This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft
File:                     BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft (raw, json)
Hash identifier:          redrpBoC+2s087qg/uhJjiClQRhD23MgX41SBLpt5j4=
Subject key identifier:   25:2C:47:49:54:5C:E8:99:60:E3:6F:04:B3:28:51:EC:B5:59:E0:DE
Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2
Certificate issuer:       /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2
Certificate serial:       189B4E21F7F9C43AA47B0B47CE02B9D721523BEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft
Manifest number:          5B
Signing time:             Sat 27 Sep 2025 12:51:18 +0000
Manifest this update:     Sat 27 Sep 2025 12:46:18 +0000
Manifest next update:     Sun 28 Sep 2025 13:16:18 +0000
Files and hashes:         1: 34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (hash: cgmX45fTd+k4EKTWQqOEXQbR7n7gtUEsd2uY8VwYX/s=)
                          2: BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl (hash: Vk45kcpx0+qNY1A2o2XVFi+bZi2jH+o6o4hYrocvobM=)
                          3: 323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (hash: IF17TOnucz3eEhEG7pqk96MKlsI9afVTvw2Ilw7esBE=)
                          4: 3230302e392e32382e302f32322d3234203d3e20323638373931.roa (hash: b9Lk2HKPVAwl88t/aO7v/kvwU0g4h4TtO520VveoY3I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9b:4e:21:f7:f9:c4:3a:a4:7b:0b:47:ce:02:b9:d7:21:52:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2
        Validity
            Not Before: Sep 27 12:46:18 2025 GMT
            Not After : Sep 28 13:16:18 2025 GMT
        Subject: CN=252C4749545CE89960E36F04B32851ECB559E0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:03:9f:cb:33:f6:99:69:5d:91:d7:f0:5d:
                    04:37:d4:0f:b2:f1:a6:58:ea:7b:f1:8b:fb:23:25:
                    a3:aa:e3:25:73:0e:bb:f9:fa:25:0b:b7:4e:74:9e:
                    51:41:c7:97:40:0d:21:8d:8a:ef:02:c4:0c:b2:16:
                    be:00:79:b6:b3:78:d1:ba:85:07:7c:58:8c:05:fd:
                    6a:0d:48:76:b9:20:7c:88:90:f8:b2:72:26:fb:ee:
                    ca:fe:41:13:17:a9:f3:cb:15:b4:bc:12:60:f6:c6:
                    ea:96:7d:76:a7:a4:9a:4a:7d:a2:6e:a7:17:d3:f8:
                    3b:a7:ed:30:5d:b1:53:1a:b9:ab:80:79:4b:66:29:
                    d9:86:19:d6:33:af:c0:2d:b9:37:aa:77:3e:df:88:
                    1e:73:6c:65:06:a3:b5:0f:be:d0:94:54:06:d6:ed:
                    3f:9e:d4:19:0c:dd:9f:8b:1c:27:5b:ea:6a:62:cd:
                    47:b9:44:ff:37:1c:cb:30:bb:b9:05:8c:c7:77:7e:
                    7a:df:2f:4a:71:ad:ed:c0:38:89:25:bb:2c:60:a5:
                    80:64:cd:3c:72:7a:27:49:75:e7:48:00:ff:53:c2:
                    1d:a0:7f:56:08:aa:ab:f7:c0:53:8d:a5:66:dc:8a:
                    c4:00:c8:50:f5:72:ae:1f:6d:61:86:d6:d5:92:a7:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:47:49:54:5C:E8:99:60:E3:6F:04:B3:28:51:EC:B5:59:E0:DE
            X509v3 Authority Key Identifier:
                keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:70:5d:9d:6e:58:32:0a:46:49:3d:2c:77:b9:ff:66:9d:
         c5:68:56:1e:3e:15:17:cc:d4:16:9c:dd:7c:52:28:5d:21:bc:
         10:5d:1f:0b:de:d6:54:50:91:72:f3:48:8c:b3:9b:c6:7b:db:
         51:85:57:56:0e:4d:ec:f8:38:10:58:74:c0:19:40:b2:33:45:
         d3:4b:ac:92:bc:ac:72:88:92:be:21:0a:58:29:32:f2:4c:92:
         13:23:dd:d8:8a:b8:6b:bd:cd:b8:bb:aa:94:f1:32:0c:9b:e1:
         9c:98:e4:fd:bd:ba:fd:11:dc:a8:c6:39:2d:dc:2e:b2:91:29:
         81:e9:52:2c:b6:2d:d6:e6:95:5c:4e:32:ce:77:95:77:42:11:
         47:46:19:4f:3d:57:98:a0:eb:be:88:9e:73:a2:31:b9:61:f4:
         45:43:a1:cf:aa:cb:7e:94:e3:a5:27:84:41:e9:e6:57:fb:e0:
         0c:fa:67:b9:b8:b9:9c:8e:ab:19:44:9f:84:3c:ee:de:46:28:
         65:fe:7b:d6:a5:ec:3f:31:66:98:88:41:d6:1f:3b:26:cb:9f:
         f3:71:e3:0c:73:a8:f2:45:95:5e:e5:6f:65:bd:bf:f9:aa:fa:
         27:f4:36:99:12:ab:97:07:a6:bc:66:dc:fc:7a:2a:31:4a:53:
         80:f7:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----