Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft
File:                     32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft (raw, json)
Hash identifier:          naV6yPsz8PcWQnH+UV+Sl+EnABDDLf/8Ywfmt8K1UJw=
Subject key identifier:   BD:95:FC:31:CB:67:8F:AA:23:87:D9:8E:88:B1:7A:51:EA:D5:D4:5B
Authority key identifier: 32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
Certificate issuer:       /CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Certificate serial:       32C296ECF4D4835C0DFCCBAAE08835C5BF046374
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft
Manifest number:          0219
Signing time:             Wed 15 Apr 2026 05:05:03 +0000
Manifest this update:     Wed 15 Apr 2026 05:00:03 +0000
Manifest next update:     Thu 16 Apr 2026 06:25:03 +0000
Files and hashes:         1: 32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl (hash: a4ooo41RcOJrRrjc5zvBxPXX3Nwjj9pkQEzJb8uJk5c=)
                          2: 3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa (hash: jPq9RnrGJrof6wDzigt2dH0rp4sIWSgKd03mEWAnSR8=)
                          3: 3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa (hash: 6XSGPRyZdyBXpZ6cYsl7+qkVSBOZqTLT6o58cw7GkbI=)
                          4: 323830343a326136303a3a2f33322d3438203d3e20323633303839.roa (hash: Th5wPVswSqDJtcL5S2UzL40H/zPAbyGBzIzRvHoX2gU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c2:96:ec:f4:d4:83:5c:0d:fc:cb:aa:e0:88:35:c5:bf:04:63:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
        Validity
            Not Before: Apr 15 05:00:03 2026 GMT
            Not After : Apr 16 06:25:03 2026 GMT
        Subject: CN=BD95FC31CB678FAA2387D98E88B17A51EAD5D45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:9f:4f:27:9d:1b:c9:07:36:0e:5b:4a:73:
                    70:e7:c3:46:55:13:02:45:6f:59:54:6c:9c:87:c3:
                    6f:12:67:86:ab:51:44:1a:26:19:df:6f:2a:8c:58:
                    a6:a5:79:e5:f9:48:21:bb:e7:e0:47:ff:85:8d:f3:
                    cb:40:f8:50:33:30:f1:60:bc:e9:b7:62:c7:80:28:
                    74:72:b1:72:09:93:87:73:e2:20:1a:dc:fc:0d:b0:
                    34:e1:cd:0a:23:30:e4:06:28:f9:d9:2a:82:ce:58:
                    30:1e:8c:27:e4:b7:20:df:08:45:b2:ef:38:6c:57:
                    9b:c0:2d:c8:1c:b2:a3:85:e2:b7:d4:16:d6:8d:a4:
                    74:f1:10:bb:8f:68:ea:a6:b0:9e:e5:47:35:af:92:
                    86:ff:4f:40:0a:90:f0:f0:96:9b:8f:3c:99:e5:64:
                    61:ab:96:a7:4a:50:c1:f0:3c:77:9a:3c:dd:61:47:
                    b0:ae:36:31:26:90:55:ba:7d:e1:10:26:60:05:53:
                    8d:33:f1:5b:d3:a0:65:d3:e9:97:3b:a5:81:a9:ea:
                    00:30:b1:d3:6b:00:d3:53:e7:b1:a6:c1:90:86:08:
                    34:c1:0d:1c:a6:bd:05:19:99:21:cd:c3:05:16:d6:
                    23:3a:ca:e8:d9:cd:9e:d0:2e:f3:2f:c6:90:c9:5c:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:95:FC:31:CB:67:8F:AA:23:87:D9:8E:88:B1:7A:51:EA:D5:D4:5B
            X509v3 Authority Key Identifier:
                keyid:32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f6:fe:a7:7a:15:84:b3:15:65:f6:a2:84:69:ed:f6:0f:96:
         a2:3f:56:05:c3:9e:a7:14:a5:0d:1e:ab:1f:17:bc:22:04:09:
         31:68:1c:13:2b:3c:d6:76:52:18:f9:08:24:f6:f3:1f:3b:58:
         1a:32:d6:c8:e0:98:01:c1:90:4f:3c:bf:f3:74:05:5e:64:7a:
         6e:6b:ae:9a:fc:c4:e2:ec:92:f0:54:50:ca:da:d7:d0:77:de:
         ba:5e:14:38:17:4b:4d:04:bc:0d:b8:8c:db:6a:f9:53:77:f6:
         f2:02:39:c3:5b:a3:b5:46:47:61:32:2e:f1:8f:10:e2:db:8c:
         13:35:b5:4a:38:ea:4d:41:12:5d:d3:2a:8a:18:e0:94:ff:f9:
         4a:bc:02:44:f4:0d:4f:6f:be:f6:7c:af:91:57:1f:50:a7:43:
         4b:75:bf:8d:6b:2c:08:97:2d:ba:03:5d:0d:a6:9b:ed:84:f1:
         8c:73:cd:9c:ed:22:fd:23:3a:b8:fd:f8:f1:eb:05:7d:53:61:
         7f:39:c8:bb:e9:7f:72:25:34:0e:f3:8f:ac:d8:57:d5:42:47:
         c0:36:c8:48:4d:ab:bf:eb:58:21:9c:2a:63:31:26:74:68:04:
         46:82:37:c2:1a:68:11:3e:ff:1f:4d:67:8b:f4:fa:4b:0f:a0:
         aa:8f:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----