Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.mft
File:                     C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.mft (raw, json)
Hash identifier:          VbsqEP1WcFHEgb3FYDmjS3sD0rDorKlTXoXjiLDky6A=
Subject key identifier:   B9:13:6D:0A:90:DC:D9:C9:4C:7C:D4:72:E6:5D:01:B4:5C:96:B7:D1
Authority key identifier: C1:F5:5E:21:C0:56:D8:6C:01:BC:B7:CF:4A:AE:1F:B7:7A:32:58:B2
Certificate issuer:       /CN=C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2
Certificate serial:       32810033688C3226BE262BF503AD19F8DF247F19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.mft
Manifest number:          0112
Signing time:             Fri 17 Apr 2026 01:07:26 +0000
Manifest this update:     Fri 17 Apr 2026 01:02:26 +0000
Manifest next update:     Sat 18 Apr 2026 04:53:26 +0000
Files and hashes:         1: 323830343a373365633a3a2f33322d313238203d3e20323730393436.roa (hash: J//hWYQU//zaHsP5h9KWwbvzHdbZB/77EVLzk9N6foE=)
                          2: 3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa (hash: aVsEx+kdBCZdLzoHU2ZNS0G44QBdLxvOjeHOSoKm8yo=)
                          3: C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.crl (hash: YCEMgKuENBE8eykP7ItNeImDx2oM81/TsJTFUFwcyDw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:81:00:33:68:8c:32:26:be:26:2b:f5:03:ad:19:f8:df:24:7f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2
        Validity
            Not Before: Apr 17 01:02:26 2026 GMT
            Not After : Apr 18 04:53:26 2026 GMT
        Subject: CN=B9136D0A90DCD9C94C7CD472E65D01B45C96B7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:92:3c:b4:f2:e6:e2:62:74:07:19:b7:9a:
                    a0:46:8b:8e:7b:fd:1f:5e:65:e5:de:9e:48:59:ba:
                    1b:a2:30:d0:38:df:f1:f0:e5:88:79:c4:5b:d0:0b:
                    b0:f4:59:87:a0:90:9c:e0:f6:a0:61:09:ce:6e:83:
                    7c:7b:67:28:56:b8:ca:95:07:56:e5:21:57:9d:2c:
                    61:e9:b8:66:6e:1d:84:26:5d:f5:be:05:8f:10:e7:
                    f1:8b:0a:15:0c:0b:56:ff:f8:11:97:77:ee:ad:68:
                    79:2e:7b:1b:02:ce:d8:a8:9a:71:87:83:8b:30:12:
                    26:9f:70:e1:d4:ff:f6:c7:12:7b:5f:11:84:e7:c0:
                    3b:d5:76:8c:5f:fb:55:06:54:a6:88:88:64:ff:67:
                    1d:ea:63:9b:80:ff:f2:53:cd:ce:32:54:fe:70:49:
                    e2:4c:9c:35:e7:ec:95:7a:08:da:d8:03:85:84:07:
                    84:c9:0d:69:69:31:dc:1f:c5:8f:b1:1e:aa:42:7f:
                    66:62:b2:92:73:0a:d5:90:5e:a7:25:66:6a:91:a7:
                    25:b3:76:06:71:9b:b5:41:17:e8:d2:77:42:d3:36:
                    fa:6a:46:39:04:d7:8c:5c:b3:36:43:2d:05:e7:0d:
                    eb:1c:ed:a1:67:b8:e5:68:c0:78:3f:f3:30:31:75:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:6D:0A:90:DC:D9:C9:4C:7C:D4:72:E6:5D:01:B4:5C:96:B7:D1
            X509v3 Authority Key Identifier:
                keyid:C1:F5:5E:21:C0:56:D8:6C:01:BC:B7:CF:4A:AE:1F:B7:7A:32:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6e:3e:16:ee:93:60:5c:6e:a8:f4:f4:e3:4c:98:a1:59:71:
         0c:5d:c2:f8:d4:bb:7a:c3:06:4d:a3:e3:59:56:5c:92:46:47:
         10:28:e0:a2:19:d6:36:4c:45:03:f8:d6:ad:ce:0e:6f:6c:01:
         38:d1:55:4e:e9:49:d2:ad:2a:ed:c9:4a:0c:5a:36:f0:bf:17:
         85:e0:2e:78:d1:7d:9e:2f:4e:fb:5c:d9:cd:0a:11:5b:85:93:
         89:2a:32:71:20:85:3e:a1:68:2f:65:88:ea:44:a4:2b:b4:d9:
         40:30:07:c7:57:dc:36:1f:e7:a3:8f:2a:ef:23:e1:86:7b:45:
         10:eb:a8:ba:46:f8:0b:43:0c:de:d8:c8:fe:f3:4f:48:d9:98:
         60:02:2f:4c:14:6f:d9:97:8d:50:e7:1e:b4:de:d1:ed:2d:b6:
         2f:1e:56:07:1a:b7:dd:2a:9a:4c:6b:98:ab:2e:ca:34:90:2d:
         1d:5c:0b:49:48:63:c4:a5:ad:fa:20:30:4d:ad:e1:11:56:6e:
         c9:a3:ac:f4:fe:81:91:2c:05:79:cc:ff:1b:1b:2c:22:93:0e:
         d2:18:f4:64:28:3d:98:08:1f:ce:f8:66:75:bf:a8:8c:3f:00:
         61:34:28:2b:86:a6:f6:a6:6c:b5:de:52:4f:16:eb:ba:30:f8:
         09:60:55:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----