Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.mft
File:                     4522BB89648AA114F962AB6359DA8F28C7B660C2.mft (raw, json)
Hash identifier:          Lx78U+kmAZsZa1pwLRdrNZT+Zwk69WBFbauAiGi9VH8=
Subject key identifier:   99:11:BD:07:06:2A:3E:83:37:4B:2F:03:ED:D3:56:54:E0:BD:9D:BD
Authority key identifier: 45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2
Certificate issuer:       /CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
Certificate serial:       6B7FC2D2BF0D05AE1E6BE006DB9A4BDF71346F28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.mft
Manifest number:          02A1
Signing time:             Tue 19 Aug 2025 04:58:12 +0000
Manifest this update:     Tue 19 Aug 2025 04:53:12 +0000
Manifest next update:     Wed 20 Aug 2025 05:15:12 +0000
Files and hashes:         1: 323830343a333339343a3a2f33322d3438203d3e20323635343035.roa (hash: POyvdxO2J3POtlOQaKmGFC2y+RLZ3rkjF+bjeo86d6I=)
                          2: 4522BB89648AA114F962AB6359DA8F28C7B660C2.crl (hash: yDBnbqZEGm3XIvbVxM0bCIHm0ZU8BM/M7xm27FX0kQg=)
                          3: 3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa (hash: frG9c7MKmWPBTyXa3kpBLo2ajO7RXJYqeK8R1LY+6q8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:c2:d2:bf:0d:05:ae:1e:6b:e0:06:db:9a:4b:df:71:34:6f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4522BB89648AA114F962AB6359DA8F28C7B660C2
        Validity
            Not Before: Aug 19 04:53:12 2025 GMT
            Not After : Aug 20 05:15:12 2025 GMT
        Subject: CN=9911BD07062A3E83374B2F03EDD35654E0BD9DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:0d:7c:12:ae:fb:f3:3c:91:15:e3:03:f8:
                    2d:9d:40:fe:2e:21:36:55:89:b8:55:6e:71:c5:05:
                    3e:34:98:70:b7:9c:12:1c:bb:6f:92:17:24:bc:05:
                    ff:08:a7:72:03:a6:35:5b:44:3e:ca:25:18:bc:5a:
                    66:58:72:43:7b:ba:b2:67:03:ee:76:a3:9b:f6:25:
                    2f:ad:a0:5c:0a:95:f3:e9:cd:d2:b2:b1:4a:24:bb:
                    5d:55:25:da:99:10:80:50:dd:e9:9b:06:6a:c5:6e:
                    28:1b:2e:02:36:64:cc:23:37:dd:07:3a:85:10:5e:
                    68:7e:f6:d1:97:c3:ea:b3:ed:2f:ca:31:45:c4:26:
                    4b:20:83:03:ee:d8:38:41:13:6e:7c:82:9f:e7:4c:
                    fa:7e:32:d3:31:7d:49:26:da:b2:8c:af:39:2a:95:
                    48:af:9e:38:f9:24:d4:7a:ad:27:0f:93:68:06:e9:
                    e6:ae:77:a5:db:96:e1:80:5f:bb:f9:e3:ac:41:c9:
                    ca:c9:bb:63:b9:1c:bb:f1:b1:cd:fc:89:97:2b:e3:
                    12:f1:8a:e5:50:4d:d6:1d:6a:9f:f5:d9:3d:b7:d7:
                    cc:98:ff:b1:09:ce:7d:92:15:af:cc:7c:1d:1c:5b:
                    19:8f:fd:6d:65:79:ea:9e:92:a9:c1:9e:ea:e3:71:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:11:BD:07:06:2A:3E:83:37:4B:2F:03:ED:D3:56:54:E0:BD:9D:BD
