Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.mft
File:                     2550ED64AF65D73E0365088A76683FC98DC1F509.mft (raw, json)
Hash identifier:          t6DN23uNBmczZuOOY/0NW6PRbQnlUBoD0xCWotEDuNM=
Subject key identifier:   9F:5E:0C:4D:D2:39:36:B3:13:20:09:7D:45:CA:F5:99:EA:8A:E2:5F
Authority key identifier: 25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09
Certificate issuer:       /CN=2550ED64AF65D73E0365088A76683FC98DC1F509
Certificate serial:       1AB3FBAEFD8BD4DF6A5355C69D045EF8B4289430
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.mft
Manifest number:          014D
Signing time:             Tue 04 Nov 2025 02:27:54 +0000
Manifest this update:     Tue 04 Nov 2025 02:22:54 +0000
Manifest next update:     Wed 05 Nov 2025 04:02:54 +0000
Files and hashes:         1: 3230302e362e34392e302f32342d3234203d3e20323730363831.roa (hash: +p8i7J3VPTh1IJ4Tq4DUGMOhEjJzo+ng5zT2g/hYRbE=)
                          2: 323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa (hash: UvZHHoy7GmKZaGoSObQnIu6kMzj0Y53pZvXJbblm+9w=)
                          3: 2550ED64AF65D73E0365088A76683FC98DC1F509.crl (hash: GnSs8gWWZR7nH4//3feSzryqc6nd8G2hBI3FzYyhWBs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b3:fb:ae:fd:8b:d4:df:6a:53:55:c6:9d:04:5e:f8:b4:28:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2550ED64AF65D73E0365088A76683FC98DC1F509
        Validity
            Not Before: Nov  4 02:22:54 2025 GMT
            Not After : Nov  5 04:02:54 2025 GMT
        Subject: CN=9F5E0C4DD23936B31320097D45CAF599EA8AE25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:f6:7a:a3:58:d4:ad:2d:dc:40:ea:46:1e:
                    d5:31:f5:61:30:af:18:99:d1:c1:4c:f2:1c:8f:2a:
                    62:d5:b9:ed:fc:3f:23:cc:bc:2e:4e:da:63:f8:64:
                    4d:6e:98:97:8e:12:2f:6b:29:68:b2:00:f7:3f:93:
                    b9:96:01:0d:a9:6a:e2:3b:d8:6b:b2:49:cf:68:48:
                    8a:ea:4e:d7:85:1b:d9:76:4e:47:ae:22:ce:a8:f9:
                    e9:39:4a:b5:0e:c8:bf:67:ba:ae:57:55:01:d3:c9:
                    ce:07:e9:29:64:87:d4:54:67:0a:d5:6e:1e:80:82:
                    27:08:01:3b:65:b1:85:e1:a2:70:11:55:5c:48:21:
                    3f:a6:c3:9c:89:e1:b6:d2:72:3c:07:a5:05:2f:b1:
                    19:9c:b7:7c:b6:5d:8b:0f:08:00:8a:da:2d:3c:f2:
                    b5:b9:9b:01:ca:9c:7f:06:42:05:0f:69:55:5a:e9:
                    0a:19:1c:83:7d:da:44:10:a7:f5:2a:ea:d1:2a:23:
                    7f:59:3c:2b:d9:a5:ae:c4:c1:89:7f:ad:6b:cc:19:
                    a2:a5:15:30:7d:bb:5c:12:45:e5:1c:cf:69:c6:6b:
                    5b:fa:97:02:6a:a1:74:af:f6:8d:aa:2e:68:86:69:
                    f5:71:07:c7:55:f4:74:dd:fb:1d:e8:31:61:b1:da:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:0C:4D:D2:39:36:B3:13:20:09:7D:45:CA:F5:99:EA:8A:E2:5F
            X509v3 Authority Key Identifier:
                keyid:25:50:ED:64:AF:65:D7:3E:03:65:08:8A:76:68:3F:C9:8D:C1:F5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2550ED64AF65D73E0365088A76683FC98DC1F509.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/2550ED64AF65D73E0365088A76683FC98DC1F509.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:c5:36:0f:e2:81:28:af:d7:a6:ca:60:6c:d2:18:32:fb:
         23:b4:9f:95:4e:43:68:41:70:08:61:f5:c9:3e:20:0a:04:b8:
         f3:a8:d1:bb:d7:59:73:cd:1d:cf:73:da:b7:6b:3a:e0:d1:69:
         03:d3:27:1e:c6:18:66:dc:13:4a:ba:16:29:34:10:e1:d5:86:
         c7:6e:fa:8b:e4:d4:d7:56:b7:81:df:fa:09:a0:78:00:8b:d2:
         74:a6:99:d6:d1:e0:3f:ee:ad:ca:ed:41:96:54:d6:a6:5c:3b:
         83:e5:a2:da:1f:d1:7c:8f:94:3a:81:9e:1f:46:1f:4a:ff:e2:
         20:e1:c5:66:a3:2d:42:c5:7d:35:c5:7a:b2:34:7a:6a:5e:25:
         9f:27:c4:96:a8:a4:c0:dc:ff:bf:c2:4c:47:9f:49:32:c7:87:
         e0:12:67:1f:c6:b0:81:1c:56:94:48:34:a5:aa:99:73:58:da:
         b5:dd:56:b6:5d:0f:d0:4c:b4:24:d3:e4:96:6d:a6:37:30:85:
         73:6e:87:44:b7:73:f5:0d:bb:2d:87:13:fd:ad:6f:1c:99:92:
         6b:9f:8f:56:ac:1f:db:ef:0d:9e:30:9c:be:dc:77:06:95:be:
         df:03:78:2a:c2:f3:61:4f:55:1e:5d:f4:50:e5:40:f5:94:8d:
         ce:eb:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:29:05 2025 by rpki-client