This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.mft
File:                     E4D6F69AC5581A8F3760E52E48C0A165A0463D57.mft (raw, json)
Hash identifier:          2SZ7mzUgmEKEuR+VbxDFqjf3UA+PAJJagZsDT84jppM=
Subject key identifier:   D2:4A:BD:63:BB:59:2C:5D:2D:A3:50:10:EA:46:B5:08:0A:2A:2E:17
Authority key identifier: E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
Certificate issuer:       /CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Certificate serial:       1E074C2F8A587EECF1EF3235E3EF373757F13BC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.mft
Manifest number:          20
Signing time:             Wed 19 Feb 2025 05:36:53 +0000
Manifest this update:     Wed 19 Feb 2025 05:31:53 +0000
Manifest next update:     Thu 20 Feb 2025 06:18:53 +0000
Files and hashes:         1: 34352e3138392e3136302e302f32332d3233203d3e20323639373234.roa (hash: +K+VLU6Ok6CXcmo2UL5rePvQoRUYBPBjir3kobrqexI=)
                          2: 34352e3138392e3136322e302f32342d3234203d3e20323639373234.roa (hash: MWE6zYlhUrd03lhngkeWDNLL3mzhdwcMjbv2vnUsFsU=)
                          3: 34352e3138392e3136332e302f32342d3234203d3e20323639373234.roa (hash: NPsSm8ZKWUlUUlSryKWzOIEsmg/9RItAblifInQ8prc=)
                          4: E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl (hash: yuZ2n3u0Ds3mtGEh7PG3JhkFKacY7KzJEgrq5SHlQ/s=)
                          5: 34352e3138392e3136302e302f32342d3234203d3e20323639373234.roa (hash: qFA0ZBiORqEnyBnfhbM7fA4wk3udwTWxmK/pajES3Q4=)
                          6: 34352e3138392e3136312e302f32342d3234203d3e20323639373234.roa (hash: CJ5HI1Q/zRjUoHTH5GI0CxhuzMct7DcEhC+5iZLWaGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:4c:2f:8a:58:7e:ec:f1:ef:32:35:e3:ef:37:37:57:f1:3b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
        Validity
            Not Before: Feb 19 05:31:53 2025 GMT
            Not After : Feb 20 06:18:53 2025 GMT
        Subject: CN=D24ABD63BB592C5D2DA35010EA46B5080A2A2E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:72:1b:e0:02:0a:cf:51:e4:d4:70:0d:6b:
                    d0:1c:74:a7:05:27:5e:65:e9:2f:6e:d8:95:5e:bb:
                    c2:4f:58:de:a0:99:2d:b5:fc:f9:9e:ea:7c:af:14:
                    9f:c5:48:cc:78:fb:6e:1d:d7:95:1b:fa:03:f8:02:
                    70:a4:93:15:ae:2c:70:64:c9:73:7a:62:56:1b:90:
                    b2:3f:c6:0d:1b:36:cc:0c:63:9e:a6:6b:89:5c:b8:
                    4d:24:ed:fc:b2:4e:67:71:a9:b5:a0:d1:2c:4d:1b:
                    13:0c:c9:f7:ba:e9:3f:45:d1:d0:5c:a2:10:b1:cf:
                    af:6f:cd:1a:4c:85:b8:eb:8d:2b:0e:46:77:4d:d0:
                    ef:5c:bd:b6:27:cc:98:72:91:24:86:08:da:ba:7b:
                    b0:a4:a8:84:75:0f:ef:e1:a9:50:1c:f7:f6:0a:95:
                    ca:a6:df:e4:35:d9:3c:ab:d9:5c:93:6a:ef:16:a4:
                    49:e6:e0:49:44:fd:6d:ef:3c:c7:b5:ed:c1:72:4b:
                    9f:b3:2a:09:53:3d:cd:5f:b6:7e:ef:da:41:e3:0f:
                    f2:c5:cf:07:bf:67:8f:96:2e:95:d5:4c:bd:c1:45:
                    95:ce:a2:17:c8:e9:14:2e:b6:21:1d:26:29:c3:b9:
                    d4:dc:8f:77:29:f7:21:64:19:a2:85:be:20:82:7a:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:BD:63:BB:59:2C:5D:2D:A3:50:10:EA:46:B5:08:0A:2A:2E:17
            X509v3 Authority Key Identifier:
                keyid:E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:e6:6b:ca:d5:f7:5e:ba:80:88:48:e7:7b:2e:8f:ec:bd:
         09:0c:3a:8c:84:3a:20:aa:b8:35:b1:ce:cd:75:bf:74:82:5c:
         25:d0:65:8f:bf:a1:b2:3d:ab:71:56:02:bb:4d:1c:79:7b:1e:
         a5:48:98:7d:da:da:c5:16:77:79:f1:dd:1e:b4:77:3c:f1:b3:
         4f:c1:02:a4:fc:29:07:3a:40:92:f0:e3:20:9b:2e:f4:c7:f8:
         f5:df:1f:f9:ec:77:ab:e9:e6:f2:8f:0f:85:a5:76:6e:e0:c6:
         97:0f:12:6a:64:a6:95:eb:1e:b3:d0:4e:23:8b:b9:b8:f7:35:
         ac:42:46:45:e1:5c:34:27:bf:34:1a:f9:14:2f:ac:a5:0f:17:
         6b:f3:e9:88:0a:6e:50:0a:8f:de:7a:1b:09:70:ba:3d:7d:54:
         f6:54:a1:72:64:4c:cd:a5:14:65:75:aa:21:42:00:85:57:eb:
         e8:f5:c4:68:17:12:e9:fb:97:9b:23:7e:a1:35:44:7a:dc:8d:
         14:4d:77:f9:a5:cf:c9:56:82:f5:82:c3:c3:96:48:0d:2f:8a:
         1e:d4:d6:97:dd:2b:b7:23:cb:2e:f7:4e:3d:49:10:ef:5e:7c:
         a8:59:0b:ab:50:13:08:8d:c6:7b:ce:b1:06:af:5f:d4:60:6e:
         13:03:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:18:14 2025 by rpki-client