Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
File:                     45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft (raw, json)
Hash identifier:          xFqKyIyLsT7+P+MSskGvmQjawxqG9pOx/ZOYtlNb6gk=
Subject key identifier:   C6:A3:8A:39:B3:82:CB:07:02:32:E6:AC:0C:99:C1:03:B2:2E:66:88
Authority key identifier: 45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
Certificate issuer:       /CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
Certificate serial:       1917FB46FB4D2E921CD047B5FA2953C34DB7BF68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
Manifest number:          047A
Signing time:             Tue 13 Oct 2026 01:48:48 +0000
Manifest this update:     Tue 13 Oct 2026 01:43:48 +0000
Manifest next update:     Wed 14 Oct 2026 04:56:48 +0000
Files and hashes:         1: 34352e3138362e36302e302f32322d3332203d3e20323639343133.roa (hash: 4N81+pyBeguVdcxVWYUy+X3mIrh2InPgPS1M0M7al/Q=)
                          2: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl (hash: rxk1pdNKohoVTlonEIz7LhOjJtRthN/gibxkeEdXznM=)
                          3: 323830343a363433343a3a2f33322d313238203d3e20323639343133.roa (hash: eZUkQrbWvCrIW/C4S94aPHLAF2X4Ny0nukfOKRfy0nE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:17:fb:46:fb:4d:2e:92:1c:d0:47:b5:fa:29:53:c3:4d:b7:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
        Validity
            Not Before: Oct 13 01:43:48 2026 GMT
            Not After : Oct 14 04:56:48 2026 GMT
        Subject: CN=C6A38A39B382CB070232E6AC0C99C103B22E6688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:12:ee:42:f7:20:21:07:22:1d:f6:18:c9:
                    91:a5:fb:ba:7b:16:36:f4:8d:9a:ef:5e:58:94:f9:
                    fb:95:a7:3d:ec:5b:a0:99:f7:b4:c3:2c:cd:80:33:
                    41:13:42:24:a4:b3:27:b1:b9:24:43:1c:22:15:e5:
                    82:cd:cc:63:9b:af:c6:bd:c0:23:75:e5:21:ef:83:
                    5c:7a:a0:d3:01:96:7c:17:7e:a9:11:c3:93:4d:43:
                    a3:79:ad:be:55:0b:c1:cd:c5:b3:72:9c:18:d1:f8:
                    4d:2c:7b:ba:9c:ce:12:ab:12:7a:88:c3:26:a4:4f:
                    6c:57:b3:aa:f5:c9:f9:9a:25:95:3e:7f:1c:85:5f:
                    ec:5d:27:ec:ea:e8:4f:5e:1e:38:ca:ea:e7:12:9a:
                    91:17:64:32:43:7f:d3:92:45:4f:b6:a1:10:b6:02:
                    2b:e4:2c:3f:83:28:2f:7a:c0:ca:12:5b:8d:89:d1:
                    c0:d7:b2:53:b7:da:cd:6c:ed:d5:ff:7d:7a:e1:45:
                    ef:c2:48:ce:c6:2f:85:2c:63:df:59:4b:52:93:f4:
                    7f:bb:73:ad:c6:df:37:6b:4e:33:80:cb:22:22:7e:
                    8c:39:67:c6:5b:2b:9a:b6:4c:f3:3d:6a:20:a1:33:
                    55:c3:01:b6:15:50:4d:92:99:ce:98:0b:dd:93:bc:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:8A:39:B3:82:CB:07:02:32:E6:AC:0C:99:C1:03:B2:2E:66:88
            X509v3 Authority Key Identifier:
                keyid:45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:69:3b:f0:c3:f4:79:94:d2:83:4c:9a:d4:62:5d:e6:d6:05:
         55:b3:da:41:53:3f:33:65:16:c3:18:da:21:69:94:c1:96:e3:
         bd:5e:52:6a:b4:32:80:ed:c1:ae:70:f0:53:a9:35:72:6e:24:
         dd:f5:00:91:31:61:40:42:df:5c:51:b5:6e:9e:0f:45:e8:80:
         1d:31:f2:6a:33:60:68:06:b1:77:27:46:46:78:d4:57:15:c8:
         18:59:ad:17:e0:35:9c:63:a8:29:f3:65:be:e6:ba:12:f6:4f:
         4a:93:e7:44:73:37:01:7d:eb:79:0d:7e:29:31:34:4a:14:01:
         b0:94:2d:2e:34:4d:61:b8:b7:a2:47:25:86:a8:c4:b2:3a:65:
         30:90:61:3d:92:e0:7e:52:f8:42:15:8e:a8:0d:e7:d9:05:5f:
         fa:4c:d9:53:5d:e8:43:c4:6b:fe:fd:d7:36:f8:41:93:93:56:
         6d:d9:44:8c:1d:0c:8e:81:a1:c7:00:00:8c:20:d6:88:a5:d9:
         e6:53:bc:ab:09:cf:db:b2:81:3f:f4:3b:93:9a:34:6e:76:61:
         ec:58:46:8c:30:ce:5f:3b:97:fd:4a:f7:f8:32:30:66:d6:4c:
         60:c8:e1:31:14:f6:03:7d:95:40:fc:41:74:aa:56:b9:93:33:
         82:d1:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----