This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
File:                     32D842DEE7974134E5B4C88618DC7A30F4029092.mft (raw, json)
Hash identifier:          umfN85xA/ugH4nIjKbjfKzmRQSfnXrGht3ohryXusFM=
Subject key identifier:   19:93:F5:63:31:77:AF:39:0E:AB:07:CF:66:81:79:E2:00:05:E8:7F
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       43DD330E9FC2D897C8C307C68E37753CA8AC17C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
Manifest number:          011F
Signing time:             Mon 22 Dec 2025 22:59:15 +0000
Manifest this update:     Mon 22 Dec 2025 22:54:15 +0000
Manifest next update:     Wed 24 Dec 2025 01:01:15 +0000
Files and hashes:         1: 32D842DEE7974134E5B4C88618DC7A30F4029092.crl (hash: CklzcqLUfarL963xoF4FRLYmjw5Mh+1k4qWKBOPOoHg=)
                          2: 323830343a333465303a3a2f33322d3336203d3e20323635343836.roa (hash: 4klcD7t5hexwDr8cLiyMtHpRwuumdH8GWpggWQVNH1A=)
                          3: 3136382e3139372e3233322e302f32322d3234203d3e20323635343836.roa (hash: YJPbZrvwzSSWSjZuPHgpa8o7Dw9WTOzm4P+Lnl2+R5U=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:33:0e:9f:c2:d8:97:c8:c3:07:c6:8e:37:75:3c:a8:ac:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Dec 22 22:54:15 2025 GMT
            Not After : Dec 24 01:01:15 2025 GMT
        Subject: CN=1993F5633177AF390EAB07CF668179E20005E87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:51:f7:69:84:81:ff:06:84:63:3d:c5:9a:
                    10:f4:15:a9:bf:68:e1:e2:bd:c5:91:a0:95:ca:0b:
                    55:27:44:7c:68:0a:b4:96:f6:34:d6:9a:ed:73:d4:
                    3c:21:74:6c:05:6c:9c:db:a8:a4:ca:bc:3d:9d:80:
                    bb:36:a2:6f:87:ff:94:75:76:42:fc:91:1a:5e:bc:
                    7e:cc:62:5f:ed:15:04:bc:8b:51:a1:81:6b:06:6b:
                    9e:2a:d5:cc:15:4c:32:70:ca:3a:61:f4:6a:cf:c5:
                    9a:80:4f:24:32:b2:de:d8:f8:00:98:42:5a:24:aa:
                    b9:7b:42:57:74:68:35:06:6c:4f:4d:b1:c1:eb:4d:
                    37:76:7a:ec:4b:61:44:b0:7e:aa:bf:8a:2d:fd:6e:
                    c5:54:33:3b:89:b8:2f:0d:8d:62:66:68:85:10:d0:
                    94:e5:aa:3c:ea:25:64:d5:de:d2:79:e1:f4:1e:99:
                    85:db:bd:2d:7f:3a:9b:b8:bc:3e:04:11:de:8c:05:
                    f8:5f:72:d0:8f:da:b3:a3:30:36:f0:7b:12:6c:f6:
                    95:a3:d0:90:23:08:d8:bd:5f:88:53:d3:22:02:19:
                    c1:ca:40:d1:cc:79:d5:bb:3b:0a:eb:8b:02:f8:15:
                    d9:0b:86:9f:cd:36:6b:cb:23:80:ff:05:0d:20:80:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:93:F5:63:31:77:AF:39:0E:AB:07:CF:66:81:79:E2:00:05:E8:7F
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:93:25:37:e5:ec:52:a4:94:27:38:71:1d:70:3c:05:e7:40:
         dd:ae:28:b9:98:4c:3c:95:01:67:eb:00:61:43:de:ed:55:73:
         45:98:d0:fe:40:c5:c0:4c:05:c0:2a:e3:42:78:32:a7:a9:b7:
         0d:ab:f3:b1:9d:a5:fb:86:0d:50:0d:fc:ac:e0:8c:06:2e:6a:
         34:26:7b:c2:f2:b0:5d:46:d2:93:80:74:71:4a:6c:82:d6:cc:
         9d:31:77:a5:61:ee:23:97:79:1a:58:cc:d5:24:82:46:d9:99:
         39:35:b1:4a:a1:50:66:fb:23:38:2f:cd:8c:9b:d6:51:81:e5:
         f8:b1:1d:75:a9:c4:72:06:60:f0:a9:8e:c8:d6:99:02:c0:f3:
         97:13:0d:96:35:1c:49:80:af:48:7b:c6:11:d7:71:34:17:f1:
         6d:da:13:49:1a:9d:fe:c1:e5:59:83:e2:6d:85:89:cb:e3:05:
         26:5b:f2:3a:92:2d:19:d8:10:39:3b:f8:be:59:c2:5d:92:09:
         c7:a1:31:d3:97:02:40:28:72:29:a8:03:3f:83:53:97:32:a4:
         ad:47:cd:c7:03:1a:02:d1:88:42:47:b1:89:ae:76:62:ba:6f:
         c7:aa:49:9b:32:1c:48:02:06:f5:25:85:ef:80:da:71:01:e8:
         61:3a:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----