This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
File:                     CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft (raw, json)
Hash identifier:          xjmlXsSYtQjaKKZ1RRtmEWnv1ieYY1SjWUZb2KEySMM=
Subject key identifier:   48:A9:3A:A9:8B:6C:66:9D:44:45:05:26:E3:94:ED:3F:D4:E8:CD:68
Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08
Certificate issuer:       /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
Certificate serial:       6BF2DC9F9D2CA3B4C8BF39CE514A0AFD0FAF6BB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
Manifest number:          0127
Signing time:             Thu 04 Dec 2025 20:57:44 +0000
Manifest this update:     Thu 04 Dec 2025 20:52:44 +0000
Manifest next update:     Fri 05 Dec 2025 23:45:44 +0000
Files and hashes:         1: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=)
                          2: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: BN0yNSQYHzO/8PLxpClNHqjhVJbCaoMDHFJ1JsHe/LA=)
                          3: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl (hash: DfVSoz3GxVm9V+vefeym1YFjodIaZWvRSUfh/oOuYFI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f2:dc:9f:9d:2c:a3:b4:c8:bf:39:ce:51:4a:0a:fd:0f:af:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
        Validity
            Not Before: Dec  4 20:52:44 2025 GMT
            Not After : Dec  5 23:45:44 2025 GMT
        Subject: CN=48A93AA98B6C669D44450526E394ED3FD4E8CD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:8e:1a:4c:96:9a:1b:e2:9f:d8:5a:ee:00:
                    29:76:95:c2:fa:75:4a:e6:6b:e5:f3:21:e7:ea:5c:
                    ec:9f:fb:08:65:80:8a:c1:23:6e:af:79:8a:c6:dd:
                    1f:00:be:e7:09:7b:b2:de:95:57:91:ea:fa:3a:ca:
                    91:7d:9c:80:66:e5:a5:64:e4:81:ce:8d:10:3b:c0:
                    3e:cf:2b:7c:3e:22:9b:67:57:ca:54:6f:e9:28:e6:
                    d6:64:69:a7:e6:f4:ad:c5:33:4f:90:f6:e2:7b:3f:
                    11:97:cf:9e:12:57:ca:c0:9c:02:0d:63:79:b2:01:
                    7c:0b:d5:74:07:a3:6f:02:96:6e:bf:08:5a:17:73:
                    04:f6:9a:58:fb:e8:2a:3e:59:6f:6d:c8:d2:14:ad:
                    6f:3b:d2:ce:49:f2:71:3a:e1:be:ac:87:e6:fb:50:
                    2a:40:d0:7a:b1:b5:57:33:42:c3:71:76:7a:76:cd:
                    61:05:d9:99:3f:f0:a2:c2:65:18:5c:5d:f4:cf:c0:
                    fe:fc:2a:ca:ce:a5:0c:26:eb:e2:1f:5d:5f:14:34:
                    28:84:21:20:11:b9:1b:62:cd:9c:10:cd:d5:79:68:
                    72:fc:10:d5:ac:cd:96:e8:f0:d0:d1:a6:97:50:99:
                    5a:b4:6d:49:ac:07:a9:05:69:93:e3:d1:26:95:39:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:3A:A9:8B:6C:66:9D:44:45:05:26:E3:94:ED:3F:D4:E8:CD:68
            X509v3 Authority Key Identifier:
                keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:a3:d1:d8:ea:dd:51:bd:ef:8e:c4:d7:87:43:64:a4:ce:
         60:a2:77:a3:7f:9a:c8:2a:12:1f:fe:f2:5c:a8:a0:c3:cb:92:
         98:07:41:39:48:32:95:2c:5b:c6:f9:bf:92:84:2b:45:a5:50:
         19:0e:34:60:c2:12:64:1f:ca:46:8d:f2:73:44:21:4b:7a:cf:
         33:3b:c1:76:bf:6d:cb:98:be:6d:3b:bc:1d:f8:71:c7:e0:21:
         92:22:f6:d9:15:b7:03:ea:9c:cc:b8:36:a3:f2:cc:b2:3a:bb:
         0b:ef:f4:42:f1:64:e3:cf:8a:0d:11:83:78:7f:6e:c6:e0:dd:
         11:c5:bc:2b:eb:e0:2f:a1:d6:c3:3e:f5:9e:ad:55:39:55:c3:
         e5:05:46:82:13:6b:ff:16:ff:e7:99:57:22:75:a7:4e:75:de:
         68:15:7b:44:37:aa:5f:c8:61:1c:9c:37:85:b9:c5:fa:f2:1e:
         94:78:7f:93:2b:c2:26:c9:31:3a:6b:45:60:08:60:52:ec:7f:
         96:81:39:ab:4e:ff:7c:a2:c2:90:83:d6:57:d5:a1:da:e9:95:
         69:e8:dd:09:e1:a8:32:ac:f2:fa:77:a0:e8:00:bf:06:0a:d3:
         0c:a5:37:40:b0:e9:ac:96:cb:38:c9:9c:39:3e:7b:a0:3f:30:
         72:97:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:21:05 2025 by rpki-client