Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft
File:                     8F91E515016C4617D482162163052E1ABB4B35B2.mft (raw, json)
Hash identifier:          WdYRzLapyE3BkfxCcr9+iy1QgHcuH7+Z1DRuOrjB7hg=
Subject key identifier:   0F:D3:F8:35:5E:0F:C2:C2:6E:26:60:BB:3E:87:1D:8A:4B:B7:60:D1
Authority key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
Certificate issuer:       /CN=8F91E515016C4617D482162163052E1ABB4B35B2
Certificate serial:       171BB9FB7DA20A49752AB219B408EDED067B09A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft
Manifest number:          0A
Signing time:             Thu 30 Oct 2025 17:30:36 +0000
Manifest this update:     Thu 30 Oct 2025 17:25:36 +0000
Manifest next update:     Fri 31 Oct 2025 17:54:36 +0000
Files and hashes:         1: 3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa (hash: /G2cxsR4X4qBWNv/KiJY7TQZmL6JoIuPaKjPtYPbUyE=)
                          2: 8F91E515016C4617D482162163052E1ABB4B35B2.crl (hash: fdJOxD54XsK7jjRpatTLo0VkHNZMmFUd7t5+m4MmbS0=)
                          3: 323830343a343164343a3a2f33322d3438203d3e20323637343539.roa (hash: cbbbeABJ9NLDJEbDdv4N61/lZInNTiYeAX5NeNySgEA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:b9:fb:7d:a2:0a:49:75:2a:b2:19:b4:08:ed:ed:06:7b:09:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F91E515016C4617D482162163052E1ABB4B35B2
        Validity
            Not Before: Oct 30 17:25:36 2025 GMT
            Not After : Oct 31 17:54:36 2025 GMT
        Subject: CN=0FD3F8355E0FC2C26E2660BB3E871D8A4BB760D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:33:d4:4a:f5:22:74:37:17:09:f7:55:dd:
                    72:16:4e:00:da:db:a5:a4:8c:aa:7c:b0:ee:05:57:
                    16:1a:1e:ac:0f:3c:69:42:99:e4:12:4b:1c:20:13:
                    8c:6c:d0:44:51:d9:52:be:0e:0f:d1:dc:4a:66:79:
                    58:26:bb:fe:75:0e:f9:80:34:ce:48:4a:09:96:d7:
                    df:2d:f3:65:8d:6b:a7:e4:59:32:08:a9:89:89:c3:
                    31:a7:cd:b8:e0:3d:65:6d:58:ed:68:ef:1f:0c:f6:
                    e2:d9:56:8d:0b:88:cf:9c:3c:52:f1:f7:04:29:12:
                    e6:a6:2e:24:38:14:4a:e2:2b:80:28:d4:27:ff:37:
                    82:10:85:92:3a:94:dc:23:48:35:4a:69:e0:21:66:
                    df:01:58:78:0d:5c:b8:4d:1d:1d:e5:02:55:7d:bb:
                    66:4f:a5:9a:79:c1:e5:43:aa:5e:cc:b5:15:35:6b:
                    07:a6:54:9c:17:47:93:3e:5d:76:87:35:ed:36:d9:
                    37:d7:af:7f:6d:f8:da:97:02:ef:ed:21:84:74:ee:
                    a3:74:ea:5c:37:01:3a:72:55:e2:ce:bb:44:01:24:
                    08:65:fa:01:7b:b7:e6:18:26:9c:17:e6:0c:04:64:
                    40:85:7f:7a:a5:fa:08:e7:28:71:21:f8:3c:98:21:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:F8:35:5E:0F:C2:C2:6E:26:60:BB:3E:87:1D:8A:4B:B7:60:D1
