This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft
File:                     D72D3F46524FD32B12A8857ADA6A36351587C90E.mft (raw, json)
Hash identifier:          YLcyHMfx3qWAqMb95FNjFLB7uh+dvRELOWpD7VFaiQU=
Subject key identifier:   5B:A7:DD:35:C1:A0:22:47:30:13:48:1E:9F:EB:2B:13:1A:DD:48:05
Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E
Certificate issuer:       /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
Certificate serial:       23052E1CB2A26F945C21DF2D90B081781D6CEA08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft
Manifest number:          0104
Signing time:             Sat 15 Nov 2025 11:15:48 +0000
Manifest this update:     Sat 15 Nov 2025 11:10:48 +0000
Manifest next update:     Sun 16 Nov 2025 13:12:48 +0000
Files and hashes:         1: D72D3F46524FD32B12A8857ADA6A36351587C90E.crl (hash: Hy0S1R+NmyLGzUot7p2nYSosyqGNBrEX+MSyd8qlPPU=)
                          2: 323830343a313334383a3a2f33322d3438203d3e20323633353236.roa (hash: 4IqY6bCQyoXzC2os25yTR1czK6/VXqAkjmT52V5zXn0=)
                          3: 3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (hash: 8VduWI6q3z2//+F/2lXJ91+usvdBT+2WkfCrAhcQiQc=)
                          4: 3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (hash: wxO2HWruIc267ooUXcBOclGbDVuFfgiJr4HNWI0zXcc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:05:2e:1c:b2:a2:6f:94:5c:21:df:2d:90:b0:81:78:1d:6c:ea:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
        Validity
            Not Before: Nov 15 11:10:48 2025 GMT
            Not After : Nov 16 13:12:48 2025 GMT
        Subject: CN=5BA7DD35C1A022473013481E9FEB2B131ADD4805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:60:01:e7:9b:b0:8e:4d:e4:6a:94:1a:63:
                    81:07:4e:82:99:61:74:72:b9:13:8f:57:92:2f:59:
                    cb:47:ee:4f:08:d1:3b:af:61:9d:d8:81:10:8b:14:
                    32:e6:d6:e9:36:8a:c0:0d:ca:78:67:69:42:84:81:
                    13:1f:d6:18:71:c7:55:4b:5a:ba:2f:47:b5:6b:9f:
                    a3:5c:28:2a:d5:73:05:f9:8e:77:0a:23:53:c6:65:
                    fb:92:33:4b:16:f5:da:c4:d1:7f:3d:f9:68:56:3b:
                    b1:ae:ed:1e:b1:1d:43:fa:6c:ab:69:08:f4:e5:4e:
                    7d:2c:89:99:36:21:56:6d:84:cb:b8:27:f5:0d:45:
                    34:53:92:a3:2c:1d:e2:b4:b5:38:67:4a:f4:d9:6f:
                    d7:a7:6f:69:dc:64:da:73:f7:20:78:73:15:4b:84:
                    be:cd:af:dd:be:4b:98:a9:be:3e:db:8b:f2:fd:9d:
                    9c:1a:a6:a4:49:20:79:26:8b:89:4d:40:b3:77:5d:
                    7e:ad:7d:6a:ec:ab:f0:a7:ba:09:9b:02:70:a9:fb:
                    5d:d0:a8:8a:67:e1:8b:2d:31:39:52:05:d5:03:c3:
                    98:e3:64:1f:c9:8d:d2:80:42:e3:66:23:9b:c8:17:
                    80:09:49:03:30:13:e2:97:17:34:70:76:eb:ab:f1:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:DD:35:C1:A0:22:47:30:13:48:1E:9F:EB:2B:13:1A:DD:48:05
            X509v3 Authority Key Identifier:
                keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:29:bf:4a:9d:42:0d:4b:f9:6e:10:77:6e:02:6f:1d:bd:
         87:ab:7f:20:34:94:a3:73:a3:4b:96:1b:9b:78:03:e1:c3:f0:
         e3:39:7d:d3:8b:51:17:5c:71:22:bc:a5:13:42:ec:2a:18:af:
         7a:96:12:23:59:1c:58:d2:e9:73:09:26:6f:a7:b1:2d:8d:76:
         64:57:47:86:aa:8f:ff:c8:de:8f:e9:46:0e:91:a2:38:c6:31:
         86:d3:45:01:d5:25:98:7f:00:d3:8e:93:4b:43:50:e1:34:91:
         ce:b1:5f:3a:60:07:ae:96:5c:ea:f5:05:6f:18:af:1e:38:32:
         3d:73:24:93:d5:10:df:71:33:49:d9:df:f5:5a:44:b0:29:3b:
         67:9b:2f:1f:8d:e5:8b:77:17:51:c3:b2:ac:81:0b:5f:2a:f7:
         47:56:9f:5a:31:db:da:33:8a:33:48:71:7d:08:e0:11:8b:67:
         7f:3a:f9:48:7b:75:ef:62:05:f9:f1:6c:c8:09:d9:4f:7d:ca:
         3d:fc:7d:c2:36:15:3e:fc:b8:b1:c4:fa:b4:45:64:e7:12:37:
         f5:43:d8:c2:b1:6b:14:ce:1d:9a:e1:4c:2e:6d:71:6b:ac:39:
         45:31:d0:07:19:eb:cc:0a:55:e6:f4:15:d6:dd:c2:90:4e:42:
         1f:9b:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:55:11 2025 by rpki-client