This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GUkHjc89x4YhXeTySS71Ya6Nc3mBVpTnmfaZvD9BbzUK/0/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.mft
File:                     6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.mft (raw, json)
Hash identifier:          ORINaWAupTn5kjWjDzbbT1CBuaJVO8+QDLbZOYekmg0=
Subject key identifier:   FC:D0:5B:DA:32:EB:10:5F:4E:39:F0:9B:44:56:D4:03:62:33:7A:8B
Authority key identifier: 6B:CD:5D:75:C4:66:D7:86:44:36:DC:ED:DE:78:77:D0:A8:D6:B5:20
Certificate issuer:       /CN=6BCD5D75C466D7864436DCEDDE7877D0A8D6B520
Certificate serial:       410363E45E9F32FE69ABA8D72673495E6B02051B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUkHjc89x4YhXeTySS71Ya6Nc3mBVpTnmfaZvD9BbzUK/0/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.mft
Manifest number:          01A7
Signing time:             Fri 28 Nov 2025 06:32:18 +0000
Manifest this update:     Fri 28 Nov 2025 06:27:18 +0000
Manifest next update:     Sat 29 Nov 2025 09:52:18 +0000
Files and hashes:         1: 6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.crl (hash: WBK8IKsNwVGXAiSZmB37Zv8KO42EIjpN//kNW/9r0YY=)
                          2: 323830343a393263383a3a2f33322d3332203d3e20323734373332.roa (hash: WS0c2bP6C7ssdkjiDeoLWTktTu0eWL1oWBy4kC2cOyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:03:63:e4:5e:9f:32:fe:69:ab:a8:d7:26:73:49:5e:6b:02:05:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BCD5D75C466D7864436DCEDDE7877D0A8D6B520
        Validity
            Not Before: Nov 28 06:27:18 2025 GMT
            Not After : Nov 29 09:52:18 2025 GMT
        Subject: CN=FCD05BDA32EB105F4E39F09B4456D40362337A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:86:bf:96:2f:f8:6d:4b:8d:56:4f:c8:85:
                    65:76:de:a1:bf:e5:26:0b:66:fc:8f:36:d8:2b:21:
                    be:24:c0:5f:a9:1d:12:18:17:18:a4:10:c8:9f:d3:
                    09:e8:bc:6a:59:92:3e:6c:d4:de:6f:b4:5c:cc:57:
                    1f:8e:f8:8a:6a:87:fb:d9:62:ab:0a:e4:b5:fe:42:
                    15:ae:6e:71:1e:3b:d3:b6:53:fb:c4:f2:76:ec:c0:
                    e8:2c:8a:0e:d2:91:a7:2e:b5:7d:fb:6e:24:0c:86:
                    48:a7:a8:91:9c:a9:08:b9:65:89:4c:86:45:31:a8:
                    9c:a4:7b:b8:7b:71:36:18:ce:c7:b4:b6:d8:72:03:
                    a3:7e:0d:ea:ed:7b:1d:0d:37:8f:a1:33:73:c3:7b:
                    dd:49:83:2c:df:d8:10:e9:f1:30:02:87:74:9d:3a:
                    44:ca:cf:09:61:13:d6:47:39:38:4c:4d:19:37:fc:
                    df:5e:03:b6:73:52:ee:ff:b6:82:be:7c:61:ae:c9:
                    91:f5:a4:3c:58:31:65:f7:c8:c5:c8:2a:0b:f4:5e:
                    b6:0b:86:18:43:8d:3b:14:ff:7d:ee:26:d7:d2:a6:
                    11:c8:a3:65:d7:20:24:43:1f:e7:2b:66:c1:83:d8:
                    62:3b:2b:93:ee:9e:73:76:b6:f6:b1:fd:02:9b:1e:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D0:5B:DA:32:EB:10:5F:4E:39:F0:9B:44:56:D4:03:62:33:7A:8B
            X509v3 Authority Key Identifier:
