Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hbgf3itHECn6yumB4sd8fTu3Hfsi3qzsjDny6cJNfJ6/0/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.mft
File:                     F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.mft (raw, json)
Hash identifier:          HU9HabLuY1HQrxw+LhKIyFZLX4P1moVE4mhu/Q2qoE4=
Subject key identifier:   D3:CA:11:9E:D3:43:6B:D1:2E:B1:F2:7D:D9:2F:0F:EE:88:13:3B:BF
Authority key identifier: F1:0D:8E:73:82:9C:53:69:CD:31:F7:BC:C4:20:D1:B3:DA:F3:5D:CD
Certificate issuer:       /CN=F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD
Certificate serial:       148A49E420B1708943955BE587737BA57D373ACC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hbgf3itHECn6yumB4sd8fTu3Hfsi3qzsjDny6cJNfJ6/0/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.mft
Manifest number:          25
Signing time:             Thu 16 Apr 2026 05:36:35 +0000
Manifest this update:     Thu 16 Apr 2026 05:31:35 +0000
Manifest next update:     Fri 17 Apr 2026 07:03:35 +0000
Files and hashes:         1: 3137372e3135352e3234302e302f32312d3332203d3e203532373738.roa (hash: Qvl8L1CmuWgFW7IwIo+b0EFjJKk43VuCq+M44Q42yVc=)
                          2: F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.crl (hash: 3EXss3eaKUmYacdMOdixHPPihhOFdD1RaiX6JviKTJ4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8a:49:e4:20:b1:70:89:43:95:5b:e5:87:73:7b:a5:7d:37:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD
        Validity
            Not Before: Apr 16 05:31:35 2026 GMT
            Not After : Apr 17 07:03:35 2026 GMT
        Subject: CN=D3CA119ED3436BD12EB1F27DD92F0FEE88133BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:ed:01:87:55:fa:72:f8:00:bf:c8:80:ef:
                    b2:96:fb:5c:a6:0e:c1:27:04:d4:db:07:43:1f:78:
                    f0:f5:e1:00:1e:c7:8a:04:d3:36:cd:dc:f0:1e:f9:
                    2e:fb:00:f1:47:1f:d4:2c:26:66:85:7e:7c:ac:92:
                    1f:76:9b:2f:2b:4e:42:e3:c3:5f:4e:57:fa:7c:46:
                    3d:89:82:89:e2:aa:ff:18:5f:cd:8c:fe:b5:9d:65:
                    0d:b0:68:14:89:1c:a2:a9:ad:c4:a6:52:fa:88:45:
                    f9:6d:2c:e2:13:10:56:ac:3d:56:5d:c7:de:53:b0:
                    3f:cb:49:a3:49:5b:27:de:88:10:78:78:3e:bb:bf:
                    61:60:ab:b7:b0:a7:4a:dc:fb:b0:13:f2:01:54:66:
                    15:70:c3:d9:0a:6e:cd:59:4c:13:36:c0:81:f0:ad:
                    6f:42:f0:7b:b7:9c:75:d1:56:e2:a5:ef:39:cc:ec:
                    a5:f3:8a:e4:26:95:69:89:16:03:74:9c:cd:d6:91:
                    61:90:fa:63:20:d7:ff:54:b7:0e:d8:8d:63:b0:9a:
                    2e:73:f2:f7:7f:76:fc:01:d2:7d:e5:4e:0a:a8:d2:
                    58:4a:bc:8b:0f:f6:5c:76:8d:b2:87:70:53:b1:a8:
                    b2:37:78:a1:3b:e5:39:09:73:2d:02:7f:10:8f:13:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CA:11:9E:D3:43:6B:D1:2E:B1:F2:7D:D9:2F:0F:EE:88:13:3B:BF
            X509v3 Authority Key Identifier:
                keyid:F1:0D:8E:73:82:9C:53:69:CD:31:F7:BC:C4:20:D1:B3:DA:F3:5D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hbgf3itHECn6yumB4sd8fTu3Hfsi3qzsjDny6cJNfJ6/0/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hbgf3itHECn6yumB4sd8fTu3Hfsi3qzsjDny6cJNfJ6/0/F10D8E73829C5369CD31F7BCC420D1B3DAF35DCD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:73:7f:42:70:c4:79:84:b1:d0:25:65:4c:8b:15:90:1c:
         24:d1:b8:26:f4:0b:51:3a:87:22:fa:0f:12:76:81:0f:9b:2e:
         8f:99:5f:5b:da:7d:f5:e3:51:18:2a:29:99:4c:87:42:e6:dc:
         32:3f:dc:45:c7:ea:9a:1e:5a:b8:ab:cb:38:35:8f:ca:26:78:
         0d:a0:3e:70:3c:97:e3:4c:b3:7c:b8:37:1c:e3:57:82:90:1a:
         ef:94:27:54:0f:39:9e:e0:f7:ac:e1:21:42:3b:5d:9c:5e:1a:
         d9:58:ea:14:1c:3f:82:7b:97:a0:06:fa:33:29:99:f7:16:33:
         56:ea:82:59:df:53:ee:6c:44:4f:bf:f9:c1:ad:5c:74:7d:2d:
         db:97:01:f4:97:13:d2:92:e6:87:69:15:a5:3f:91:d0:95:5d:
         1a:ee:84:5f:91:9f:ec:d3:15:e4:26:1f:a6:48:3a:b9:a3:86:
         b5:d1:d2:4c:6f:ba:a1:50:34:07:30:f9:10:8e:b2:7d:a6:66:
         9a:bf:30:e7:15:74:a7:a6:c5:19:eb:1f:00:02:82:22:78:38:
         e3:62:e4:a7:ba:41:89:f2:0e:ae:2c:05:48:63:31:28:60:dd:
         33:83:5f:67:53:91:a6:8f:53:4d:63:c9:9a:29:1d:c0:48:0a:
         69:c1:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----