Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.mft
File:                     44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.mft (raw, json)
Hash identifier:          m3yezg0zxgNugUANw+JXidYh8HFeWw0XZfkBB6LzAho=
Subject key identifier:   C8:B7:2D:02:B2:85:7B:DE:81:ED:7D:72:28:F3:4A:14:3E:24:32:9D
Authority key identifier: 44:BB:F5:86:89:7C:E6:EA:D3:6A:C8:AE:D1:BC:A4:06:F3:F1:1F:BC
Certificate issuer:       /CN=44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC
Certificate serial:       799502AFCA8F786A18C2D71F3FCD87C1116679D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.mft
Manifest number:          03
Signing time:             Wed 29 Oct 2025 16:42:29 +0000
Manifest this update:     Wed 29 Oct 2025 16:37:29 +0000
Manifest next update:     Thu 30 Oct 2025 20:19:29 +0000
Files and hashes:         1: 323830343a333531343a3a2f33322d3438203d3e20323635343939.roa (hash: 4FRtIb3C1srRl5MVapqxTXjSouftZqfmVR9n7GyTvQU=)
                          2: 3137302e37382e38342e302f32322d3234203d3e20323635343939.roa (hash: bYHa2T4g9LNSwiCiVT7C8Rg0uNcIqX1P/FMRVeCpOs4=)
                          3: 44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.crl (hash: StiVNyeB7BOglyeS1xs8xNmNh3B6sQG5ry7PrDaL2+s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:95:02:af:ca:8f:78:6a:18:c2:d7:1f:3f:cd:87:c1:11:66:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC
        Validity
            Not Before: Oct 29 16:37:29 2025 GMT
            Not After : Oct 30 20:19:29 2025 GMT
        Subject: CN=C8B72D02B2857BDE81ED7D7228F34A143E24329D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:75:7b:44:1a:dc:c7:a5:ab:d5:5a:e3:9c:
                    a7:98:97:22:b6:10:e0:4b:ca:1d:19:a4:b6:19:86:
                    ac:92:57:e9:25:18:5d:c7:5c:ae:93:64:65:53:d1:
                    f2:da:04:3b:9f:aa:15:ac:d3:af:c3:a7:8c:5f:cd:
                    30:fb:c3:4c:1d:db:12:18:52:2e:54:f3:f6:f5:7a:
                    4e:ca:6e:df:6d:c8:01:95:dd:04:09:5a:e7:26:93:
                    d9:14:ce:9d:3b:97:f6:8d:b8:a0:cd:84:26:59:a7:
                    f0:8f:ff:54:22:31:4f:d9:7a:9f:4c:66:b7:5e:35:
                    ec:96:3b:2c:e3:fb:ec:fa:f1:3e:8b:f9:f3:7a:d9:
                    92:48:12:e4:3c:15:19:3e:8d:e8:53:70:e5:04:49:
                    d0:14:d6:85:72:c5:fd:99:37:97:75:f4:3b:d5:ff:
                    55:90:70:f3:36:d8:99:e0:c4:c7:3a:81:91:e8:8f:
                    b6:e0:cb:33:20:c6:be:00:42:5e:0f:75:5a:41:7c:
                    bb:da:32:5c:32:13:f9:55:b6:e6:2a:04:fc:20:1a:
                    45:02:d0:10:c4:9d:ac:95:ba:3d:67:db:00:fb:f6:
                    2d:2f:7c:39:51:3e:4f:25:94:e5:21:11:9b:18:4d:
                    5e:28:37:8a:2f:67:c4:20:46:48:e4:cb:07:04:f0:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B7:2D:02:B2:85:7B:DE:81:ED:7D:72:28:F3:4A:14:3E:24:32:9D
            X509v3 Authority Key Identifier:
                keyid:44:BB:F5:86:89:7C:E6:EA:D3:6A:C8:AE:D1:BC:A4:06:F3:F1:1F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:c3:0d:11:5b:98:2c:db:48:11:b3:90:94:b0:06:62:79:
         6b:1f:0f:52:c7:48:31:27:3b:1f:f3:13:7b:a3:63:40:c5:e5:
         f5:68:3b:2a:5a:0e:b5:c4:a7:32:82:07:df:38:95:5f:9a:4e:
         8f:2d:cc:ca:5a:b5:57:b4:54:db:60:0a:32:b7:12:f5:68:9b:
         42:cb:07:4e:04:6e:67:b2:50:7b:59:bb:bf:12:8c:76:ed:d4:
         0b:7c:bb:92:75:1e:6b:6a:2b:3a:0f:50:ac:f5:8a:59:a2:ec:
         6c:42:db:0c:81:d7:ca:a8:60:80:35:49:f7:43:76:4a:42:5a:
         9b:2b:26:e0:17:ac:84:84:fe:ab:18:1f:c8:ad:7d:7d:f9:21:
         74:43:7f:d3:70:06:b2:df:74:9e:e1:ab:a1:21:a1:ae:c2:c9:
         9a:f0:52:5b:dc:53:f1:ff:2b:62:f4:d2:81:57:e0:36:7a:c0:
         c8:12:c7:be:72:94:f7:29:f9:da:e8:11:29:a6:58:ec:d8:a4:
         88:c6:6b:01:b9:d0:55:44:40:86:88:ba:cc:a0:53:e3:9c:f3:
         ff:7f:fe:f5:a5:6a:b2:ef:64:5a:3c:28:f1:d4:92:bf:a9:26:
         69:9e:a4:6c:23:e4:1b:e5:f6:c1:a7:3a:6b:91:bf:00:9b:c0:
         c4:00:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----