Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft
File:                     350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft (raw, json)
Hash identifier:          4ejIQdqmaL7HqJR7zmQ3QOH3+g56nxhPRBxHYHKpPms=
Subject key identifier:   65:C0:93:DA:EE:D0:BA:E4:CD:E9:8E:C9:AB:3D:95:10:AA:3A:78:C6
Authority key identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B
Certificate issuer:       /CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
Certificate serial:       7E8A535C28B90443ACAB0170A96C112CA7A6990C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft
Manifest number:          0378
Signing time:             Tue 14 Apr 2026 04:46:09 +0000
Manifest this update:     Tue 14 Apr 2026 04:41:09 +0000
Manifest next update:     Wed 15 Apr 2026 06:35:09 +0000
Files and hashes:         1: 34352e3136342e35322e302f32322d3234203d3e20323638353938.roa (hash: foJW3uzSTiOv34vrt1oG6PF25bMwZfuuGyR4ttOzhXw=)
                          2: 323830343a353361383a3a2f33322d3334203d3e20323638353938.roa (hash: iWR3QqKSLX4f3e7AdASevxGvWwC14Mv07eAAYGcMOXY=)
                          3: 350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl (hash: 9Ru0Q05o4IgWAALRIkRgkQtOQgzb4vyQF68EkFzkbLc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8a:53:5c:28:b9:04:43:ac:ab:01:70:a9:6c:11:2c:a7:a6:99:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
        Validity
            Not Before: Apr 14 04:41:09 2026 GMT
            Not After : Apr 15 06:35:09 2026 GMT
        Subject: CN=65C093DAEED0BAE4CDE98EC9AB3D9510AA3A78C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:b6:3d:d5:e6:de:1e:bb:c9:f6:7e:77:1f:
                    f1:f4:75:1a:0b:8c:3a:35:91:a9:05:b1:44:30:0a:
                    a6:59:ad:3a:e1:b6:66:53:53:0e:4c:4c:ba:d9:17:
                    c5:b5:4f:14:d3:a1:14:63:1f:52:63:ff:f6:7a:8f:
                    84:ed:97:b1:e7:ff:fe:80:0a:93:f5:fb:31:8c:a8:
                    f6:aa:68:5a:2b:d1:b5:ca:1e:69:6f:c2:4a:5f:ce:
                    81:03:56:1d:b0:8d:9e:92:47:3c:0e:74:a6:b3:57:
                    88:26:9a:5f:9b:53:69:42:33:bd:3c:3a:b9:0e:1e:
                    02:64:53:d2:94:84:c0:99:ae:17:6d:ba:cf:cd:29:
                    42:4f:14:a9:73:8f:c4:b0:63:d8:cb:a9:31:55:ba:
                    69:50:6f:96:39:db:41:6e:e8:6a:1c:97:cb:55:3b:
                    f4:87:6c:1f:57:d8:79:54:16:1b:06:87:79:3d:7c:
                    1a:9b:63:c0:00:f3:f3:53:95:22:cd:17:d7:69:a6:
                    d5:95:c7:8e:18:81:6a:3c:42:b3:a1:f5:60:f9:13:
                    79:f2:ea:6e:a6:0e:4c:aa:42:20:0a:e8:28:fb:6e:
                    d4:fa:ca:f2:11:40:d0:21:34:bd:4a:2c:a7:5f:5a:
                    37:87:b8:3d:fd:c7:22:a2:38:a4:bf:5a:ef:2e:36:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:93:DA:EE:D0:BA:E4:CD:E9:8E:C9:AB:3D:95:10:AA:3A:78:C6
            X509v3 Authority Key Identifier:
                keyid:35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:ec:69:48:2e:56:45:95:65:d8:2b:3d:0f:fa:8d:55:0d:
         76:25:13:c7:76:5a:8e:38:17:cd:46:ed:07:74:db:a6:57:b8:
         6d:c2:77:a0:7d:3f:e9:cf:05:07:94:4e:e1:39:f3:9d:40:6b:
         b9:86:55:a7:fc:0d:62:8c:6a:cd:89:f7:41:5b:85:6f:89:b3:
         58:6c:e1:bd:5f:74:84:00:40:55:fc:da:a9:f0:37:3e:fe:0e:
         4b:ac:5c:00:30:98:ac:12:5a:84:26:c6:4d:6d:ff:d0:73:39:
         40:aa:75:f9:19:fa:a9:4c:e1:16:5f:33:83:35:99:ed:d9:55:
         dd:b9:30:35:d0:c0:70:ce:24:d2:ec:d5:3a:0e:10:11:a0:be:
         f9:57:69:e5:76:d8:fd:4f:d4:77:78:78:53:8f:13:36:68:d2:
         0a:02:a8:11:e3:63:a9:a9:fd:c7:18:a1:96:f5:1f:3f:b0:bb:
         97:48:e7:cb:6d:ec:5d:81:c5:13:ea:6a:ca:eb:79:2c:6a:0d:
         bd:32:81:c3:49:41:bc:f2:30:22:10:e9:8c:6f:b9:b6:a7:6b:
         de:5b:e1:77:fc:e9:ce:99:a2:c3:6a:14:b2:b0:b8:95:59:8b:
         14:97:ea:19:eb:6c:d5:2a:8a:92:09:9d:7d:55:02:f0:d3:4f:
         0e:fe:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----