This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft
File:                     BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft (raw, json)
Hash identifier:          4IurH9P1eoV4IEJIA7n2twaKN6FcpYIIlrQtBNDNWTY=
Subject key identifier:   A1:90:B8:05:CE:18:84:28:B8:E0:71:9C:84:5B:EB:FD:AA:AF:68:43
Authority key identifier: BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8
Certificate issuer:       /CN=BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8
Certificate serial:       3D219A22BDAE58A66D0D71C46CBBAE7D0C8475D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft
Manifest number:          2A
Signing time:             Mon 21 Jul 2025 13:20:47 +0000
Manifest this update:     Mon 21 Jul 2025 13:15:47 +0000
Manifest next update:     Tue 22 Jul 2025 14:11:47 +0000
Files and hashes:         1: 3138362e3235312e382e302f32322d3234203d3e20323632393838.roa (hash: utpSHl+eICf+BFUiLF2Mb1UxMvdOYcZXehhlX+SGP6Q=)
                          2: 323830343a313035383a3a2f33322d3335203d3e20323632393838.roa (hash: bMirp8kmBUgedo+mrSKlcwbSdqfXUrJUdnGuURh+/nI=)
                          3: 3137392e3132352e36342e302f31392d3234203d3e20323632393838.roa (hash: m1G1vOcVf9rA3WQTGv/ZxIpVQlPsUXzGET3sK4mY++8=)
                          4: 3136382e39302e38302e302f32322d3234203d3e20323632393838.roa (hash: GaFY93i3SRP/eAbGfalLEWxeZ50m/8WopgGXG8xhMOY=)
                          5: BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.crl (hash: qbj3xMybnghRzSIOTqjk+TZftXVhoyxbiJfirtOhX6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:21:9a:22:bd:ae:58:a6:6d:0d:71:c4:6c:bb:ae:7d:0c:84:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8
        Validity
            Not Before: Jul 21 13:15:47 2025 GMT
            Not After : Jul 22 14:11:47 2025 GMT
        Subject: CN=A190B805CE188428B8E0719C845BEBFDAAAF6843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:3d:33:da:94:29:c0:07:ea:1a:9c:04:66:
                    ae:32:ce:ed:60:22:ed:86:e0:70:5a:ef:54:84:fd:
                    ab:01:e2:78:2c:4c:86:f5:c1:a5:d2:3e:24:e0:d9:
                    88:67:90:75:3a:cc:8a:ac:e3:e0:4d:48:40:50:06:
                    ac:c4:b6:2f:66:10:ff:b0:27:09:db:75:cb:bb:b5:
                    6e:f1:5a:78:c1:aa:f7:92:1c:e4:49:ce:dd:84:e7:
                    2f:1f:7e:59:b8:9f:61:54:cf:b9:3b:a7:83:ec:9f:
                    ac:85:7e:e2:af:45:b1:fa:2b:5f:94:28:cd:db:b9:
                    ca:74:e7:0c:2d:f6:0a:04:41:65:ba:53:b7:26:97:
                    7d:06:5a:05:e7:98:46:7d:c5:24:55:3f:48:8e:af:
                    59:44:02:71:d8:96:21:0f:d3:ac:82:5f:63:bc:4c:
                    1c:ce:72:d7:e8:9e:35:f8:13:d9:37:58:6a:36:d7:
                    69:4a:a5:2e:d5:3c:68:f3:33:66:d5:cc:f6:9d:2b:
                    d4:38:25:54:9c:8c:5c:4e:3d:f3:6a:9a:fa:dd:61:
                    9f:0b:03:c7:5f:b0:af:62:71:f9:48:81:44:57:b6:
                    a4:08:bf:ed:97:5b:d0:90:53:15:aa:6e:26:41:22:
                    42:22:2f:c4:01:39:31:d2:43:50:92:5f:fa:d3:b2:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:B8:05:CE:18:84:28:B8:E0:71:9C:84:5B:EB:FD:AA:AF:68:43
            X509v3 Authority Key Identifier:
                keyid:BA:1C:1C:5A:5B:AB:63:95:B0:65:91:60:39:4C:AF:12:B4:D8:E9:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/BA1C1C5A5BAB6395B0659160394CAF12B4D8E9E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:43:24:df:a9:26:e2:db:b6:8f:1f:9b:a4:48:ae:01:d0:9f:
         e0:84:25:62:b5:7e:57:02:6d:11:9c:a8:bf:eb:e8:0e:fc:e2:
         3d:49:15:5d:d1:a4:0d:76:27:07:0b:7c:02:8a:33:00:f3:9f:
         03:b5:90:9f:59:67:bf:f7:35:22:c4:0e:58:ee:67:f4:da:d0:
         5a:fb:63:67:96:65:73:48:50:69:4d:19:5a:92:fa:ac:c4:0f:
         e7:31:d2:fe:eb:5e:9c:f9:12:d3:b6:2d:12:dc:ad:f6:c6:7a:
         80:44:7f:9f:17:32:67:cb:09:e4:dd:07:9b:02:7e:f9:b3:6b:
         2a:86:1a:f3:01:fe:8b:7d:ab:67:57:8b:af:ce:37:61:4d:31:
         8d:45:1a:b1:b0:3d:9d:94:d0:ad:75:7e:fc:c4:be:c4:e5:d2:
         04:8e:af:29:09:07:df:8d:d8:93:2e:77:a3:76:58:61:9e:cf:
         79:86:17:3a:99:0c:98:e0:e8:e8:f7:aa:d1:04:58:73:28:27:
         69:80:c5:f0:b0:99:66:20:f6:ce:9b:bb:3d:1a:d8:1e:20:11:
         15:ab:ab:d5:9c:62:f0:37:c7:8e:d6:81:e3:27:18:dc:38:f1:
         33:82:07:64:0b:bf:d2:ed:3d:73:9c:28:b0:cb:b9:b5:2d:b9:
         4a:1a:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----