Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.mft
File:                     DEAE04835FF41D43734A55EB8CB866989D7A9F55.mft (raw, json)
Hash identifier:          wt2x3LALvCjAEhveJhMsJJTRX4KWgc6d4KFmgg/+9yE=
Subject key identifier:   2C:E2:AE:5A:D4:45:A3:33:F2:5E:C0:6B:A5:62:EC:2A:8C:54:F3:79
Authority key identifier: DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55
Certificate issuer:       /CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
Certificate serial:       5E65D018EAAC2100DB04F730DD3BBB2E3CAA6AA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.mft
Manifest number:          9B
Signing time:             Thu 29 Oct 2026 01:07:09 +0000
Manifest this update:     Thu 29 Oct 2026 01:02:09 +0000
Manifest next update:     Fri 30 Oct 2026 01:44:09 +0000
Files and hashes:         1: 3137302e37382e39322e302f32322d3234203d3e20323635353030.roa (hash: 6yEK+Wn8EHsZTo84dDNBQTi2TcBNY/zwYmMBEScYw00=)
                          2: 323830343a333531383a3a2f33322d3334203d3e20323635353030.roa (hash: Rj9IEr7WlSVsn9CCMY1gCShkokqTmtUnH8kMAsKWZPQ=)
                          3: DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl (hash: lkGXPouT/i/cMYmgA+JqcEZxEUZtSVMtYYjaOSUHw5o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:65:d0:18:ea:ac:21:00:db:04:f7:30:dd:3b:bb:2e:3c:aa:6a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
        Validity
            Not Before: Oct 29 01:02:09 2026 GMT
            Not After : Oct 30 01:44:09 2026 GMT
        Subject: CN=2CE2AE5AD445A333F25EC06BA562EC2A8C54F379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:34:55:13:87:0b:21:2c:e7:fa:70:ca:0b:
                    26:c7:83:4a:a7:d9:14:e1:42:15:97:e9:d2:b4:53:
                    43:6a:86:21:28:fc:88:3f:b8:fa:19:d0:73:99:db:
                    3a:dd:82:32:77:b6:bf:96:7a:f8:21:e9:17:d9:e2:
                    8f:90:a7:94:6d:69:24:8d:a4:74:ea:60:ba:98:2e:
                    77:ae:c6:92:0c:bd:3e:18:10:df:74:85:8e:a4:9f:
                    52:ae:3a:e0:d8:2a:72:df:48:81:74:d6:d9:4e:dc:
                    36:97:cd:16:2c:15:62:82:81:66:0e:a9:aa:5f:55:
                    3e:26:35:9d:6a:b4:1e:25:9f:b5:ec:35:28:93:a1:
                    e4:6f:57:59:02:04:3e:63:c3:01:fd:e4:c7:2b:ef:
                    ea:15:35:fb:b7:4e:77:79:e1:f1:e2:1b:16:7f:11:
                    97:ae:ed:ff:15:ee:29:a8:c3:6b:27:f8:15:18:8b:
                    2f:a5:2f:60:4d:58:2a:fa:7d:b1:d7:c3:85:d4:10:
                    a2:af:cd:e1:c4:64:c7:d3:ac:01:bc:c4:52:77:63:
                    22:dd:ea:04:4d:e2:e2:ae:66:40:4b:b5:6d:4c:f7:
                    4f:f7:38:c9:9f:1f:15:12:b1:ae:04:ab:39:96:32:
                    a6:fb:8f:e6:42:98:09:d6:df:b0:0b:8c:c7:3d:b6:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E2:AE:5A:D4:45:A3:33:F2:5E:C0:6B:A5:62:EC:2A:8C:54:F3:79
            X509v3 Authority Key Identifier:
                keyid:DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:a1:46:6c:bf:0f:07:72:32:c7:77:ad:b7:d0:b4:22:f5:
         8e:d2:c4:df:b3:04:b4:90:df:93:7e:7f:c2:14:28:f3:f3:55:
         cf:02:f6:eb:1e:6f:17:95:c6:64:06:a2:01:b7:ab:5b:bb:2b:
         52:d8:1a:19:ca:bc:38:eb:b3:9a:0c:db:bc:51:fe:86:24:91:
         c6:83:3d:3d:15:86:27:8a:ff:34:ad:00:af:ed:39:ef:61:f5:
         48:6f:8e:9c:25:d4:d9:2d:2f:5c:2b:99:e2:ac:7b:49:72:98:
         aa:3b:4a:a2:2d:e4:22:76:cd:26:db:fc:d3:9f:97:b8:d2:15:
         33:73:22:46:33:a1:bd:1a:3e:55:da:a4:88:d1:15:42:3c:d8:
         e2:69:86:64:42:28:5e:63:85:d2:2e:8c:ae:e0:6f:b1:92:24:
         72:4e:a9:22:02:7b:61:55:85:5d:42:67:1f:5d:75:9d:4a:96:
         50:12:85:f4:c9:a8:c8:85:18:23:fd:6d:26:4c:93:9c:28:63:
         fc:d5:8f:c6:d3:d0:e9:ac:65:c2:e8:81:97:7a:01:d4:3f:cf:
         35:b0:ee:65:25:69:c9:68:b3:82:b2:95:ce:57:bf:bf:84:b9:
         db:19:7f:62:a2:1c:a9:21:21:a4:35:33:30:36:63:d0:8b:c7:
         74:c5:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:36:39 2026 by rpki-client