                keyid:6B:CD:5D:75:C4:66:D7:86:44:36:DC:ED:DE:78:77:D0:A8:D6:B5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUkHjc89x4YhXeTySS71Ya6Nc3mBVpTnmfaZvD9BbzUK/0/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUkHjc89x4YhXeTySS71Ya6Nc3mBVpTnmfaZvD9BbzUK/0/6BCD5D75C466D7864436DCEDDE7877D0A8D6B520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:40:9a:8a:8d:20:50:20:5b:4e:a8:81:3f:79:13:d3:39:
         0a:26:ec:3b:61:65:bb:38:9b:3d:dd:e5:68:ea:eb:6c:d4:1c:
         90:90:df:88:b9:10:30:a4:66:5e:36:a3:0e:e8:8b:a3:7a:f5:
         dc:52:c6:11:b0:5d:97:6e:bc:fe:22:e3:fc:94:27:3e:cf:8c:
         6a:33:f4:aa:e6:4d:19:9f:27:21:c2:b8:eb:fa:6c:78:68:c2:
         5f:ff:00:05:60:e7:ef:8e:6d:d0:32:39:54:6e:93:e3:2b:22:
         f6:3e:7f:0b:c1:e2:54:70:52:c3:ee:4d:09:71:10:ea:9d:68:
         b0:42:6f:b3:52:56:98:64:2e:88:2e:aa:2f:85:e3:68:b7:03:
         5b:9c:ee:af:c4:66:e8:dd:2b:b0:28:b5:8e:3e:c3:b2:21:78:
         ba:9c:f2:ef:fa:62:b7:fc:52:48:ce:6e:cc:ac:d5:fd:1a:ec:
         6e:a7:ba:ac:00:4f:e0:2f:78:44:8a:c0:b2:57:63:37:0b:50:
         80:08:7a:df:63:90:3a:ac:af:94:0a:53:aa:10:0f:5f:c9:80:
         00:fd:df:ac:59:67:15:8a:62:94:41:da:e7:78:b1:b4:da:bb:
         2f:69:75:58:d5:b6:8e:33:3d:60:0b:a5:b5:df:ea:eb:6d:7c:
         83:97:8e:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQQNj5F6fMv5pq6jXJnNJXmsCBRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJDRDVENzVDNDY2RDc4NjQ0MzZEQ0VEREU3ODc3RDBB
OEQ2QjUyMDAeFw0yNTExMjgwNjI3MThaFw0yNTExMjkwOTUyMThaMDMxMTAvBgNV
BAMTKEZDRDA1QkRBMzJFQjEwNUY0RTM5RjA5QjQ0NTZENDAzNjIzMzdBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DIa/li/4bUuNVk/IhWV23qG/
5SYLZvyPNtgrIb4kwF+pHRIYFxikEMif0wnovGpZkj5s1N5vtFzMVx+O+Ipqh/vZ
YqsK5LX+QhWubnEeO9O2U/vE8nbswOgsig7SkacutX37biQMhkinqJGcqQi5ZYlM
hkUxqJyke7h7cTYYzse0tthyA6N+Dertex0NN4+hM3PDe91Jgyzf2BDp8TACh3Sd
OkTKzwlhE9ZHOThMTRk3/N9eA7ZzUu7/toK+fGGuyZH1pDxYMWX3yMXIKgv0XrYL
hhhDjTsU/33uJtfSphHIo2XXICRDH+crZsGD2GI7K5PunnN2tvax/QKbHpz5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/NBb2jLrEF9OOfCbRFbUA2IzeoswHwYDVR0j
BBgwFoAUa81ddcRm14ZENtzt3nh30KjWtSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VrSGpjODl4NFloWGVUeVNTNzFZYTZOYzNtQlZwVG5tZmFadkQ5QmJ6
VUsvMC82QkNENUQ3NUM0NjZENzg2NDQzNkRDRURERTc4NzdEMEE4RDZCNTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQ0Q1RDc1QzQ2NkQ3ODY0
NDM2RENFRERFNzg3N0QwQThENkI1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1VrSGpjODl4NFloWGVUeVNTNzFZYTZOYzNtQlZwVG5tZmFadkQ5QmJ6VUsvMC82
QkNENUQ3NUM0NjZENzg2NDQzNkRDRURERTc4NzdEMEE4RDZCNTIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAietAmoqNIFAgW06ogT95E9M5CibsO2FluzibPd3laOrrbNQckJDfiLkQMKRm
XjajDuiLo3r13FLGEbBdl268/iLj/JQnPs+MajP0quZNGZ8nIcK46/pseGjCX/8A
BWDn745t0DI5VG6T4ysi9j5/C8HiVHBSw+5NCXEQ6p1osEJvs1JWmGQuiC6qL4Xj
aLcDW5zur8Rm6N0rsCi1jj7DsiF4upzy7/pit/xSSM5uzKzV/Rrsbqe6rABP4C94
RIrAsldjNwtQgAh632OQOqyvlApTqhAPX8mAAP3frFlnFYpilEHa53ixtNq7L2l1
WNW2jjM9YAultd/q6218g5eOrw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:46:31 2025 by rpki-client