Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.mft
File:                     7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.mft (raw, json)
Hash identifier:          ffqEqqMU6b8eUjjZJcWzj8jtN1l4lE4S1/SCrhnGZ7Y=
Subject key identifier:   DB:52:0C:18:43:E5:29:57:AC:DA:58:51:55:84:4D:0B:74:B6:7F:AF
Authority key identifier: 76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC
Certificate issuer:       /CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
Certificate serial:       46C84F40AD69B79EA34F87453F934B79FD7ECF90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.mft
Manifest number:          0153
Signing time:             Wed 15 Apr 2026 21:24:18 +0000
Manifest this update:     Wed 15 Apr 2026 21:19:18 +0000
Manifest next update:     Thu 16 Apr 2026 23:58:18 +0000
Files and hashes:         1: 323830343a3933303a3a2f33322d313238203d3e20323633303537.roa (hash: LiqvQiAlL/gtoptxwjzAJQ9zUfwwtFIyf9agFW3d+dE=)
                          2: 7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl (hash: YHr422TJPRnDBUcnyMzfRGiwz38TRJT0krHQYOjpHgg=)
                          3: 3137302e3234342e3233362e302f32322d3234203d3e20323633303537.roa (hash: q1y+jdCn8SZdfVYyj4OS6XcOjcINQa0bh+WpfZ3byg4=)
                          4: 3136382e3232382e31362e302f32322d3234203d3e20323633303537.roa (hash: oFlju5EWbN5a//AcxFavp3fPs5vn+NyMdM0WsqB5w/c=)
                          5: 3138362e3233322e34302e302f32312d3234203d3e20323633303537.roa (hash: so/7KhpA2Lo5pnA3Kmzx4V9JQAiTj0vo8wZtBMxp+rg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c8:4f:40:ad:69:b7:9e:a3:4f:87:45:3f:93:4b:79:fd:7e:cf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC
        Validity
            Not Before: Apr 15 21:19:18 2026 GMT
            Not After : Apr 16 23:58:18 2026 GMT
        Subject: CN=DB520C1843E52957ACDA585155844D0B74B67FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:0b:85:31:de:a1:b3:78:80:07:b9:b5:94:
                    0b:79:9d:93:0f:4d:f9:16:a8:d6:f9:4a:47:c4:d7:
                    4e:f5:59:a0:4d:c6:f6:e7:cb:bf:14:6a:6e:37:d9:
                    53:76:46:34:57:87:69:a8:f2:ab:15:90:8f:bf:1c:
                    dc:a3:5f:de:1d:8c:f8:93:b7:a5:65:72:1f:77:91:
                    db:82:8a:85:fe:a2:e6:1d:cc:ce:53:68:37:be:5a:
                    fd:45:45:a1:1f:d4:d4:42:70:73:99:eb:f1:ab:a6:
                    1e:c2:7d:2e:58:28:07:83:0b:19:c6:02:71:5a:72:
                    9b:60:78:7c:a2:8a:5b:ef:f4:07:3a:06:c7:3e:2b:
                    b3:82:55:55:22:f8:1b:42:99:67:f5:09:8a:6f:13:
                    74:45:c7:0e:4a:a6:9b:11:43:8f:8c:1f:96:83:64:
                    7f:45:94:0c:ac:8a:56:eb:59:eb:28:42:e7:59:8e:
                    8c:ca:58:a1:83:78:4b:2d:ad:c2:98:2f:a5:a7:fe:
                    98:6f:eb:09:5e:98:c3:a5:98:13:25:b0:5c:de:a4:
                    e2:d4:ad:3d:19:eb:18:19:41:2f:f6:be:c5:70:79:
                    8a:86:7b:f4:88:31:62:d4:6b:ac:77:e4:d6:8b:62:
                    d4:ed:f8:31:5e:2f:73:a4:58:3c:87:f2:7d:fe:56:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:0C:18:43:E5:29:57:AC:DA:58:51:55:84:4D:0B:74:B6:7F:AF
            X509v3 Authority Key Identifier:
                keyid:76:40:ED:53:67:AE:93:BE:B8:D6:FD:2E:98:B6:B9:11:13:CD:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPBgxJeXp5rNbdL2SYbEKGUAf5cvhqMzBF3T7dPn3HUm/0/7640ED5367AE93BEB8D6FD2E98B6B91113CDD2BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:bb:cb:e5:22:02:20:8c:77:b8:b2:10:0d:dc:79:f5:d8:
         b8:40:0a:b5:ef:0b:71:68:50:1e:19:66:c9:43:8f:0c:57:fb:
         10:29:07:fd:c4:ec:02:59:fb:02:4f:6b:b9:3c:12:25:19:a1:
         8a:23:41:39:d0:7f:eb:4d:46:c6:33:3a:2b:4b:9c:6b:b8:36:
         a7:19:ac:09:33:59:9d:cb:a0:7e:2c:32:71:1f:0d:29:48:61:
         fe:5c:6b:40:9c:5a:5d:00:ae:31:85:fb:34:e0:f5:d6:4c:93:
         31:76:9c:f6:32:c3:86:e3:d7:28:23:5f:4b:0a:db:41:02:fb:
         b9:a5:66:e5:ed:9b:c3:62:91:97:7f:9a:22:6d:89:f8:04:98:
         af:bf:f7:28:aa:f0:41:2e:ff:a6:b6:d5:28:2e:99:07:ce:20:
         cf:c6:0d:48:00:9b:db:3a:46:e4:80:1e:d2:2e:cc:ff:3c:4f:
         ce:fa:92:82:23:81:34:42:0b:7f:ac:ce:9b:10:d7:b6:ca:b9:
         8d:75:1d:c8:fe:bf:3f:22:d0:a2:cb:e0:b9:2e:93:dc:ec:13:
         70:ac:2f:62:fc:a0:94:cc:36:70:31:7e:b1:61:ec:df:a9:52:
         8b:f2:fa:6d:09:69:86:ce:c2:52:aa:0a:84:5f:1d:75:b3:f2:
         7b:0b:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----