This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft
File:                     BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft (raw, json)
Hash identifier:          vMAM6Nm1ZKR+R82RIRaYxP/boF9+LKdtkeEFwwa5elE=
Subject key identifier:   76:46:9E:7C:57:30:4E:E7:92:65:CE:84:1D:44:5D:8D:E5:C3:59:11
Authority key identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17
Certificate issuer:       /CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
Certificate serial:       2D92D8BDF7FD5132FFB88CD2A80D625260C5D9B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft
Manifest number:          4B
Signing time:             Sun 05 Oct 2025 21:48:47 +0000
Manifest this update:     Sun 05 Oct 2025 21:43:47 +0000
Manifest next update:     Tue 07 Oct 2025 00:33:47 +0000
Files and hashes:         1: BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl (hash: Z7Ko8pezWTx0CrMyOZLDmQPBNTnVG3nQHj9HiqzBkUc=)
                          2: 3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa (hash: dXDJ6YoxUXhFQYoMDXxtxdEXvR4fl5E+h4OB9EbcOno=)
                          3: 323830343a326164343a3a2f33322d313238203d3e20323635313231.roa (hash: xEsjrLVlzs6H2k1W806SdCCQJvr6MukqwhqFSSjEPR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:d8:bd:f7:fd:51:32:ff:b8:8c:d2:a8:0d:62:52:60:c5:d9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
        Validity
            Not Before: Oct  5 21:43:47 2025 GMT
            Not After : Oct  7 00:33:47 2025 GMT
        Subject: CN=76469E7C57304EE79265CE841D445D8DE5C35911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:cb:64:82:7c:0a:6d:38:8c:b5:5a:cf:fa:
                    6d:9f:85:7f:c1:81:5a:ac:21:ca:36:1b:70:ea:c3:
                    e0:a1:7e:e0:91:cb:cd:46:0d:72:f9:ba:6f:39:b3:
                    17:bc:fe:f6:6c:6e:18:e0:05:29:a2:55:6b:c3:2e:
                    d1:e8:29:e4:fa:17:7e:ea:22:47:86:a6:ed:ee:ae:
                    78:e6:c4:a4:19:55:9d:f2:cd:29:6a:e1:ed:71:51:
                    6c:97:d7:7e:6a:ba:0d:6a:95:4c:b0:3f:5a:cb:e2:
                    45:e9:93:c8:44:36:a2:d7:8a:fa:7b:9f:8a:13:f8:
                    52:b4:c3:ad:ec:d6:ce:af:c6:4f:49:2f:35:de:5e:
                    d5:be:bb:bc:ec:bb:42:81:a7:18:37:3b:24:11:e0:
                    c8:a7:3e:fb:3b:53:0e:d7:4f:0c:4d:f3:fc:d3:b0:
                    bf:5c:4b:bf:30:d4:cf:5b:eb:c4:70:c1:a7:61:3d:
                    0f:aa:9a:0e:26:b7:1f:48:d7:cc:df:0d:64:d3:a2:
                    78:fb:24:fb:39:ca:95:ed:6e:f2:b8:a2:d6:81:96:
                    36:c9:d6:51:88:ab:30:ea:07:3a:87:d3:23:fe:a7:
                    68:32:cf:22:aa:a6:34:a2:4d:83:51:b0:91:87:dd:
                    e6:de:f0:d9:34:77:39:86:62:3c:76:aa:64:2e:c9:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:9E:7C:57:30:4E:E7:92:65:CE:84:1D:44:5D:8D:E5:C3:59:11
            X509v3 Authority Key Identifier:
                keyid:BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ff:00:56:6b:39:e7:9f:5f:56:e6:2d:68:11:a1:dd:54:80:
         14:e0:dd:55:ec:9c:de:04:72:57:93:a4:a9:db:2b:09:b9:01:
         b8:dc:75:43:c9:08:bc:c4:8b:df:0b:82:5d:20:47:1d:04:22:
         8b:7b:f3:be:9b:34:38:2c:e8:47:d4:ee:fd:35:9c:d8:ac:3a:
         a0:ab:1e:0a:ac:5c:ba:c5:6a:09:5e:fc:f9:af:b9:a8:99:38:
         7c:a0:f3:73:41:9a:c4:5e:2d:07:08:6e:5c:aa:77:d2:bb:f4:
         34:f2:51:5b:cb:e1:46:51:86:4c:79:0a:72:b4:70:74:ac:2a:
         9a:ac:5b:47:5a:29:fc:52:80:00:42:f4:40:cd:67:4a:88:17:
         df:da:5b:be:96:dc:2f:5a:fe:9d:2e:d3:a7:94:e1:d3:93:65:
         4c:b9:49:a2:89:1c:fb:57:36:1e:df:6a:72:9a:fe:13:fc:e5:
         7b:16:aa:47:8f:38:01:09:22:1f:f4:8b:87:f5:07:56:eb:4b:
         51:00:3b:ee:87:f4:33:ef:36:37:fa:e0:4a:62:93:c2:e5:ca:
         c0:90:57:4b:33:65:41:6f:ec:3a:b8:65:b4:40:9b:29:f7:c5:
         7c:d2:2d:89:d2:cf:44:6f:10:79:29:ad:d1:77:30:52:75:8c:
         85:d6:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:42:36 2025 by rpki-client