Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft
File:                     01848C66A25335A0075484FBC32617363F3B8550.mft (raw, json)
Hash identifier:          gniW5LLh/IKVwVLO5xuOwNbcxk3jzm9pmYgH54My0vA=
Subject key identifier:   81:40:E2:8F:16:67:27:AE:C6:EF:CE:D9:DD:AD:F8:82:18:80:A0:B3
Authority key identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50
Certificate issuer:       /CN=01848C66A25335A0075484FBC32617363F3B8550
Certificate serial:       650DD0BC5CFDF32DE95A4EB2F36E9195CBA2CEA3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft
Manifest number:          036F
Signing time:             Thu 30 Oct 2025 16:37:24 +0000
Manifest this update:     Thu 30 Oct 2025 16:32:24 +0000
Manifest next update:     Fri 31 Oct 2025 21:13:24 +0000
Files and hashes:         1: 3133322e3235352e32382e302f32322d3234203d3e20323634343631.roa (hash: jDwr9ejxKXg+DE9r6vnNIDUdYI2ulhvyfynCELP2/M4=)
                          2: 323830343a323030383a3a2f33322d3438203d3e20323634343631.roa (hash: 9PDoM2YCv2t3MbchGp0NG1oKFcKdMAwEFQUem7rtJ1g=)
                          3: 01848C66A25335A0075484FBC32617363F3B8550.crl (hash: 8jk2fxQXM9RzzHjgI7lFBzo60zkSlD9trxjpsfS2WjE=)
                          4: 3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa (hash: hItzbRYhhp0glI1YlztxX8nj2lnofI85Rl5h5PHa8n4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:d0:bc:5c:fd:f3:2d:e9:5a:4e:b2:f3:6e:91:95:cb:a2:ce:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01848C66A25335A0075484FBC32617363F3B8550
        Validity
            Not Before: Oct 30 16:32:24 2025 GMT
            Not After : Oct 31 21:13:24 2025 GMT
        Subject: CN=8140E28F166727AEC6EFCED9DDADF8821880A0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:c7:7d:cc:d5:ac:9b:79:75:11:a7:85:63:
                    8e:04:9f:be:02:03:6c:1a:fa:56:fb:bc:75:b2:1b:
                    2a:c4:80:a1:0b:09:94:7d:dc:07:90:6e:19:6b:e2:
                    da:2a:e1:f0:b6:d5:d1:02:e3:3b:80:dc:e8:7e:44:
                    c5:8c:3a:e3:77:2b:5a:2d:01:17:03:e9:26:ae:8d:
                    74:a2:3c:f5:e1:c6:a5:6a:33:e8:85:5f:76:38:1e:
                    bd:18:a2:dd:23:32:21:b6:18:45:b0:f9:7e:e1:07:
                    e6:b8:0a:57:de:2a:fb:a7:0b:ce:5e:91:f9:1d:03:
                    04:49:4d:f7:d5:a8:ff:d2:11:7e:f2:eb:9a:06:dd:
                    e1:12:10:34:ed:cb:72:b2:c0:80:b1:bf:07:01:fd:
                    75:f8:35:bf:e2:19:da:ec:70:3b:16:7c:cc:0b:55:
                    bd:70:68:7b:db:19:70:70:f5:65:ce:5e:cd:33:47:
                    e5:d7:8e:db:49:3f:aa:2f:6e:7c:56:a4:5e:ae:00:
                    4d:35:7d:ec:c0:29:09:02:0c:f9:ab:1a:01:0f:96:
                    99:cd:28:03:59:57:c2:51:e0:0d:fc:80:6f:99:36:
                    78:de:de:99:13:da:6d:28:e3:9f:88:af:b6:92:7d:
                    2d:70:11:48:ba:d3:bf:fd:fb:76:bd:95:b8:0b:fa:
                    12:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:E2:8F:16:67:27:AE:C6:EF:CE:D9:DD:AD:F8:82:18:80:A0:B3
            X509v3 Authority Key Identifier:
                keyid:01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f6:76:1e:2c:6f:40:2c:b8:98:1a:c5:46:1a:50:1e:26:36:
         34:9d:a0:b0:44:b4:f8:02:86:05:46:12:8b:1a:fd:ff:ee:ed:
         6f:79:67:3b:b0:d1:b2:e5:68:ef:42:df:89:29:59:83:4a:1b:
         ff:cb:26:94:cf:8b:94:b6:83:4a:6f:e3:31:0d:90:20:10:a9:
         23:90:6a:98:a1:c8:b0:44:a7:f9:7d:11:07:69:fa:af:66:0e:
         39:0c:2b:ea:3b:7f:f2:bd:65:46:ea:10:8e:ae:73:25:70:9c:
         ad:99:38:6f:e5:f9:8d:ef:55:a5:f8:f7:5a:77:2a:a7:a6:f5:
         c3:07:0d:88:c4:c1:d4:f5:46:46:ed:2b:44:24:5e:14:16:71:
         08:b8:80:1e:a3:4d:b2:36:8e:f0:62:2c:7f:bd:24:0c:e9:4d:
         b9:f7:a2:a6:af:2a:eb:f3:79:bf:fa:85:af:21:79:dc:68:b2:
         70:b9:ee:bc:c7:ab:09:d0:c9:d7:9e:e9:24:1e:52:bf:cf:23:
         86:e2:84:4c:5e:c7:97:c1:ab:4f:75:54:0a:2a:93:ff:18:9f:
         d5:94:65:67:81:98:fa:f9:ba:bb:95:f4:df:24:c3:9d:d1:31:
         c9:d1:fc:77:d9:66:6b:4c:3a:23:12:8b:c6:2c:e6:c3:d5:5d:
         5b:28:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:33 2025 by rpki-client