This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft
File:                     4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft (raw, json)
Hash identifier:          QJcpyp2JmwagCtAT4din2AYIaboo1So50qBFyPWUdII=
Subject key identifier:   CB:B4:97:AB:31:D8:FE:79:A2:7C:67:C6:13:1A:CF:4B:3E:2F:BE:0E
Authority key identifier: 4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E
Certificate issuer:       /CN=4FF8BBC8DCFFF61775493B5A218A270400F0B49E
Certificate serial:       6DEF6ABA20F6EB66C8C35193DAA461C8E509ABD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft
Manifest number:          36
Signing time:             Sun 07 Dec 2025 20:52:05 +0000
Manifest this update:     Sun 07 Dec 2025 20:47:05 +0000
Manifest next update:     Tue 09 Dec 2025 00:05:05 +0000
Files and hashes:         1: 4FF8BBC8DCFFF61775493B5A218A270400F0B49E.crl (hash: 38W8ELSw7cBy+wiyy+RrBHtUuETyn3gpxWC0tkUUWZE=)
                          2: 323830343a373432383a3a2f33322d313238203d3e20323730393632.roa (hash: jwVOCirx1Zy5VhAFG6y4Kw5pago6YMpD6hETL8O2XwY=)
                          3: 3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (hash: MNdvoCy50esAZ5WLmiKoAR2/zp8yzLFlPu25gdJuwLQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ef:6a:ba:20:f6:eb:66:c8:c3:51:93:da:a4:61:c8:e5:09:ab:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FF8BBC8DCFFF61775493B5A218A270400F0B49E
        Validity
            Not Before: Dec  7 20:47:05 2025 GMT
            Not After : Dec  9 00:05:05 2025 GMT
        Subject: CN=CBB497AB31D8FE79A27C67C6131ACF4B3E2FBE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:90:e1:7c:2f:2b:71:1c:5c:24:05:dc:9a:
                    f8:3f:a4:e5:07:8d:32:51:27:94:92:a3:05:c6:0b:
                    99:52:f6:2a:ea:1c:34:e0:8c:d3:18:24:24:f9:90:
                    37:04:1c:c6:2a:be:19:a6:e6:dd:e2:73:d9:d5:f4:
                    b3:a5:c1:a0:fc:6a:7f:28:a2:67:15:0c:cf:7f:ca:
                    9f:4f:39:a7:a3:b0:95:ee:95:59:1d:47:09:e6:40:
                    22:6c:d6:0c:9c:ea:9c:9a:8b:54:15:9b:e3:ad:fc:
                    94:e7:32:fc:7b:6e:71:03:69:3d:3c:2a:2a:c4:c1:
                    1e:3e:f9:a4:ca:ec:d1:88:22:bf:62:b8:3f:dd:da:
                    4c:50:16:dc:8f:bc:3c:6a:21:de:c8:0f:72:70:00:
                    7e:f9:24:7c:ec:5b:f8:a0:fc:6f:0b:24:0f:d9:e1:
                    80:f9:73:d6:2d:c4:74:02:8f:7c:35:6d:dd:9e:6b:
                    a0:13:08:37:43:6f:2d:bb:ba:a4:8f:07:6b:7a:ec:
                    73:62:87:db:48:56:71:3c:7d:19:56:38:2a:f9:22:
                    53:f7:89:ed:0e:b7:61:6b:be:11:51:c9:10:9c:1d:
                    f0:0d:fa:4a:8c:13:93:36:da:2a:2a:38:e9:48:b1:
                    97:f2:3e:8c:b4:d4:72:ab:b8:64:0d:c1:98:41:cb:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:97:AB:31:D8:FE:79:A2:7C:67:C6:13:1A:CF:4B:3E:2F:BE:0E
            X509v3 Authority Key Identifier:
                keyid:4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:90:b3:88:ed:2e:8b:bd:ae:5f:72:d3:70:b2:77:5c:7a:
         c2:4e:5f:bc:4b:a2:e2:72:8e:1f:df:d6:4a:32:a3:c2:7f:12:
         0f:9b:46:06:18:98:7b:67:9f:ab:ef:61:2c:8b:1b:7e:de:9a:
         cf:80:e2:eb:bf:fe:be:36:d1:39:54:70:42:5a:55:f5:09:ea:
         49:b3:49:45:06:f8:8c:c2:d4:b9:7a:d2:d9:5c:3b:b1:7d:6d:
         63:c5:34:8f:a6:69:a5:d8:04:6b:ba:ae:f1:c7:4d:6f:a9:6a:
         3a:48:b3:99:0b:d3:6e:4c:3b:59:80:62:17:3d:f7:bf:39:ca:
         ec:6d:57:19:91:d9:e5:f1:8d:75:3b:ef:34:b6:78:88:fd:90:
         8b:52:05:df:1e:79:ee:4c:f2:8d:7f:f8:f3:5b:77:49:c6:f2:
         14:af:dd:2a:ac:8a:39:87:a5:34:43:d1:b9:22:99:a5:11:62:
         cf:a8:75:b8:f0:90:82:fa:d3:7d:19:5a:78:7f:3c:87:ea:ba:
         7f:64:3f:20:d7:d2:78:90:f7:1f:4d:e7:fb:b9:2c:a7:d4:b6:
         83:67:a7:67:79:d6:52:41:9a:a4:59:51:93:b5:ec:cd:f7:1e:
         88:69:ed:7e:ee:36:8b:08:ff:85:2b:a5:6d:c2:10:e7:91:9d:
         36:9b:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----