Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/7899FC23F746B152BD613A586389B2297EF6746A.mft
File:                     7899FC23F746B152BD613A586389B2297EF6746A.mft (raw, json)
Hash identifier:          EGFJioCDoWVuWrs12rMKP+iFwmFmGviU8pug8M4IB2Q=
Subject key identifier:   20:FA:47:A4:9B:43:45:54:EA:59:62:4D:CE:74:55:91:2F:5A:97:40
Authority key identifier: 78:99:FC:23:F7:46:B1:52:BD:61:3A:58:63:89:B2:29:7E:F6:74:6A
Certificate issuer:       /CN=7899FC23F746B152BD613A586389B2297EF6746A
Certificate serial:       64CF1624633DEB2D63756D55CC4A1908771C0774
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7899FC23F746B152BD613A586389B2297EF6746A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/7899FC23F746B152BD613A586389B2297EF6746A.mft
Manifest number:          0B
Signing time:             Mon 26 Oct 2026 08:33:11 +0000
Manifest this update:     Mon 26 Oct 2026 08:28:11 +0000
Manifest next update:     Tue 27 Oct 2026 08:36:11 +0000
Files and hashes:         1: 34352e352e342e302f32322d3332203d3e20323636313332.roa (hash: ywi+qTpxVvUnmYGbvNCZpJkWFv886ac+mMTvHRYf0qY=)
                          2: 7899FC23F746B152BD613A586389B2297EF6746A.crl (hash: lqjDJby6K6cdV+k2NsViNuNlSUHX+oKwnWRsx1f/1yE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cf:16:24:63:3d:eb:2d:63:75:6d:55:cc:4a:19:08:77:1c:07:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7899FC23F746B152BD613A586389B2297EF6746A
        Validity
            Not Before: Oct 26 08:28:11 2026 GMT
            Not After : Oct 27 08:36:11 2026 GMT
        Subject: CN=20FA47A49B434554EA59624DCE7455912F5A9740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:2b:50:35:0c:87:62:84:07:33:ce:df:80:
                    5b:10:5c:67:b6:35:6d:57:9e:cb:c2:4e:e9:c0:b5:
                    90:80:3d:f8:0d:d5:45:e7:95:d3:ed:03:18:01:78:
                    17:65:16:0a:73:33:4b:bb:93:cd:26:fc:ee:09:84:
                    89:3f:19:cb:a1:99:f4:15:71:7c:1c:9d:49:4c:50:
                    6a:9c:50:6c:cc:34:c4:0d:ed:c8:ea:89:bb:f6:a5:
                    24:ec:0d:ee:b5:eb:33:7e:d8:04:e7:8b:f5:d5:5a:
                    f8:8c:5d:76:c2:de:fe:de:13:8e:5f:14:9c:a5:25:
                    3c:f1:ea:b4:b3:1c:d9:9d:f0:80:b4:ed:a2:ac:9a:
                    7b:45:5e:a3:5a:36:78:69:49:ef:57:fb:d7:f7:2b:
                    ea:6f:4f:b0:b7:32:4b:9c:eb:62:5e:8f:b7:26:11:
                    e7:58:d9:96:e2:c5:58:1f:cb:c2:c1:fa:5d:70:76:
                    27:42:9e:54:03:67:7d:b3:8b:a1:9c:62:82:98:0e:
                    75:01:40:f8:11:37:55:ab:f9:42:d9:14:6b:58:e9:
                    e6:02:2b:11:9c:d0:da:f9:28:2e:de:95:e1:30:66:
                    a8:2b:1d:54:d3:58:77:c3:dd:0d:02:f8:71:4c:85:
                    9f:5d:7b:8b:79:71:98:d1:5c:43:85:54:70:e3:c8:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:47:A4:9B:43:45:54:EA:59:62:4D:CE:74:55:91:2F:5A:97:40
            X509v3 Authority Key Identifier:
                keyid:78:99:FC:23:F7:46:B1:52:BD:61:3A:58:63:89:B2:29:7E:F6:74:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/7899FC23F746B152BD613A586389B2297EF6746A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7899FC23F746B152BD613A586389B2297EF6746A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/7899FC23F746B152BD613A586389B2297EF6746A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:be:fe:dc:bd:7d:69:e4:16:69:7a:46:86:ab:c0:e2:17:
         90:a6:44:66:1a:7e:56:ff:e1:ad:19:be:18:7d:a2:1b:4b:c9:
         83:25:ab:fb:d6:01:42:c6:cf:5f:78:55:9a:51:70:01:f0:18:
         4f:91:d4:49:58:79:cb:fc:60:eb:e0:20:87:22:57:6f:bf:ae:
         6c:6d:2b:0f:c2:56:e4:ed:a4:2d:43:da:4f:55:c2:8c:02:4d:
         51:31:b0:a0:d6:0c:b3:a7:26:e9:07:30:e8:cc:05:7e:ad:d7:
         9c:a1:be:ef:04:23:99:8b:4d:5b:16:19:28:3c:10:ec:dc:cd:
         17:b1:ee:6b:ca:84:67:5f:cb:1f:10:c3:c8:38:c8:2f:0d:8d:
         0a:e3:61:96:35:32:4e:05:ba:78:ac:16:c1:80:c3:c8:37:4a:
         76:9f:d5:be:42:9a:17:96:88:33:83:1b:77:c1:10:b5:1d:82:
         31:9f:14:e0:9f:94:a0:5e:7c:e9:74:1d:9f:9b:59:4b:a7:ae:
         f2:58:3b:7f:a0:5a:b0:ba:93:7b:1e:10:73:85:23:2c:c0:39:
         5b:ba:3d:ca:34:5f:f3:3d:55:79:6c:e4:d0:26:dc:e2:89:8b:
         26:1e:a0:11:0e:ff:83:88:7c:85:5f:19:6a:0c:f1:98:cb:c4:
         b9:63:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----