Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
File:                     CAC1861D73EAD03007F4D16532DB191600DE2929.mft (raw, json)
Hash identifier:          TpTcVXwmcP5vFOEAlRe5/ReSuglT3uQHhWkVzovkO0I=
Subject key identifier:   BE:D6:41:56:35:4B:EB:FA:A3:46:29:98:C5:E8:49:21:7D:CC:32:E0
Authority key identifier: CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29
Certificate issuer:       /CN=CAC1861D73EAD03007F4D16532DB191600DE2929
Certificate serial:       3DDDD59D635CA7EC1DA2EBC79C515AC8B087F522
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
Manifest number:          0158
Signing time:             Sun 01 Nov 2026 14:50:00 +0000
Manifest this update:     Sun 01 Nov 2026 14:45:00 +0000
Manifest next update:     Mon 02 Nov 2026 14:50:00 +0000
Files and hashes:         1: 323830343a383939303a3a2f33322d3438203d3e20323733363132.roa (hash: k9AjTaqn2hfxZfHYqrJw1jX18VnYCka8XY1dJe+Do5E=)
                          2: CAC1861D73EAD03007F4D16532DB191600DE2929.crl (hash: tXrgQMEiS9JGhRELqzmJI3bNb7eQMVt6tAh61W9JePE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl
                          rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dd:d5:9d:63:5c:a7:ec:1d:a2:eb:c7:9c:51:5a:c8:b0:87:f5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC1861D73EAD03007F4D16532DB191600DE2929
        Validity
            Not Before: Nov  1 14:45:00 2026 GMT
            Not After : Nov  2 14:50:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:a7:cc:fd:f4:8b:5f:f4:c4:61:c8:3c:d4:
                    da:e3:91:57:89:60:d9:f6:e1:03:05:6d:de:b5:ea:
                    8d:f5:bc:ca:66:7e:30:47:43:59:56:48:22:a7:0e:
                    95:3c:7d:5b:cb:66:19:62:09:55:8b:19:d4:96:5e:
                    45:d1:90:71:f5:35:25:56:48:50:2f:82:11:9d:f3:
                    34:22:17:fc:f0:e7:60:9c:0e:a3:d4:ab:6d:18:6a:
                    f1:f6:ac:f0:64:a6:2e:b4:49:89:5b:fc:e5:a7:39:
                    e8:a8:5c:93:43:cf:37:67:42:98:9b:68:51:ff:c8:
                    02:3c:97:97:b5:b4:36:3b:e6:15:83:fa:9f:6e:87:
                    53:3e:a5:19:76:4b:b9:c9:84:87:0b:be:fe:29:59:
                    e0:c9:28:c1:56:ed:01:95:e1:65:f4:4e:55:54:0d:
                    6f:9b:d0:20:01:b1:3f:2e:bf:cf:cc:ff:a9:61:cf:
                    67:5d:7c:50:60:39:7f:7d:50:75:5f:4e:f3:4b:76:
                    65:03:48:a6:be:4b:fd:79:76:5b:c5:37:85:3a:b3:
                    32:13:50:53:41:19:29:10:3b:e5:a8:81:a6:f6:cd:
                    f0:23:49:20:e1:f9:68:6f:67:8a:df:73:46:71:17:
                    0e:a6:54:6a:a6:49:56:29:37:80:aa:65:ac:f3:a8:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:41:56:35:4B:EB:FA:A3:46:29:98:C5:E8:49:21:7D:CC:32:E0
            X509v3 Authority Key Identifier:
                keyid:CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:92:71:d0:f7:1f:f7:08:e3:be:3f:dc:51:32:6a:df:54:6a:
         d6:ff:60:36:fa:02:0e:eb:55:14:00:13:70:bd:42:cc:30:57:
         5c:48:c4:68:46:42:a7:b1:7c:60:95:91:d9:6c:c9:fc:3e:f7:
         4c:66:6e:32:8d:dd:ac:23:e3:e6:28:a0:15:e0:9e:ff:db:4a:
