Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.mft
File:                     A35142C9CC2E829537680E680EFBF8C64BFBDF74.mft (raw, json)
Hash identifier:          nDYEL3zufrKj/NfO7wlcQix9+zfG2JfIyiCmZqu9WyM=
Subject key identifier:   49:58:AD:DC:C6:83:61:B8:35:2E:C0:48:B2:FD:81:88:C3:3F:23:95
Authority key identifier: A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74
Certificate issuer:       /CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
Certificate serial:       6F9BCBD828AEFE474EE8B22981FF5FEA92BCA4C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.mft
Manifest number:          03
Signing time:             Fri 27 Feb 2026 14:32:08 +0000
Manifest this update:     Fri 27 Feb 2026 14:27:08 +0000
Manifest next update:     Sat 28 Feb 2026 15:31:08 +0000
Files and hashes:         1: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (hash: Nw++EEXKgE1lxIwFJGKG+kk8EAg3u5dzM127xWF9880=)
                          2: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (hash: 52UN5fGDT4gW/FGEu6MRGg6JNc6QtTZnx3GjSNQo3+s=)
                          3: A35142C9CC2E829537680E680EFBF8C64BFBDF74.crl (hash: wX0zp9vJTZFEN3f0JG/UwoAqgxacW918+V4CCdagwZ4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:cb:d8:28:ae:fe:47:4e:e8:b2:29:81:ff:5f:ea:92:bc:a4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
        Validity
            Not Before: Feb 27 14:27:08 2026 GMT
            Not After : Feb 28 15:31:08 2026 GMT
        Subject: CN=4958ADDCC68361B8352EC048B2FD8188C33F2395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:cc:6a:20:69:2f:a3:a7:f1:ca:3d:a5:ed:
                    bd:cc:ee:44:b8:20:d0:ae:9a:ad:7c:26:19:ee:87:
                    4c:16:db:a9:20:3d:26:7e:cb:a1:d9:c3:2e:00:e7:
                    59:43:25:fe:66:54:d7:29:bd:ea:b6:8f:16:ee:e5:
                    37:33:de:50:8f:53:83:9c:f3:41:2d:44:20:04:b1:
                    2e:f7:43:9b:dd:71:a9:f3:9c:74:0f:d3:75:90:bf:
                    1e:ce:98:ea:09:aa:d0:19:26:44:f3:7f:4f:f3:6e:
                    f8:02:fe:c7:7f:af:a7:f5:43:17:2a:09:88:8f:47:
                    6a:e8:0a:f5:de:b7:17:65:c5:a8:9c:78:a6:93:51:
                    20:5f:09:73:09:a0:5d:05:5c:7f:36:95:c3:45:a8:
                    76:d2:9f:3f:47:55:dc:b3:f3:82:0a:28:3c:ef:6a:
                    67:67:9a:e1:46:bb:da:ea:3c:db:fb:a5:53:10:c6:
                    d4:46:a2:35:d1:af:56:61:cd:28:1b:2d:e6:27:c1:
                    0a:b8:73:87:96:2c:cb:12:8a:f1:70:d3:59:5a:04:
                    19:4c:b1:0b:6b:b4:39:2e:df:cd:6e:14:38:20:60:
                    fb:d7:ca:ff:eb:c3:6f:0b:13:15:8e:c3:2f:92:b0:
                    5e:4f:31:b8:3b:3d:2a:35:23:d4:ac:81:94:15:6f:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:AD:DC:C6:83:61:B8:35:2E:C0:48:B2:FD:81:88:C3:3F:23:95
