Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
File:                     938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft (raw, json)
Hash identifier:          DYmkz5dFdtEtYObIpd9wcmnlD5zPKrwRxxvT6laUBBc=
Subject key identifier:   3C:58:E3:63:37:50:EB:4D:74:F6:5C:B5:D5:69:0B:DC:BF:A4:5F:DD
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       1AADFE26244654E021DD3CC44F4F9034A86EC1DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
Manifest number:          04DD
Signing time:             Sun 25 Oct 2026 22:30:00 +0000
Manifest this update:     Sun 25 Oct 2026 22:25:00 +0000
Manifest next update:     Mon 26 Oct 2026 23:03:00 +0000
Files and hashes:         1: 3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa (hash: 7gaDgQt3gCmEpOtNuKYGn2BAGnCy9Ud02Ee7gLLs2RM=)
                          2: 3139312e362e3137362e302f32302d3234203d3e20323632343238.roa (hash: jyp9iRMyXnpMFl/CdMeEkuoGenn940MEKTtUJ1Ci88Q=)
                          3: 323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (hash: Y45lMV0tTF7QfMr+YAIoDwLoagTo5lPrSAhYU9BwivE=)
                          4: 938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl (hash: kDYF85xDWqnRQp2HQ+4tE9O7RgyvvrjkO89vfpUi61M=)
                          5: 3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa (hash: l3XwCL1sPDMp+YINhlmfihgIpjYjEoX/TzH9YC85Olc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:fe:26:24:46:54:e0:21:dd:3c:c4:4f:4f:90:34:a8:6e:c1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Oct 25 22:25:00 2026 GMT
            Not After : Oct 26 23:03:00 2026 GMT
        Subject: CN=3C58E3633750EB4D74F65CB5D5690BDCBFA45FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:c2:4b:38:c9:30:9f:b5:86:8d:ad:95:bf:
                    3e:af:db:39:ef:0e:ce:15:f4:b6:26:bf:a0:52:36:
                    f1:c4:8e:d5:d4:3a:29:19:03:4b:14:07:b2:a1:76:
                    f2:6a:f2:e8:35:90:12:73:c6:49:a6:6a:df:e7:1b:
                    0e:99:bb:dc:1d:34:13:ad:80:12:6e:bb:e5:2b:6e:
                    3e:e1:13:43:c4:f0:a2:4d:1b:cd:a8:3a:31:e1:9c:
                    7e:ba:60:e5:d3:4e:e0:4b:9b:16:a8:47:fb:4f:91:
                    10:b9:ce:53:50:be:d4:78:64:50:72:30:e6:ca:74:
                    66:eb:cd:7e:b9:4f:98:ed:2e:b0:d5:38:1e:b6:de:
                    67:b9:be:0b:e9:2e:99:c0:7d:11:a7:4c:1b:b9:5d:
                    b3:81:11:8e:29:2a:c3:01:9d:16:67:af:e2:70:bf:
                    3e:4f:27:5b:ad:b1:69:b5:40:bc:22:e5:ab:f4:4b:
                    4f:6a:63:46:44:91:bb:c6:c6:77:e6:fa:14:2e:fd:
                    48:44:ba:63:a3:a4:f8:e8:99:3a:c9:c3:b7:0f:4c:
                    82:f3:ee:05:0d:7b:44:f0:88:29:8a:c0:cc:0c:ef:
                    3b:61:c2:2d:8e:5a:ac:0d:ba:62:30:8b:ad:73:be:
                    b2:3b:76:e0:00:95:89:89:e0:7b:1e:8a:91:14:50:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:E3:63:37:50:EB:4D:74:F6:5C:B5:D5:69:0B:DC:BF:A4:5F:DD
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:9f:86:39:06:81:34:2c:90:59:aa:c6:f0:fe:18:83:0d:
         0a:46:0b:cf:9f:93:ae:cf:34:50:20:f1:35:67:e2:d7:53:26:
         7f:b2:e3:d9:c8:65:11:40:19:dc:03:9d:c6:03:2b:f4:94:eb:
         d9:db:bc:84:ba:dc:cf:6c:a0:ac:6e:c7:21:03:4c:e9:fc:36:
         11:fd:31:a8:68:df:bc:cd:b2:ad:d5:6a:cc:ec:2a:0d:e4:3b:
         d3:58:23:6a:6a:4b:57:ba:9d:b8:8e:ea:e8:d6:cc:8b:67:38:
         c0:44:2a:02:14:2c:41:11:1c:19:11:61:23:57:bd:1d:de:60:
         df:a9:1c:a9:37:6a:af:ab:3f:97:9e:34:44:11:84:cf:c6:37:
         2d:ab:fe:2e:d8:f4:96:b1:46:71:de:8c:e0:b4:f2:0f:a7:f1:
         7c:d8:c5:1e:b5:04:4e:43:1d:2f:4c:fd:5d:3c:a5:17:71:82:
         a8:83:f4:82:11:32:8e:1f:39:3a:eb:e9:a9:c0:4a:ac:1a:e0:
         3b:7c:8d:5d:2d:3c:84:62:c8:c0:9c:c1:81:78:47:b8:8d:76:
         e3:de:07:21:e8:41:a2:94:38:fe:76:ee:c9:43:88:bf:28:c8:
         9c:77:ae:1c:f2:0d:59:35:c6:fb:87:07:59:2d:0b:e6:e6:04:
         a9:10:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----