         e3:c6:5b:d9:9c:ea:67:ef:a7:4c:67:72:67:8f:f7:8d:ca:66:
         de:8c:d7:e8:3f:2a:e9:ae:ad:7c:62:a5:15:07:c0:29:f8:26:
         18:99:3a:ac:00:83:bf:59:11:dc:1c:68:66:2e:00:aa:c3:98:
         86:6f:cd:5c:23:d8:06:00:82:ba:4f:f0:1e:df:23:66:70:13:
         ce:0f:96:da:83:9b:a3:aa:46:72:92:ed:a4:4d:00:28:46:64:
         ab:4e:41:f5:aa:62:89:18:1d:05:8b:9d:38:d9:02:9b:c7:6d:
         6a:c2:82:4d:04:6f:3c:57:d9:b9:28:ab:25:d5:0d:02:ad:46:
         bd:fd:8f:51:bb:95:ed:b1:69:0d:11:1f:c9:80:e7:fb:c4:c6:
         a3:fc:65:4a:83:f9:e3:70:6e:1e:10:de:19:c5:bb:fa:00:28:
         69:e2:89:cf:ff:85:02:30:e5:ac:4c:3e:b0:52:50:3a:9b:20:
         48:57:35:94
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUPd3VnWNcp+wdouvHnFFayLCH9SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDMTg2MUQ3M0VBRDAzMDA3RjREMTY1MzJEQjE5MTYw
MERFMjkyOTAeFw0yNjExMDExNDQ1MDBaFw0yNjExMDIxNDUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUExQUE3Q0NGREY0OEI1RkY0
QzQ2MUM4M0NENERBRTM5MTU3ODk2MEQ5RjZFMTAzMDU2RERFQjVFQThERjVCQ0NB
NjY3RTMwNDc0MzU5NTY0ODIyQTcwRTk1M0M3RDVCQ0I2NjE5NjIwOTU1OEIxOUQ0
OTY1RTQ1RDE5MDcxRjUzNTI1NTY0ODUwMkY4MjExOURGMzM0MjIxN0ZDRjBFNzYw
OUMwRUEzRDRBQjZEMTg2QUYxRjZBQ0YwNjRBNjJFQjQ0OTg5NUJGQ0U1QTczOUU4
QTg1QzkzNDNDRjM3Njc0Mjk4OUI2ODUxRkZDODAyM0M5Nzk3QjVCNDM2M0JFNjE1
ODNGQTlGNkU4NzUzM0VBNTE5NzY0QkI5Qzk4NDg3MEJCRUZFMjk1OUUwQzkyOEMx
NTZFRDAxOTVFMTY1RjQ0RTU1NTQwRDZGOUJEMDIwMDFCMTNGMkVCRkNGQ0NGRkE5
NjFDRjY3NUQ3QzUwNjAzOTdGN0Q1MDc1NUY0RUYzNEI3NjY1MDM0OEE2QkU0QkZE
Nzk3NjVCQzUzNzg1M0FCMzMyMTM1MDUzNDExOTI5MTAzQkU1QTg4MUE2RjZDREYw
MjM0OTIwRTFGOTY4NkY2NzhBREY3MzQ2NzExNzBFQTY1NDZBQTY0OTU2MjkzNzgw
QUE2NUFDRjNBODY0MEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqhqnzP30i1/0xGHIPNTa45FXiWDZ9uEDBW3eteqN9bzKZn4wR0NZ
Vkgipw6VPH1by2YZYglVixnUll5F0ZBx9TUlVkhQL4IRnfM0Ihf88OdgnA6j1Ktt
GGrx9qzwZKYutEmJW/zlpznoqFyTQ883Z0KYm2hR/8gCPJeXtbQ2O+YVg/qfbodT
PqUZdku5yYSHC77+KVngySjBVu0BleFl9E5VVA1vm9AgAbE/Lr/PzP+pYc9nXXxQ
YDl/fVB1X07zS3ZlA0imvkv9eXZbxTeFOrMyE1BTQRkpEDvlqIGm9s3wI0kg4flo
b2eK33NGcRcOplRqpklWKTeAqmWs86hkDwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FL7WQVY1S+v6o0YpmMXoSSF9zDLgMB8GA1UdIwQYMBaAFMrBhh1z6tAwB/TRZTLb
GRYA3ikpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN0WnY2Yk5jYm9FNm8y
NUppS3l4UndkN3phUG1NMlJLckNtaXFZRUZub1hELzAvQ0FDMTg2MUQ3M0VBRDAz
MDA3RjREMTY1MzJEQjE5MTYwMERFMjkyOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQUMxODYxRDczRUFEMDMwMDdGNEQxNjUzMkRCMTkxNjAwREUy
OTI5LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzN0WnY2Yk5jYm9FNm8yNUppS3l4
UndkN3phUG1NMlJLckNtaXFZRUZub1hELzAvQ0FDMTg2MUQ3M0VBRDAzMDA3RjRE
MTY1MzJEQjE5MTYwMERFMjkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIKScdD3H/cI474/3FEyat9U
atb/YDb6Ag7rVRQAE3C9QswwV1xIxGhGQqexfGCVkdlsyfw+90xmbjKN3awj4+Yo
oBXgnv/bSuPGW9mc6mfvp0xncmeP943KZt6M1+g/KumurXxipRUHwCn4JhiZOqwA
g79ZEdwcaGYuAKrDmIZvzVwj2AYAgrpP8B7fI2ZwE84PltqDm6OqRnKS7aRNAChG
ZKtOQfWqYokYHQWLnTjZApvHbWrCgk0EbzxX2bkoqyXVDQKtRr39j1G7le2xaQ0R
H8mA5/vExqP8ZUqD+eNwbh4Q3hnFu/oAKGniic//hQIw5axMPrBSUDqbIEhXNZQ=
-----END CERTIFICATE-----