Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.mft
File:                     7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.mft (raw, json)
Hash identifier:          5lQXjkYivH+RKTyVvRlrN9tOGGWcIK/YlqTZA7rmMbk=
Subject key identifier:   D5:27:E7:70:02:F1:1D:9B:13:5C:CF:AE:6D:8B:EB:35:F0:BA:FB:ED
Authority key identifier: 7C:AC:37:E6:C6:FC:F7:5A:76:DF:74:19:7F:7A:73:55:E0:CF:B0:CC
Certificate issuer:       /CN=7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC
Certificate serial:       1D81FDE27D4674E1707339EF3103D483C8B4EAC7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.mft
Manifest number:          31
Signing time:             Mon 13 Apr 2026 08:21:00 +0000
Manifest this update:     Mon 13 Apr 2026 08:16:00 +0000
Manifest next update:     Tue 14 Apr 2026 10:47:00 +0000
Files and hashes:         1: 7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.crl (hash: AZJVQ1gQJirupJQ1WW9gwEw/2tWbn3nLgfFt6rlT+3w=)
                          2: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (hash: rxYU0dXOZXpCb5Vr0TK6+uEjA2LCrCr5eErz98DG8k8=)
                          3: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (hash: xS4F0eS2C4/VxjsLEn53JECJIhj1kjrsztDbsMXdoIs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:81:fd:e2:7d:46:74:e1:70:73:39:ef:31:03:d4:83:c8:b4:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC
        Validity
            Not Before: Apr 13 08:16:00 2026 GMT
            Not After : Apr 14 10:47:00 2026 GMT
        Subject: CN=D527E77002F11D9B135CCFAE6D8BEB35F0BAFBED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:15:a7:0d:40:8d:ee:58:b6:e7:66:29:b9:
                    27:7d:8f:2b:c6:9b:c9:b7:63:d3:8b:43:ef:51:11:
                    33:99:03:64:ec:b5:17:7f:10:ed:a8:c1:70:9a:63:
                    f0:40:0b:30:ae:2c:09:ee:8c:83:10:50:a5:7e:36:
                    15:db:1f:37:bb:c8:44:79:73:5a:3c:29:b3:3d:50:
                    c5:03:84:2b:fa:74:74:1c:93:e1:11:89:8a:f1:70:
                    64:d4:77:5d:ca:5b:e3:40:ab:75:9b:be:6f:16:07:
                    47:aa:47:77:72:2a:8b:31:43:7c:17:4b:e9:58:7b:
                    33:32:3d:a8:42:d0:15:f8:de:7e:d5:27:4d:0c:87:
                    86:1a:cb:93:4c:04:93:ff:52:97:b5:8c:8f:0c:a8:
                    52:18:3a:cf:4f:93:24:6d:eb:2e:8f:d6:2a:75:a0:
                    c2:15:f6:64:cf:9c:3c:7d:99:8c:ad:df:2b:7c:ed:
                    b8:b9:7b:4d:65:5d:aa:db:0c:ba:53:9f:f2:5a:8e:
                    f9:51:93:6f:47:f3:85:8f:4b:76:81:e1:2f:63:c5:
                    bc:58:f8:59:d9:43:61:63:de:88:cb:7d:9b:4e:82:
                    c9:1c:ec:f4:9d:41:1b:82:f4:4c:14:f3:2d:87:b7:
                    ac:98:8c:9f:da:ea:c7:1d:2d:3a:af:92:da:d2:ce:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:E7:70:02:F1:1D:9B:13:5C:CF:AE:6D:8B:EB:35:F0:BA:FB:ED
            X509v3 Authority Key Identifier:
                keyid:7C:AC:37:E6:C6:FC:F7:5A:76:DF:74:19:7F:7A:73:55:E0:CF:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/7CAC37E6C6FCF75A76DF74197F7A7355E0CFB0CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e0:ee:c4:3f:c5:b0:f3:55:c8:00:17:45:34:f0:70:5f:39:
         6f:cb:88:ed:d8:6e:b5:b4:b1:fb:1b:bf:d3:26:25:73:20:05:
         dd:40:2b:a2:5c:a8:6a:f0:93:f2:65:d1:a7:a8:29:96:9b:51:
         73:0b:1a:60:d4:d7:e0:df:be:b6:dc:d4:35:0c:f7:a0:6f:46:
         9e:93:92:39:be:de:36:f8:7f:42:34:7c:d3:c2:4e:10:81:e0:
         bf:f3:27:67:30:ed:cc:45:65:11:d0:69:91:1b:05:f6:42:2c:
         1a:b7:96:72:ec:7e:ad:84:b4:6e:4c:c8:da:85:94:f5:c7:69:
         37:51:af:df:5b:d0:20:08:9c:c7:8a:3e:37:ad:51:45:88:34:
         fa:f7:c0:0c:89:4f:bd:c1:7e:94:86:36:06:4b:eb:80:55:69:
         33:21:69:32:ff:28:74:19:0d:88:49:fa:56:ac:70:3e:64:c5:
         a4:d0:28:14:53:ac:ff:c8:c4:da:4a:dd:ba:09:94:6c:1d:c5:
         8d:85:98:20:b0:a4:46:4c:2d:80:04:37:0c:e5:a6:37:de:c6:
         ab:b8:3b:ac:96:f0:5a:97:98:2d:3b:cd:71:1a:49:45:c5:be:
         04:42:8b:a5:a2:a4:c2:53:b2:24:c1:51:76:0f:ef:05:32:a6:
         98:7e:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----