Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft
File:                     63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft (raw, json)
Hash identifier:          54Ejz7EggzQDKroaea8FBLuR/NeOm3xdMWwHdce14G8=
Subject key identifier:   22:06:49:39:3F:43:BD:F9:8B:FE:DB:B3:C6:05:A4:34:DA:A6:E8:5C
Authority key identifier: 63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6
Certificate issuer:       /CN=63D4C65E48A39E7890002AD13B94416CFD8B9DC6
Certificate serial:       0EAEEFE27A31210A5F440ACCCD68CD3AF3816844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft
Manifest number:          4C
Signing time:             Fri 27 Feb 2026 17:06:22 +0000
Manifest this update:     Fri 27 Feb 2026 17:01:22 +0000
Manifest next update:     Sat 28 Feb 2026 19:53:22 +0000
Files and hashes:         1: 323830343a3837383a3a2f33322d3434203d3e20323632333734.roa (hash: xAQQ+ie4RFRjlCo0mxXKoDr+bhx/CaXOh7XiZsk9UFU=)
                          2: 63D4C65E48A39E7890002AD13B94416CFD8B9DC6.crl (hash: z3SUt88hrkIWYnHtr15T1e/nzDypD8lJG32APN9etiY=)
                          3: 3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (hash: 1wTHFJ2acELOxpsvxpNVXJaikY8U+QKnIWDSw6EttaE=)
                          4: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (hash: F20beycsAjwGyiyeyOfTKIaTYBgZEijN1nf49xHfXbI=)
                          5: 3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (hash: SRek/fb0z2yOM8rnuHUcFc4wOjd7tr2iGzSSDi/d5Fs=)
                          6: 3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (hash: 8GCrs5QHGJKPvaBlp4mkHmggY9jA2ympEr3rBKOyyQc=)
                          7: 3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (hash: +yWdKaoJUpgVwjRL2mhOURL4K/xyyoZgsE83jjFHcI0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ae:ef:e2:7a:31:21:0a:5f:44:0a:cc:cd:68:cd:3a:f3:81:68:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D4C65E48A39E7890002AD13B94416CFD8B9DC6
        Validity
            Not Before: Feb 27 17:01:22 2026 GMT
            Not After : Feb 28 19:53:22 2026 GMT
        Subject: CN=220649393F43BDF98BFEDBB3C605A434DAA6E85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:ae:d8:91:1f:17:b8:60:cf:55:c6:ee:d3:
                    16:4f:ab:3b:12:24:18:06:11:c0:be:83:0f:db:fe:
                    29:19:85:12:35:a6:05:5e:61:fd:9d:f2:a1:da:e0:
                    14:34:ca:52:cf:4c:1f:55:88:d9:94:a1:b9:71:ac:
                    b4:60:19:74:b2:9f:fa:43:41:b3:b3:40:1a:c6:e2:
                    a6:91:87:cb:db:09:29:e3:82:6d:ac:ab:dc:cc:c8:
                    79:08:8c:6a:e1:ce:2f:7e:25:b2:59:7f:f0:33:96:
                    df:2c:ee:0b:c9:69:73:94:c4:5c:00:ee:a5:3e:32:
                    23:e4:3d:15:4c:2a:43:c5:52:36:b1:99:7a:91:72:
                    11:31:0e:66:06:71:3f:7a:64:0f:e0:4c:8b:75:fe:
                    c7:f6:2a:92:c9:de:95:e3:51:8f:7e:a3:f5:6e:88:
                    19:8a:8a:6f:36:eb:80:54:f5:64:09:42:55:71:47:
                    73:14:19:15:51:10:f6:d0:e2:08:94:ca:e3:b4:e9:
                    e8:e2:48:c7:d0:18:c5:4d:15:18:18:4a:f4:78:e8:
                    bb:43:bd:d3:df:f2:9e:2c:a1:5b:4f:2d:9c:70:59:
                    84:ee:96:b0:d0:fd:b6:7a:23:03:8b:d4:18:05:1c:
                    31:c1:21:03:8a:cd:fa:b8:ec:af:f2:00:8e:96:2d:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:06:49:39:3F:43:BD:F9:8B:FE:DB:B3:C6:05:A4:34:DA:A6:E8:5C
            X509v3 Authority Key Identifier:
                keyid:63:D4:C6:5E:48:A3:9E:78:90:00:2A:D1:3B:94:41:6C:FD:8B:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/63D4C65E48A39E7890002AD13B94416CFD8B9DC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:58:58:0d:ff:36:da:91:f9:f8:dc:89:a9:83:8c:97:48:85:
         2e:1f:a0:70:86:13:32:66:14:a4:b3:a4:e4:1c:80:4a:28:7f:
         9f:6d:7a:2d:e4:a0:8c:66:5a:cc:87:26:d3:25:cc:82:9e:82:
         43:75:6c:52:3c:8e:e1:6f:8e:fe:67:6b:ed:bd:84:42:c3:36:
         d2:a1:9c:2b:38:d7:72:6d:72:8e:4c:11:38:09:68:cd:5f:d0:
         87:a7:ab:58:1e:36:1d:6e:89:e0:a3:31:89:f3:4c:59:e8:f3:
         7c:9a:28:92:6f:75:ec:f3:69:e7:85:b6:57:ad:95:9e:96:20:
         3f:24:bb:1d:8b:94:39:91:f0:93:e2:4d:50:0a:86:7d:50:34:
         fe:ee:8a:73:8a:0f:2f:d3:21:c3:3f:61:16:c8:15:f9:1b:c8:
         2a:cc:bb:7a:c0:38:ff:00:08:d4:05:a8:ac:cc:5d:55:33:7a:
         f7:b1:1d:32:7e:7a:ce:b7:46:f4:32:79:5d:2f:70:b8:f6:5b:
         98:31:7c:15:03:63:23:fd:57:df:52:2d:7c:3b:b4:a0:17:9b:
         39:fe:c9:29:5e:6b:13:ce:9b:da:d4:9f:33:6b:78:8b:c0:82:
         8a:52:e9:d7:d3:8c:0f:81:e7:15:b8:fc:18:eb:5a:6c:62:c6:
         29:82:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----