Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft
File:                     8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft (raw, json)
Hash identifier:          5DZS2iEs1XDPzTQpj/6KZcQ1Kxmj1f3ZZroru7KsHsM=
Subject key identifier:   DA:14:E2:E9:F3:A7:E8:F1:EA:EF:33:C9:05:7B:72:F7:8E:74:63:A3
Authority key identifier: 8E:78:E6:F7:BE:E3:C2:5A:C9:43:60:A0:2E:CD:65:45:F5:9D:65:75
Certificate issuer:       /CN=8E78E6F7BEE3C25AC94360A02ECD6545F59D6575
Certificate serial:       6BAF2219BD0EDC00B270AA5284D6E7731D396F3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft
Manifest number:          0172
Signing time:             Fri 31 Oct 2025 04:09:24 +0000
Manifest this update:     Fri 31 Oct 2025 04:04:24 +0000
Manifest next update:     Sat 01 Nov 2025 07:29:24 +0000
Files and hashes:         1: 3134332e3133372e3137322e302f32322d3234203d3e20323730393438.roa (hash: 4pUwMirJ+izZ4n7TK41j9sv27oxe4BvuNYKpHGFzoUU=)
                          2: 8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.crl (hash: eeGpWvTwpeRVGAJ1Zyrkr4u5yGSHDSgndThmJ9K8O7U=)
                          3: 323830343a373366343a3a2f33322d3334203d3e20323730393438.roa (hash: z6fbRTceA0tOVErFfYfMTgssD3MaASlghH4ko5Tdi7A=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:22:19:bd:0e:dc:00:b2:70:aa:52:84:d6:e7:73:1d:39:6f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E78E6F7BEE3C25AC94360A02ECD6545F59D6575
        Validity
            Not Before: Oct 31 04:04:24 2025 GMT
            Not After : Nov  1 07:29:24 2025 GMT
        Subject: CN=DA14E2E9F3A7E8F1EAEF33C9057B72F78E7463A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:8a:05:50:87:bf:ee:7b:70:d9:c2:b8:75:
                    c6:d9:fa:41:3f:57:38:fd:80:20:52:a8:b7:f3:16:
                    d3:f9:27:41:63:82:15:40:66:35:6e:18:4f:7b:57:
                    eb:ad:f1:c5:1c:4e:df:41:36:0b:55:59:f8:70:1b:
                    4a:03:c8:74:01:3b:cf:b7:2a:22:39:e5:0e:36:80:
                    d8:21:01:8f:c3:a5:67:fa:75:01:a0:14:3e:63:28:
                    e8:5a:7d:fe:f1:86:22:b5:a4:67:9c:94:69:a2:7c:
                    7e:19:b5:75:1e:ae:44:a6:4a:55:07:1a:16:80:7f:
                    e9:a8:94:4d:60:6a:2c:a3:0c:d6:db:fa:33:02:52:
                    c6:91:b9:78:1d:76:e0:16:e4:7b:8d:95:c3:db:22:
                    58:04:50:09:e0:55:63:2e:18:43:42:46:38:29:54:
                    ca:db:1e:75:fe:a5:7f:d2:12:dc:1c:0e:af:11:84:
                    7c:e2:da:1f:1e:22:17:48:75:9b:cf:f8:6b:61:6b:
                    dc:d6:ae:82:6e:fd:bc:c6:f4:5e:a9:a2:b0:e5:20:
                    4b:31:82:de:a5:1f:5e:cb:e6:b4:a8:9d:0d:3f:58:
                    bc:41:b7:0c:6c:40:bf:4a:26:62:bd:e1:d4:ff:e7:
                    ca:fe:9c:01:2a:8b:91:41:0c:5b:5c:f0:e2:d9:85:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:E2:E9:F3:A7:E8:F1:EA:EF:33:C9:05:7B:72:F7:8E:74:63:A3
            X509v3 Authority Key Identifier:
                keyid:8E:78:E6:F7:BE:E3:C2:5A:C9:43:60:A0:2E:CD:65:45:F5:9D:65:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:4d:f2:52:f1:52:cb:4a:e9:fb:a4:2c:9d:66:19:c5:50:
         78:af:83:c2:9c:2c:d6:6f:89:6f:7e:f8:86:ab:90:78:b7:53:
         9c:56:48:b4:4c:9b:2f:3e:a6:3b:b2:3c:37:7b:d1:22:a7:f5:
         0c:b3:7d:60:73:71:e5:f0:98:25:d6:f6:e0:9c:da:cf:9c:0b:
         8d:92:ca:5c:44:3c:86:56:cb:fe:5e:ad:74:91:65:be:06:55:
         dc:1b:74:c5:8b:75:8b:d5:06:27:ea:a4:e5:1e:65:f1:da:f9:
         e4:29:cb:05:28:8c:0f:ac:7f:d4:83:d8:ff:bc:5b:d8:db:e1:
         73:5c:dd:ca:d2:51:fa:7e:56:35:a8:86:8d:05:1a:72:3d:30:
         80:dd:8e:cf:e1:81:35:7e:c9:f8:18:16:97:2e:9c:ee:01:e4:
         22:f3:09:6c:1b:bf:4c:0a:4e:3b:ec:16:a5:bf:47:13:cf:84:
         34:6c:05:4a:44:12:e0:2c:1c:f1:0a:14:d4:b5:bf:c2:71:80:
         c4:fa:05:98:5c:63:79:2f:2c:31:4c:b0:40:6c:3d:86:e1:c3:
         a8:14:7c:92:32:b0:77:c7:34:74:fc:e0:18:92:4e:39:e5:4b:
         f2:ea:27:3f:0d:bc:90:19:94:c7:ac:c5:58:a7:e9:da:82:66:
         50:31:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:18 2025 by rpki-client