This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
File:                     D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft (raw, json)
Hash identifier:          Ci9KQ9QM0pvFPoYhzeHcXOf9tI+XCKL8c4C4YHF5sDw=
Subject key identifier:   0F:EC:E3:07:07:22:95:0C:33:77:60:E4:83:94:C3:3E:B5:33:37:6D
Authority key identifier: D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E
Certificate issuer:       /CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
Certificate serial:       67012B179F4E104CAAEDA7CA01E541E286B60C27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft
Manifest number:          022E
Signing time:             Sat 20 Sep 2025 01:51:42 +0000
Manifest this update:     Sat 20 Sep 2025 01:46:42 +0000
Manifest next update:     Sun 21 Sep 2025 05:42:42 +0000
Files and hashes:         1: 3137372e3138342e3136302e302f32302d3332203d3e203532393230.roa (hash: Gka4fQuTkIS9OXBga4FsHvCJl8LO7pi9i5bgetNnVac=)
                          2: D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl (hash: cO5wsfpyCcNexVtH1sipv/w63hqAAUJDht5wOKly8sM=)
                          3: 323830343a6163343a3a2f33322d313238203d3e203532393230.roa (hash: LGumly0Hoz/sxYu+qhkEf1V3or+NpnwUx8eLRWyJpUc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:01:2b:17:9f:4e:10:4c:aa:ed:a7:ca:01:e5:41:e2:86:b6:0c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E
        Validity
            Not Before: Sep 20 01:46:42 2025 GMT
            Not After : Sep 21 05:42:42 2025 GMT
        Subject: CN=0FECE3070722950C337760E48394C33EB533376D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:a9:5c:3c:b4:bc:c2:b4:69:e7:c4:d1:bf:
                    13:27:b0:86:05:61:ec:1b:bf:17:e8:4d:45:2f:f2:
                    2d:1d:d0:a1:b7:6f:74:e1:a7:a1:87:67:95:0d:d9:
                    f7:64:b7:06:87:60:e6:3a:1f:a5:16:32:f0:a8:d2:
                    d1:ea:27:07:01:f8:4f:15:0c:a8:78:57:7d:96:c3:
                    4c:48:d2:2e:c5:3c:78:6b:f2:0b:15:43:b0:1d:de:
                    71:8b:eb:d8:2f:78:79:02:ed:4b:3a:25:65:45:dc:
                    f8:b8:27:b9:a5:fb:97:38:ff:3a:98:a5:2d:0e:12:
                    be:69:34:7c:81:a7:4e:3a:8a:f5:d1:f4:f1:e6:2c:
                    46:4a:1d:ac:f8:90:0b:66:5d:0b:dc:04:0e:4f:d0:
                    8a:18:d9:33:f2:3e:7d:d0:e2:aa:d8:7d:d8:0a:ad:
                    5d:70:93:1e:63:61:8a:a1:1f:c7:a2:b4:9d:f1:10:
                    41:46:6e:ca:a6:67:7a:86:7c:62:d4:6b:64:d6:dc:
                    05:63:b4:d7:b5:10:74:4e:87:24:21:47:70:ab:7f:
                    13:e9:c2:06:af:22:7b:03:01:9f:d8:f3:9d:31:a3:
                    98:dc:49:5f:62:25:c7:86:d8:75:ab:d0:2b:82:70:
                    07:d0:db:96:7d:56:26:ac:72:fb:1d:63:80:84:c6:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EC:E3:07:07:22:95:0C:33:77:60:E4:83:94:C3:3E:B5:33:37:6D
            X509v3 Authority Key Identifier:
                keyid:D9:8B:5C:19:0E:3B:C6:22:8F:4D:9C:40:5E:3C:F4:FA:3C:0E:51:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8N6B8FZQofTLvdD6pp7t5WZF1fbRjWKbDoGqfFzSLx2/0/D98B5C190E3BC6228F4D9C405E3CF4FA3C0E511E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:47:95:f6:ba:62:52:ba:53:12:4e:f8:02:dd:d5:3d:5f:
         fa:4e:15:6b:51:42:7b:f2:ee:f3:1b:40:ec:1a:3c:67:a5:dd:
         b5:a3:de:33:bc:fd:cb:93:a3:04:9d:23:05:99:5e:e8:ea:b9:
         1b:35:f0:48:d2:77:15:31:0a:47:d3:c2:74:73:a0:1c:5e:d4:
         49:6c:9c:c2:8e:60:fa:09:a4:cd:36:44:d0:fd:84:44:ff:14:
         b3:85:6c:44:61:fb:a8:56:8b:19:67:8a:6b:5a:d5:4e:d1:fb:
         23:2f:59:1a:4b:1f:41:28:5b:2c:01:81:18:2e:69:df:cb:57:
         00:41:aa:57:89:87:7e:02:33:62:05:5d:1c:90:e5:36:87:44:
         78:b6:1f:cd:69:4c:cf:00:ea:cd:3a:a9:41:d0:d0:7e:c1:f0:
         5c:dc:a7:e0:c6:4b:bb:29:69:2e:28:b8:ba:f2:66:7d:da:44:
         79:eb:48:2f:ed:ac:41:f6:d0:9b:26:d1:01:f7:cb:7b:35:0a:
         85:10:8a:ff:e0:61:b2:f2:06:01:f3:4d:cf:73:3d:c7:75:f7:
         0d:11:2b:e1:a4:85:bb:87:d8:8b:a8:e1:ce:ea:9f:e6:09:29:
         8f:54:2f:a2:a9:be:cc:15:0e:c7:2f:fc:35:93:cf:97:2d:42:
         9c:1c:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----