
Error: rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json)
Hash identifier: xgEuLZrYbsHbbiA46xEUWioc86tsqt13HekMsTqBE10=
Subject key identifier: 45:E1:76:56:5A:1F:F7:50:17:71:15:47:5A:E4:36:69:F5:66:21:D7
Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
Certificate serial: 21F6C3FFE0238E7CD7E863C9CD33680344FFC717
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
Manifest number: 048C
Signing time: Sun 23 Aug 2026 22:12:58 +0000
Manifest this update: Sun 23 Aug 2026 22:07:58 +0000
Manifest next update: Mon 24 Aug 2026 23:35:58 +0000
Files and hashes: 1: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: ztkkcdqiBRI6iZMMVx/NMX9D2pt1Xv3nL2WtQle4wAU=)
2: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: JNXlLYey1yGL1s77uvcn+JEttXoFuzzQlgm7bCu5chM=)
3: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: lL+HVSlHODIBSUqaHAfIsOvHeKpMS28v+sqaGhHMZw0=)
4: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: utme5lH1g9mVZbUc0uKz2X5yOjtIpB0sgN72oFatCuw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl
rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 23:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f6:c3:ff:e0:23:8e:7c:d7:e8:63:c9:cd:33:68:03:44:ff:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C
Validity
Not Before: Aug 23 22:07:58 2026 GMT
Not After : Aug 24 23:35:58 2026 GMT
Subject: CN=45E176565A1FF750177115475AE43669F56621D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:ae:a3:05:a4:bb:02:4b:69:a9:83:5f:80:
88:20:86:b8:51:d5:e2:f0:b6:de:a1:5d:bf:a6:b1:
98:3c:17:fc:b9:be:0e:b2:e4:3d:8b:ee:6b:77:ff:
65:bd:87:68:e6:50:3b:c7:a2:03:c4:b6:59:43:9e:
96:f7:9a:3f:c0:57:fd:62:03:f5:52:86:e0:70:b5:
e1:cc:5a:1e:b0:b7:f8:29:80:2a:be:89:c1:4d:d7:
d9:8e:d9:bc:de:44:24:42:07:83:4b:a4:28:3d:37:
0d:eb:55:44:29:52:3b:91:b9:23:a5:39:59:38:59:
c2:3c:26:59:e3:4f:fe:85:77:24:59:50:e4:4f:e3:
75:1a:50:06:d7:41:5b:fe:eb:df:2e:ab:b2:ae:fa:
e3:6b:1b:35:d2:d9:7b:5a:ca:c1:db:02:82:a5:f8:
f9:91:dd:f9:a4:9e:c7:a7:28:4b:26:0e:12:82:27:
65:43:be:e2:6d:a5:ea:6c:c6:d3:f7:df:5a:99:ba:
d0:9b:b6:9a:5a:5d:f0:4b:1f:b6:5c:27:2f:c1:4d:
7f:9e:33:88:b9:05:3c:b6:34:ca:c0:02:0a:21:d3:
9c:08:0b:dd:d5:c3:b9:b8:29:a8:18:72:e0:4b:ee:
c9:77:68:a5:2a:85:83:e1:60:29:9d:a8:df:89:7e:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:76:56:5A:1F:F7:50:17:71:15:47:5A:E4:36:69:F5:66:21:D7
X509v3 Authority Key Identifier:
keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:86:ee:8d:42:8b:b4:0d:b9:64:36:26:2d:91:30:57:1d:
58:b1:46:2d:d3:d2:9e:c8:05:18:ce:b3:d0:53:e4:c2:0c:55:
23:f9:e4:b5:b1:d7:0e:a0:88:ea:07:5f:a3:9a:e4:d9:d9:4a:
6e:cd:29:f0:b4:da:3c:d5:d6:1f:df:d1:28:99:9b:7f:a7:df:
9f:92:d3:80:43:8a:3e:d7:7c:51:2f:e6:cf:2f:ba:19:30:cd:
4f:17:d8:e8:c6:7f:1d:45:09:34:48:5b:46:87:84:11:5d:e9:
9a:09:a0:75:b9:4b:75:b3:10:4c:51:96:42:62:8e:4f:47:e6:
33:9d:8d:e6:fa:7f:27:1b:ad:88:6f:31:b3:5e:57:51:48:33:
eb:08:7e:53:cb:28:09:10:35:b1:27:ef:d0:86:c2:ae:e2:93:
23:28:78:55:80:76:dd:cc:ff:f4:09:e9:66:60:c2:43:ef:71:
55:3a:ce:94:e5:2f:c3:76:16:12:ac:4b:e1:0b:0e:9d:69:5a:
1d:fe:5a:40:6e:42:45:15:94:16:18:b4:8e:08:46:25:2f:32:
f7:35:0e:1b:5c:86:ec:f2:1d:95:2a:21:85:7a:1e:cf:79:85:
51:c3:c3:95:50:95:e7:fc:e1:81:2f:b3:29:cd:1c:09:39:ee:
d9:ea:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:31:58 2026 by rpki-client