Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
File:                     E483282DA50873B6832166A0D902D6605AA93019.mft (raw, json)
Hash identifier:          9Q89orrIX5kYeo1ZRlsccGqxKTprQv2zujSwXqyrEGs=
Subject key identifier:   F8:52:20:1E:15:FD:B2:E1:D4:1D:F5:E2:81:E6:D2:28:54:89:A1:11
Authority key identifier: E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Certificate issuer:       /CN=E483282DA50873B6832166A0D902D6605AA93019
Certificate serial:       440EEAAD7C7D99170493AEE40BDFA42DB901D38E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
Manifest number:          0208
Signing time:             Tue 04 Nov 2025 05:30:11 +0000
Manifest this update:     Tue 04 Nov 2025 05:25:11 +0000
Manifest next update:     Wed 05 Nov 2025 05:30:11 +0000
Files and hashes:         1: E483282DA50873B6832166A0D902D6605AA93019.crl (hash: oQg2aYWZFGTTo/M5FUt9EwpviBX2Hyroad6u5GljCHE=)
                          2: 3137372e35352e3132382e302f32302d3332203d3e203533303033.roa (hash: IKlkGuyvNnCKF+k9PJJJ3z1W9joWD6fNlIQIW0/Dx8Q=)
                          3: 323830343a353033383a3a2f33322d313238203d3e203533303033.roa (hash: DaI4nT11T6G/j5Fc5pqNPlnh9Xf52G4BeSXkIPss8Eg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0e:ea:ad:7c:7d:99:17:04:93:ae:e4:0b:df:a4:2d:b9:01:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E483282DA50873B6832166A0D902D6605AA93019
        Validity
            Not Before: Nov  4 05:25:11 2025 GMT
            Not After : Nov  5 05:30:11 2025 GMT
        Subject: CN=F852201E15FDB2E1D41DF5E281E6D2285489A111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:c6:11:1d:b5:c5:75:c4:96:20:a5:70:15:
                    50:ff:f9:dc:00:16:c2:d7:06:d9:7f:d7:08:43:77:
                    16:c5:7a:f6:02:f8:27:41:a0:b9:69:84:84:77:de:
                    f2:2c:5d:9d:38:0d:62:57:e2:25:ac:f2:8d:a5:4b:
                    2e:09:10:e7:b8:ca:d5:42:3e:22:89:fc:36:c3:45:
                    48:b1:e9:a9:dc:1e:bb:39:f2:d0:d1:6d:64:c2:23:
                    2e:6a:f6:94:a9:fc:3c:e3:7c:fe:33:c7:4e:23:7b:
                    a0:a1:eb:60:c0:51:79:4b:69:8e:b4:b5:91:b3:26:
                    88:81:d8:48:26:89:ff:db:94:08:db:02:8f:15:5c:
                    81:2f:e9:84:20:17:1a:06:e5:4e:21:a7:16:5c:cf:
                    48:5d:be:d2:42:f4:0c:52:62:94:e3:83:ec:8e:67:
                    13:bc:7a:b5:4f:ff:18:81:0b:fc:d7:7b:f0:c3:04:
                    35:93:8a:97:dc:44:84:66:16:c3:7a:dc:46:ff:0c:
                    70:01:ad:7e:a9:8e:81:0e:d4:4b:6e:51:8f:ae:57:
                    82:c3:2a:0b:98:1c:a9:cf:c8:26:36:ef:42:71:a8:
                    e8:dc:05:3c:09:32:ac:bf:09:7f:5e:84:1d:e3:9d:
                    11:1b:af:cf:64:60:3c:98:7b:cb:4b:68:be:78:18:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:52:20:1E:15:FD:B2:E1:D4:1D:F5:E2:81:E6:D2:28:54:89:A1:11
