This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
File:                     478BC91388C024F294F7E5E2E54CFF21D18A626D.mft (raw, json)
Hash identifier:          8nhqbTfd+ZduJ3NblEOxtePDOlYYbhqToPgb7aUoRQg=
Subject key identifier:   3B:29:56:20:9D:E9:45:2A:2D:72:D2:A9:E9:D4:B8:98:EF:FD:1A:A6
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       4D31CA3DEBFBF44E82655BE0D4AEC365404F1E96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
Manifest number:          0337
Signing time:             Thu 11 Dec 2025 01:36:44 +0000
Manifest this update:     Thu 11 Dec 2025 01:31:44 +0000
Manifest next update:     Fri 12 Dec 2025 04:26:44 +0000
Files and hashes:         1: 3139302e38332e302e302f32342d3234203d3e20323730333139.roa (hash: AKshzH9UoKz+8zSND+4+uMCSkyAKQNocsGtnfnkviiA=)
                          2: 478BC91388C024F294F7E5E2E54CFF21D18A626D.crl (hash: Yw+rIlcsGI3Ro6fb4ivZ4plzGYhNzQkMgf++8DjDpDE=)
                          3: 3139302e38332e312e302f32342d3234203d3e20323730333139.roa (hash: E3yZQdN0MhCpLy5yMa9Q6NsJewU67VTDazQOY5BPHes=)
                          4: 323830343a366133343a3a2f33322d3332203d3e20323730333139.roa (hash: Z5vTJiA9nOIEawtxwkSsLN+folB8EA9Id9A58MsJ52g=)
                          5: 323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa (hash: dC63BFgwbGL0IGvpV5eiKCAMMo7+GrQ0xPxAIG8+r7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:31:ca:3d:eb:fb:f4:4e:82:65:5b:e0:d4:ae:c3:65:40:4f:1e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Dec 11 01:31:44 2025 GMT
            Not After : Dec 12 04:26:44 2025 GMT
        Subject: CN=3B2956209DE9452A2D72D2A9E9D4B898EFFD1AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:e8:24:71:a8:d9:be:dc:42:71:91:5e:fd:
                    81:a7:32:0c:47:05:5d:40:f6:ac:5f:26:7d:74:87:
                    f6:ff:2a:b1:91:fe:61:2c:e1:b9:1b:48:ba:61:ba:
                    70:30:9e:62:e7:f1:bf:dc:2e:aa:e6:44:df:e4:e2:
                    b2:ee:d7:d9:41:c4:71:69:e7:c4:a4:a6:03:c2:ac:
                    b4:df:0c:d3:38:7e:d8:2f:44:09:6f:91:fb:22:1e:
                    90:b9:dd:bc:0e:9e:5f:77:50:2e:8e:1e:6c:62:6b:
                    f4:6a:43:da:27:c7:4a:18:2a:4d:86:2d:f0:c8:67:
                    e5:49:e4:b1:97:ab:d0:04:2e:b1:3e:8a:29:5b:d2:
                    99:3b:c6:42:c7:0b:0b:21:1d:72:35:aa:8e:81:79:
                    fc:de:c6:9b:11:b2:96:37:a2:d1:a6:e3:cf:03:17:
                    3d:e6:d1:10:29:ba:8b:0e:25:70:20:39:6a:89:96:
                    c7:b1:23:87:4d:e4:07:2a:dd:ee:79:dc:34:bd:d6:
                    11:1c:5f:a4:43:6f:32:66:78:d0:cb:d2:55:8d:74:
                    f8:8c:ae:b4:35:a2:45:93:95:19:9d:9d:88:fe:1b:
                    e0:21:b2:2e:a5:82:42:a4:af:0c:a0:d9:ad:02:6b:
                    b7:7c:0a:2d:99:4b:b8:19:ac:fe:8a:74:2d:04:2b:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:56:20:9D:E9:45:2A:2D:72:D2:A9:E9:D4:B8:98:EF:FD:1A:A6
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:0a:69:70:ed:29:ef:53:d4:78:0a:82:a4:bf:b8:ed:84:
         ed:98:db:7d:4e:f9:66:76:7b:17:fb:22:ee:50:1e:07:e8:be:
         7e:35:09:3b:e3:55:dd:04:b6:60:2d:21:f5:7a:bf:5e:68:bd:
         4e:c5:d4:77:3b:f3:1f:fd:c6:42:39:81:22:c7:0b:97:1c:80:
         7a:1b:95:82:9c:6d:0f:30:0f:74:aa:b5:27:6a:32:fd:c8:a4:
         fe:e9:3e:35:64:97:09:b0:b1:d5:f7:0e:0b:24:37:98:b8:1e:
         07:94:68:8e:af:9e:8b:14:39:a3:86:82:59:e6:8e:a0:89:c7:
         78:8f:01:b2:2b:02:32:4b:09:71:c0:62:58:34:19:ad:49:89:
         da:d7:04:92:da:8d:f1:fe:3f:7d:b2:74:83:af:41:93:7a:81:
         cf:c8:1f:8b:48:1d:2a:a5:d5:4b:d9:9b:81:d8:2e:27:7e:26:
         23:93:ac:84:29:c1:4c:31:0b:14:bb:e7:45:fe:ba:1e:5c:c6:
         f2:97:97:41:bc:ff:04:86:7b:d8:7f:59:c3:7d:a1:c8:58:1f:
         8e:eb:33:b4:ab:bc:28:f8:d9:94:c1:b8:69:c5:b1:a1:ba:55:
         29:59:db:55:72:63:ea:c5:7b:25:20:70:69:85:fc:74:c0:6b:
         9b:f0:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 11:20:26 2025 by rpki-client