Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
File:                     3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json)
Hash identifier:          ZAglYnUS5Vy4EYtu2P5NEPBZQZOgNtSeW7cVuL10oPA=
Subject key identifier:   95:54:5D:E3:DF:17:56:CA:D9:DD:8E:36:BA:4B:15:4A:05:04:5B:14
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       1568D647ECA9F36B5F24C522189F497473CDF0AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
Manifest number:          047A
Signing time:             Thu 15 Oct 2026 19:16:16 +0000
Manifest this update:     Thu 15 Oct 2026 19:11:16 +0000
Manifest next update:     Fri 16 Oct 2026 21:57:16 +0000
Files and hashes:         1: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: FXUu4U3adBchD+fWNsbxn2w+6ql0jo6WcmN2Jr0Pb3M=)
                          2: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: D9T1ivgCmz0SSRV8w22p1cFm3YQoo5WUWVg9SjY5HDs=)
                          3: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: axrcKMSoK/iUiilBciKvZ91YOXMwX1ZhlOB4bEwbwn8=)
                          4: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: GJF/lCEeR5VLSbTMWJ0mzoX5hzRipzfgLBqsqJE+30o=)
                          5: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (hash: 1FFtSGCVlttR7Kby+N8YCSbMBks3xuCJNineZ8Vmhnc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:d6:47:ec:a9:f3:6b:5f:24:c5:22:18:9f:49:74:73:cd:f0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Oct 15 19:11:16 2026 GMT
            Not After : Oct 16 21:57:16 2026 GMT
        Subject: CN=95545DE3DF1756CAD9DD8E36BA4B154A05045B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:eb:c5:9d:39:40:cb:cd:57:ec:80:4c:fa:
                    c7:6d:ae:09:fc:da:8c:49:16:c5:89:b9:ff:17:e3:
                    6a:6b:20:c3:89:47:91:53:c7:0b:ed:21:f8:19:3d:
                    bc:18:96:c4:41:6c:a8:bd:76:ea:79:9f:cd:67:4e:
                    ad:95:dd:3d:87:ec:5e:38:55:c1:bd:97:5d:59:dd:
                    b4:b5:22:03:a8:26:11:d7:35:ff:a3:e9:d4:ba:5e:
                    13:51:81:d6:22:20:35:6b:d8:ba:79:9e:6c:b9:2b:
                    34:6c:30:86:15:19:50:dc:06:b9:d0:9a:e6:fa:dc:
                    57:37:cb:d7:75:cc:17:2d:d1:69:b0:5b:23:28:fd:
                    15:cb:74:8d:c2:d4:b1:af:42:91:d9:d1:7e:40:e6:
                    d6:8c:8b:55:72:36:ce:52:d0:82:34:79:13:9d:dd:
                    6f:04:52:12:43:49:78:36:6f:64:df:ef:77:f2:c6:
                    be:ef:7e:23:ce:e2:cf:6c:a6:fc:32:71:5c:d2:15:
                    82:75:29:97:eb:4f:07:3e:a6:13:6e:1e:f9:b4:9d:
                    b4:30:fd:34:b3:10:d6:4f:fe:98:41:c8:d9:be:8d:
                    4b:80:ad:31:73:29:fb:75:df:61:b7:83:79:f2:b6:
                    be:35:1c:c4:fd:eb:e3:9a:11:33:43:46:df:18:20:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:54:5D:E3:DF:17:56:CA:D9:DD:8E:36:BA:4B:15:4A:05:04:5B:14
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:a2:7f:0e:c8:4e:e6:28:ff:23:8d:2d:77:03:ed:a2:91:
         fb:ec:95:53:fb:e4:ac:54:ae:92:00:1d:65:70:3e:cf:28:1a:
         95:b2:92:2c:cd:77:20:90:13:19:6b:3a:93:70:de:0f:02:1c:
         ef:54:c9:f3:bd:a0:87:bf:97:f4:5a:cf:2e:c1:2a:c6:df:26:
         7c:c1:5c:63:4f:f7:d6:3c:a8:8c:f5:76:fa:5d:0b:6a:0d:2a:
         4f:bb:a8:f5:d2:32:13:b4:eb:54:6d:7e:5d:e8:5c:20:9c:28:
         dd:7d:68:df:6a:05:ed:78:b7:be:e0:de:28:16:6c:62:43:4f:
         b7:7c:3a:c9:5b:3a:c1:dc:38:08:57:49:8f:21:6d:4b:10:13:
         83:a9:65:61:6a:a0:b8:43:9c:08:89:27:2d:c0:0c:c7:16:4b:
         d3:e3:17:22:18:da:0f:8f:a0:03:24:a7:e4:91:34:ad:a9:17:
         19:3d:34:02:67:2f:a3:79:7c:12:87:04:b0:bd:33:a0:37:4c:
         df:59:29:45:f9:f4:75:b3:32:2a:52:f3:ef:37:4f:e4:cd:df:
         65:c6:07:5c:43:2c:1a:e1:88:56:39:48:6a:04:80:99:8c:7a:
         d2:3d:e4:ca:a1:85:ef:72:8d:16:db:46:48:a2:db:d4:a2:2e:
         8f:70:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----