This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          ScEGfVRfHczlA2V4VDJvZd+4tJag1ONqCgdBd4/knXQ=
Subject key identifier:   D5:D9:B2:B2:D6:35:E0:B2:80:D3:97:95:67:E6:A6:97:D4:06:E6:6E
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       1F414DF309434F9599335BDCBCB7F5D454CA60C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          01AA
Signing time:             Tue 30 Sep 2025 19:18:34 +0000
Manifest this update:     Tue 30 Sep 2025 19:13:34 +0000
Manifest next update:     Wed 01 Oct 2025 20:42:34 +0000
Files and hashes:         1: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: Ncw/q/wnoFr4B7EgZ8HGt3ISnbo+FD4LoqopDKY6kHw=)
                          2: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
                          3: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          4: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          5: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
                          6: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)
                          7: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:41:4d:f3:09:43:4f:95:99:33:5b:dc:bc:b7:f5:d4:54:ca:60:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Sep 30 19:13:34 2025 GMT
            Not After : Oct  1 20:42:34 2025 GMT
        Subject: CN=D5D9B2B2D635E0B280D3979567E6A697D406E66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:21:bb:5b:8a:55:29:1f:06:08:32:44:b2:
                    25:71:d1:1e:20:bd:42:a3:99:f6:9f:8b:78:e1:e7:
                    14:c9:6d:fd:0e:c8:d2:e2:06:c5:33:ea:e8:83:86:
                    d9:2d:2c:ee:be:e7:26:42:b0:30:71:40:03:73:fe:
                    8b:65:47:5e:a9:fc:e2:c6:cb:0f:19:92:57:25:a1:
                    93:9a:81:cf:51:03:0c:36:4f:57:84:8e:89:9c:78:
                    7e:30:1a:25:ed:49:27:f2:5d:3b:b4:98:3e:cc:99:
                    2c:da:ce:07:ca:02:69:0e:30:fc:d5:00:50:4f:6c:
                    e1:30:90:9c:85:a6:35:3c:18:4a:dc:30:5f:fa:d8:
                    39:8c:df:81:8e:09:86:78:84:52:e1:9c:b4:6e:f0:
                    6c:26:f8:33:c0:c1:fc:03:e6:0f:05:96:d4:99:ce:
                    8f:a2:af:f2:e3:f4:3b:51:47:fb:07:fb:48:6f:3e:
                    a7:16:7e:be:a4:47:45:81:df:9c:28:e8:c8:ab:b1:
                    2a:3a:10:8b:a0:e3:d9:bf:0d:60:57:5c:f1:f0:fc:
                    3c:80:9a:74:9f:07:8c:fd:b3:63:96:66:9e:4c:25:
                    52:a2:d2:83:8b:e8:06:ca:f5:46:b2:96:1c:30:7e:
                    d4:2f:ea:77:5c:df:2d:78:06:97:34:ae:a9:cc:31:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:B2:B2:D6:35:E0:B2:80:D3:97:95:67:E6:A6:97:D4:06:E6:6E
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:b9:94:71:32:15:71:8c:c5:ce:19:fc:b2:ba:86:61:c4:
         34:79:bf:0d:fc:4d:a7:7f:1b:0e:d8:3d:9e:21:9c:53:14:c4:
         f1:91:e1:56:1e:3b:e6:aa:7e:8e:b5:3d:cd:f8:22:21:66:62:
         cf:5b:98:2a:a5:c3:a1:d1:6a:ca:4b:bf:0b:1d:87:13:f5:0d:
         b0:f2:53:6e:b7:f5:24:a8:d4:5b:9c:36:ff:57:6d:d0:08:61:
         69:5a:35:01:47:49:5e:0d:b0:ce:a8:51:4e:dd:a2:92:d8:a2:
         95:e2:93:a8:7a:ea:79:cd:af:5c:8a:57:7c:40:b3:7a:52:cf:
         dc:bf:0d:d1:06:57:1f:1e:54:f0:91:76:61:9c:46:84:a0:21:
         98:b4:7a:60:df:48:60:4a:40:d4:77:08:ac:6d:53:16:a9:00:
         15:26:a8:66:d3:e0:68:52:78:e5:9d:e7:df:52:d1:64:07:5c:
         2e:70:0a:a6:e3:a1:e4:2b:11:52:bc:94:b8:07:27:e2:1e:cd:
         96:18:6e:09:59:47:6a:22:c6:3a:da:7e:50:74:19:b2:d2:05:
         50:1b:94:8a:03:a8:49:86:d1:56:11:5c:d3:2a:c0:3b:b6:a7:
         54:2f:a9:e1:61:84:4a:fb:cb:1a:a0:9d:57:b6:a5:ae:e6:a4:
         50:f5:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:31:59 2025 by rpki-client