da:f1:e8:75:b1:e6:d4:9b:62:c4:37:be:e0:3f:22:6b:5c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
        Validity
            Not Before: Aug 20 23:57:50 2026 GMT
            Not After : Aug 22 03:20:50 2026 GMT
        Subject: CN=A7D2A7AE0F9EB08B042CCDCDA1EE4007E61B2C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:27:ef:3e:8d:ee:5c:ba:ce:c2:db:0e:5c:
                    49:41:7e:ab:0e:b0:3a:f3:55:da:3e:74:91:43:e9:
                    f5:81:a3:36:8c:3c:b2:f9:30:d2:10:ae:35:ad:f1:
                    cd:89:aa:0d:c3:fb:c6:82:73:a3:db:85:cc:63:5c:
                    98:5c:c5:ea:08:74:19:17:76:0d:e7:ed:f8:76:5f:
                    a7:b4:88:df:75:af:7e:fe:4a:8c:03:5a:fa:65:b6:
                    9f:d7:ad:3c:d5:dc:a1:1f:65:10:50:db:18:8b:4a:
                    86:42:51:45:ce:c3:c3:9a:ca:23:bd:5a:65:2c:4e:
                    28:78:94:a2:a9:92:9e:66:80:2c:63:fc:1f:ca:0c:
                    16:07:80:db:57:87:a0:56:17:cd:0d:33:91:2f:a9:
                    fc:0f:33:99:22:34:85:34:77:f6:e0:c8:da:f6:d8:
                    97:f9:5d:ab:7a:14:07:3f:6c:91:ea:2b:a7:6a:17:
                    c7:d6:09:05:7f:f3:63:41:f8:83:c6:54:a1:ad:30:
                    19:af:07:e9:30:60:e5:3c:63:63:bd:dd:8c:3f:2e:
                    5c:48:b6:97:82:c5:e0:16:dd:c2:de:5c:d7:6f:94:
                    d8:a3:e5:eb:94:e0:6c:d1:ff:83:70:01:35:79:fc:
                    1e:3f:43:3b:77:68:9e:da:19:a8:2b:3d:0c:de:72:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D2:A7:AE:0F:9E:B0:8B:04:2C:CD:CD:A1:EE:40:07:E6:1B:2C:6B
            X509v3 Authority Key Identifier:
                keyid:E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:28:28:8c:50:2b:dd:fe:d8:ef:12:dc:77:e8:25:62:ac:
         6b:61:7f:d2:57:f8:a0:d4:f7:42:ff:38:1a:67:bb:fe:bd:a3:
         bc:25:73:d3:bf:e3:7f:4f:69:0c:aa:fe:f8:6e:00:78:30:0b:
         2b:d0:b6:6e:33:e8:25:7b:f6:a7:4f:42:9e:ef:63:4a:d6:f5:
         d1:52:5a:61:74:c9:df:33:52:90:b1:a0:e4:20:3b:2e:d5:78:
         a6:8c:57:ba:5e:31:6f:49:f0:5a:82:c5:5c:df:1e:99:5b:00:
         0f:bf:5e:30:27:65:5f:e2:f7:83:a8:ef:32:45:29:f5:b0:37:
         b1:a5:59:36:5d:31:2e:47:06:78:ea:56:ab:b0:56:d6:42:35:
         1e:5e:f3:11:61:d5:81:ea:e9:91:3f:de:7a:19:1f:18:76:40:
         1c:05:b0:63:d8:89:b1:87:30:92:ed:55:d7:68:13:05:e1:05:
         36:1c:01:4e:d8:1e:cf:2d:40:23:13:46:c0:28:ad:87:cc:f9:
         eb:00:96:a7:67:48:f2:9d:29:44:2b:60:1c:d4:ac:05:6c:a5:
         7e:63:54:d6:1c:6b:25:e7:f7:d8:ee:30:06:7b:49:d4:9d:03:
         14:7a:5d:e3:09:4a:35:cf:67:67:fa:7f:e3:5d:38:5c:94:bd:
         8f:71:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----