            X509v3 Authority Key Identifier:
                keyid:A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:09:b2:52:d6:49:55:ac:c4:0c:d8:bb:af:89:d5:b4:60:
         f1:1b:f2:c3:8a:e8:54:82:4b:55:0e:86:87:a0:27:75:9e:21:
         27:04:e0:66:f7:32:cb:83:6b:8b:9a:3e:32:da:62:1e:f0:ec:
         33:0d:7e:0c:c1:87:0c:85:ff:6b:05:d4:b3:aa:6c:66:df:1b:
         53:9a:0e:43:e2:2f:fa:1f:9f:58:21:7a:de:20:2b:ef:5a:f6:
         52:e9:82:7f:df:62:71:56:6d:78:8b:e3:81:14:f0:a1:ab:f5:
         99:66:6a:40:ba:a3:1f:96:49:25:f8:cb:f2:bd:81:05:9c:ff:
         9e:1f:5a:93:72:54:51:c8:a4:59:81:23:9d:65:48:f3:bb:44:
         d1:21:9e:c4:01:d6:7f:05:51:89:40:e8:e4:e6:aa:36:df:51:
         1e:2b:da:98:ca:4c:20:11:e5:eb:19:23:1a:f5:4f:2d:c2:f9:
         d6:e9:06:5c:94:f4:eb:b0:04:73:ac:4d:ed:84:66:d3:1a:d0:
         33:d2:f0:e1:d1:78:2f:a6:59:64:e4:10:1a:76:5c:3b:c7:51:
         0d:87:51:68:05:88:9b:d9:51:4d:99:c2:ad:a1:2d:58:7b:06:
         e0:e0:d5:ef:0a:74:fa:d7:2c:ac:c8:e6:c6:1a:fc:6b:b9:5f:
         dd:48:da:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb5vL2Ciu/kdO6LIpgf9f6pK8pMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1MTQyQzlDQzJFODI5NTM3NjgwRTY4MEVGQkY4QzY0
QkZCREY3NDAeFw0yNjAyMjcxNDI3MDhaFw0yNjAyMjgxNTMxMDhaMDMxMTAvBgNV
BAMTKDQ5NThBRERDQzY4MzYxQjgzNTJFQzA0OEIyRkQ4MTg4QzMzRjIzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYXMxqIGkvo6fxyj2l7b3M7kS4
INCumq18Jhnuh0wW26kgPSZ+y6HZwy4A51lDJf5mVNcpveq2jxbu5Tcz3lCPU4Oc
80EtRCAEsS73Q5vdcanznHQP03WQvx7OmOoJqtAZJkTzf0/zbvgC/sd/r6f1Qxcq
CYiPR2roCvXetxdlxaiceKaTUSBfCXMJoF0FXH82lcNFqHbSnz9HVdyz84IKKDzv
amdnmuFGu9rqPNv7pVMQxtRGojXRr1ZhzSgbLeYnwQq4c4eWLMsSivFw01laBBlM
sQtrtDku381uFDggYPvXyv/rw28LExWOwy+SsF5PMbg7PSo1I9SsgZQVb/YTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSVit3MaDYbg1LsBIsv2BiMM/I5UwHwYDVR0j
BBgwFoAUo1FCycwugpU3aA5oDvv4xkv733QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI
VEMvMC9BMzUxNDJDOUNDMkU4Mjk1Mzc2ODBFNjgwRUZCRjhDNjRCRkJERjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNTE0MkM5Q0MyRTgyOTUz
NzY4MEU2ODBFRkJGOEM2NEJGQkRGNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC9B
MzUxNDJDOUNDMkU4Mjk1Mzc2ODBFNjgwRUZCRjhDNjRCRkJERjc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF28JslLWSVWsxAzYu6+J1bRg8Rvyw4roVIJLVQ6Gh6AndZ4hJwTgZvcyy4Nr
i5o+MtpiHvDsMw1+DMGHDIX/awXUs6psZt8bU5oOQ+Iv+h+fWCF63iAr71r2UumC
f99icVZteIvjgRTwoav1mWZqQLqjH5ZJJfjL8r2BBZz/nh9ak3JUUcikWYEjnWVI
87tE0SGexAHWfwVRiUDo5OaqNt9RHivamMpMIBHl6xkjGvVPLcL51ukGXJT067AE
c6xN7YRm0xrQM9Lw4dF4L6ZZZOQQGnZcO8dRDYdRaAWIm9lRTZnCraEtWHsG4ODV
7wp0+tcsrMjmxhr8a7lf3UjakA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:55 2026 by rpki-client