            X509v3 Authority Key Identifier:
                keyid:45:22:BB:89:64:8A:A1:14:F9:62:AB:63:59:DA:8F:28:C7:B6:60:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/1/4522BB89648AA114F962AB6359DA8F28C7B660C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:4d:28:15:c5:63:48:c1:b8:9b:0d:ca:a1:6e:ae:95:d8:
         7f:98:3b:e7:34:70:2c:cd:97:1e:7a:dd:2d:c0:20:fd:33:e7:
         6b:af:97:cc:99:50:97:e1:ef:26:46:ed:16:ba:3c:2a:a1:12:
         85:18:c8:35:03:1a:7a:c8:15:73:c2:36:68:ad:71:9b:e2:23:
         69:ed:be:69:10:6c:e6:d7:97:7b:f8:f7:2d:02:d0:56:8e:37:
         3f:ba:17:71:09:e8:87:87:c6:f9:44:86:d2:92:4f:c9:79:fe:
         e3:37:42:0c:be:16:f2:c2:10:62:90:d4:f6:cd:26:b5:ec:74:
         9b:31:a7:99:69:38:cf:86:91:60:9e:7e:b4:04:05:e2:96:3b:
         39:68:94:d3:78:12:77:3f:b2:e0:4b:0d:2b:35:02:e7:64:68:
         6d:3e:04:d1:a4:9c:ff:58:1a:5d:1d:be:01:a2:86:8d:66:a4:
         c6:c3:a2:5f:84:95:53:35:f9:6b:69:cd:d5:ef:7f:ac:ad:cb:
         db:61:d5:4b:f5:b0:a5:01:d8:48:5b:d8:0f:4f:07:35:ca:3a:
         f4:45:dd:5c:aa:7e:d3:de:e3:1c:02:19:ac:1a:a9:90:7c:a9:
         0b:3b:13:ae:3f:f4:a0:15:65:92:29:28:2f:8e:53:17:e5:e6:
         d3:e6:f4:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa3/C0r8NBa4ea+AG25pL33E0bygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUyMkJCODk2NDhBQTExNEY5NjJBQjYzNTlEQThGMjhD
N0I2NjBDMjAeFw0yNTA4MTkwNDUzMTJaFw0yNTA4MjAwNTE1MTJaMDMxMTAvBgNV
BAMTKDk5MTFCRDA3MDYyQTNFODMzNzRCMkYwM0VERDM1NjU0RTBCRDlEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4A18Eq778zyRFeMD+C2dQP4u
ITZVibhVbnHFBT40mHC3nBIcu2+SFyS8Bf8Ip3IDpjVbRD7KJRi8WmZYckN7urJn
A+52o5v2JS+toFwKlfPpzdKysUoku11VJdqZEIBQ3embBmrFbigbLgI2ZMwjN90H
OoUQXmh+9tGXw+qz7S/KMUXEJksggwPu2DhBE258gp/nTPp+MtMxfUkm2rKMrzkq
lUivnjj5JNR6rScPk2gG6eaud6XbluGAX7v546xBycrJu2O5HLvxsc38iZcr4xLx
iuVQTdYdap/12T2318yY/7EJzn2SFa/MfB0cWxmP/W1leeqekqnBnurjcVOBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmRG9BwYqPoM3Sy8D7dNWVOC9nb0wHwYDVR0j
BBgwFoAURSK7iWSKoRT5YqtjWdqPKMe2YMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3A3WEM4NlI5bmI2d1ducFZ0RDZ5OG16eDI0bTlyd1FHREhCcUN3b1h1
MkovMS80NTIyQkI4OTY0OEFBMTE0Rjk2MkFCNjM1OURBOEYyOEM3QjY2MEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MjJCQjg5NjQ4QUExMTRG
OTYyQUI2MzU5REE4RjI4QzdCNjYwQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3A3WEM4NlI5bmI2d1ducFZ0RDZ5OG16eDI0bTlyd1FHREhCcUN3b1h1MkovMS80
NTIyQkI4OTY0OEFBMTE0Rjk2MkFCNjM1OURBOEYyOEM3QjY2MEMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHUZNKBXFY0jBuJsNyqFurpXYf5g75zRwLM2XHnrdLcAg/TPna6+XzJlQl+Hv
JkbtFro8KqEShRjINQMaesgVc8I2aK1xm+Ijae2+aRBs5teXe/j3LQLQVo43P7oX
cQnoh4fG+USG0pJPyXn+4zdCDL4W8sIQYpDU9s0mtex0mzGnmWk4z4aRYJ5+tAQF
4pY7OWiU03gSdz+y4EsNKzUC52RobT4E0aSc/1gaXR2+AaKGjWakxsOiX4SVUzX5
a2nN1e9/rK3L22HVS/WwpQHYSFvYD08HNco69EXdXKp+097jHAIZrBqpkHypCzsT
rj/0oBVlkikoL45TF+Xm0+b09g==
-----END CERTIFICATE-----