            X509v3 Authority Key Identifier:
                keyid:E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:ba:62:b3:d6:7f:ee:0f:ac:91:da:6e:41:83:b8:81:c0:
         72:80:0b:36:e6:ca:0b:19:8d:c6:41:9b:5d:77:36:71:0b:31:
         bd:81:8c:18:1f:04:db:0f:da:d1:b0:5a:b1:fd:c2:aa:a0:b5:
         95:07:62:d5:01:6b:8c:dc:b1:8b:c8:cb:09:02:e0:4a:1e:84:
         83:5e:9a:7f:50:6f:7d:9f:e3:f0:31:6c:e0:b8:ed:c6:27:da:
         9d:ec:bb:32:e4:3e:b7:31:a6:6c:10:7b:e1:4a:aa:2c:9c:84:
         73:99:ce:58:05:b9:d6:f9:af:46:8d:8d:26:69:90:1d:c2:1a:
         6c:4b:ec:46:87:fd:15:48:1c:68:d1:01:20:a6:e9:7e:03:d0:
         f9:8d:a4:9a:14:72:cb:1d:c9:3f:eb:9e:1a:62:f4:97:df:e6:
         f4:64:b7:ca:e3:a2:a8:11:87:97:c5:2f:14:ca:a7:ee:b6:0b:
         e6:70:01:81:fc:f0:9f:2f:30:68:1a:02:be:36:b7:c9:d6:08:
         cb:69:29:fd:e4:59:3f:5f:4e:0f:c9:e3:02:91:20:80:44:74:
         f5:07:28:5f:b5:b4:ed:9d:82:f2:16:ee:07:3e:b7:46:a6:14:
         f6:f3:78:9d:23:c4:fe:20:2e:45:09:94:fb:60:8b:50:0a:7b:
         b8:0d:aa:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURA7qrXx9mRcEk67kC9+kLbkB044wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4MzI4MkRBNTA4NzNCNjgzMjE2NkEwRDkwMkQ2NjA1
QUE5MzAxOTAeFw0yNTExMDQwNTI1MTFaFw0yNTExMDUwNTMwMTFaMDMxMTAvBgNV
BAMTKEY4NTIyMDFFMTVGREIyRTFENDFERjVFMjgxRTZEMjI4NTQ4OUExMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmMYRHbXFdcSWIKVwFVD/+dwA
FsLXBtl/1whDdxbFevYC+CdBoLlphIR33vIsXZ04DWJX4iWs8o2lSy4JEOe4ytVC
PiKJ/DbDRUix6ancHrs58tDRbWTCIy5q9pSp/DzjfP4zx04je6Ch62DAUXlLaY60
tZGzJoiB2Egmif/blAjbAo8VXIEv6YQgFxoG5U4hpxZcz0hdvtJC9AxSYpTjg+yO
ZxO8erVP/xiBC/zXe/DDBDWTipfcRIRmFsN63Eb/DHABrX6pjoEO1EtuUY+uV4LD
KguYHKnPyCY270JxqOjcBTwJMqy/CX9ehB3jnREbr89kYDyYe8tLaL54GM3PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+FIgHhX9suHUHfXigebSKFSJoREwHwYDVR0j
BBgwFoAU5IMoLaUIc7aDIWag2QLWYFqpMBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXZkVkZ3ZlgxWE1VRHpFdHhSOVhlVndXYWkyMzEycjZ6RHpDM3ZkVG1R
U0ovMC9FNDgzMjgyREE1MDg3M0I2ODMyMTY2QTBEOTAyRDY2MDVBQTkzMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0ODMyODJEQTUwODczQjY4
MzIxNjZBMEQ5MDJENjYwNUFBOTMwMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXZkVkZ3ZlgxWE1VRHpFdHhSOVhlVndXYWkyMzEycjZ6RHpDM3ZkVG1RU0ovMC9F
NDgzMjgyREE1MDg3M0I2ODMyMTY2QTBEOTAyRDY2MDVBQTkzMDE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkri6YrPWf+4PrJHabkGDuIHAcoALNubKCxmNxkGbXXc2cQsxvYGMGB8E2w/a
0bBasf3CqqC1lQdi1QFrjNyxi8jLCQLgSh6Eg16af1BvfZ/j8DFs4Ljtxifaney7
MuQ+tzGmbBB74UqqLJyEc5nOWAW51vmvRo2NJmmQHcIabEvsRof9FUgcaNEBIKbp
fgPQ+Y2kmhRyyx3JP+ueGmL0l9/m9GS3yuOiqBGHl8UvFMqn7rYL5nABgfzwny8w
aBoCvja3ydYIy2kp/eRZP19OD8njApEggER09QcoX7W07Z2C8hbuBz63RqYU9vN4
nSPE/iAuRQmU+2CLUAp7uA2q0w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:00:13 2025 by rpki-client