            X509v3 Authority Key Identifier:
                keyid:8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:98:a6:74:19:82:44:ef:ef:db:93:00:af:32:cb:96:c3:b0:
         4a:66:01:59:db:2e:0b:9a:49:2c:21:ec:67:c0:05:3c:8e:51:
         5c:e4:93:fe:5d:6f:6a:56:a8:67:92:94:b6:4a:3a:0b:96:77:
         d3:77:62:ea:69:67:d2:ba:15:0c:fb:8d:e5:e5:97:7a:77:d1:
         a5:ea:33:ac:93:ae:2c:bc:8a:de:f7:e6:49:bc:58:cc:a4:80:
         9e:4f:bc:6c:a4:be:cc:98:83:93:24:31:95:63:e1:e1:3c:ac:
         fa:86:66:97:41:d9:95:06:83:1b:d6:68:7c:76:1c:20:97:d9:
         2e:7b:2a:f9:ec:e5:33:2c:80:c5:e8:ca:bc:06:5d:fd:d3:57:
         ba:ef:b0:c1:c5:06:fa:8b:d5:ee:52:76:f5:bd:a4:d5:c9:2f:
         0e:6b:42:34:ca:e7:73:35:15:af:c3:17:a6:f0:06:a3:30:b9:
         12:f1:84:92:43:01:21:64:82:0a:18:19:44:da:29:8a:dc:25:
         6f:b4:7e:60:18:15:f1:10:7e:7d:c9:d8:5e:83:96:7c:5c:80:
         3a:72:95:f1:ae:9f:56:ab:56:2a:8e:bb:de:07:4a:21:a7:18:
         61:43:fe:03:f1:bc:17:97:96:a6:8a:b9:bf:50:39:4e:59:dd:
         fe:f4:ab:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFxu5+32iCkl1KrIZtAjt7QZ7CakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5MUU1MTUwMTZDNDYxN0Q0ODIxNjIxNjMwNTJFMUFC
QjRCMzVCMjAeFw0yNTEwMzAxNzI1MzZaFw0yNTEwMzExNzU0MzZaMDMxMTAvBgNV
BAMTKDBGRDNGODM1NUUwRkMyQzI2RTI2NjBCQjNFODcxRDhBNEJCNzYwRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BTPUSvUidDcXCfdV3XIWTgDa
26WkjKp8sO4FVxYaHqwPPGlCmeQSSxwgE4xs0ERR2VK+Dg/R3EpmeVgmu/51DvmA
NM5ISgmW198t82WNa6fkWTIIqYmJwzGnzbjgPWVtWO1o7x8M9uLZVo0LiM+cPFLx
9wQpEuamLiQ4FEriK4Ao1Cf/N4IQhZI6lNwjSDVKaeAhZt8BWHgNXLhNHR3lAlV9
u2ZPpZp5weVDql7MtRU1awemVJwXR5M+XXaHNe022TfXr39t+NqXAu/tIYR07qN0
6lw3ATpyVeLOu0QBJAhl+gF7t+YYJpwX5gwEZECFf3ql+gjnKHEh+DyYIYBhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUD9P4NV4PwsJuJmC7Pocdiku3YNEwHwYDVR0j
BBgwFoAUj5HlFQFsRhfUghYhYwUuGrtLNbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERRNnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1
dVMvMC84RjkxRTUxNTAxNkM0NjE3RDQ4MjE2MjE2MzA1MkUxQUJCNEIzNUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGOTFFNTE1MDE2QzQ2MTdE
NDgyMTYyMTYzMDUyRTFBQkI0QjM1QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SERRNnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1dVMvMC84
RjkxRTUxNTAxNkM0NjE3RDQ4MjE2MjE2MzA1MkUxQUJCNEIzNUIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaZimdBmCRO/v25MArzLLlsOwSmYBWdsuC5pJLCHsZ8AFPI5RXOST/l1valao
Z5KUtko6C5Z303di6mln0roVDPuN5eWXenfRpeozrJOuLLyK3vfmSbxYzKSAnk+8
bKS+zJiDkyQxlWPh4Tys+oZml0HZlQaDG9ZofHYcIJfZLnsq+ezlMyyAxejKvAZd
/dNXuu+wwcUG+ovV7lJ29b2k1ckvDmtCNMrnczUVr8MXpvAGozC5EvGEkkMBIWSC
ChgZRNopitwlb7R+YBgV8RB+fcnYXoOWfFyAOnKV8a6fVqtWKo673gdKIacYYUP+
A/G8F5eWpoq5v1A5Tlnd/vSrMA==
-----END CERTIFICATE-----