
Error: rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
File: 0EC8EAC7F1F5A216824B37118697748825F314D9.mft (raw, json)
Hash identifier: E/X6P3BLZedp+jBJMfMK1d2PEdlPf5OOH97K846fxPE=
Subject key identifier: FF:98:99:88:65:23:DF:41:85:AE:BA:8E:98:43:C3:25:9A:3C:14:C2
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Certificate issuer: /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial: 30E5FBB9CA2F526C2531C452B0D76687EA9AFC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
Manifest number: 047C
Signing time: Mon 24 Aug 2026 06:09:11 +0000
Manifest this update: Mon 24 Aug 2026 06:04:11 +0000
Manifest next update: Tue 25 Aug 2026 08:35:11 +0000
Files and hashes: 1: 3136382e3230352e34302e302f32322d3234203d3e203631393432.roa (hash: IEOVkq/MiFbe9kSiq1vq9xeON4CdOaPUnC31voI+IqY=)
2: 3137302e3233332e3136342e302f32322d3234203d3e203631393432.roa (hash: RQs3auMT7WMmlvqSiPqhEHjFJdNIhqeq2j9N65JdYuk=)
3: 34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (hash: LUDr48xTpx4WCKeX1gnuj4FThy0qQoXGwUVL2TBdP10=)
4: 3136382e3139362e37322e302f32322d3234203d3e203631393432.roa (hash: mwSV4AsrionZd6ucwU2XTnQDI1FeF1RXfyJry+mNJBE=)
5: 3137302e3233392e382e302f32322d3234203d3e203631393432.roa (hash: PD7H74uB42C5FlUCcIhjDyZK1EARVfc0do0yGt8ctg4=)
6: 3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (hash: 5AlfVOEKh4aGDgamW6LgPBzM9IIMT2YGRydnyqqOrhA=)
7: 3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (hash: oTj7b9bhH6RiSTQ8IwoCGUPpjxzPMpOXUR545PqouwU=)
8: 0EC8EAC7F1F5A216824B37118697748825F314D9.crl (hash: YdRShlRZ9H1XNH65/9tI8WrnpZlZaSy+2hN/5W4O//U=)
9: 323830343a313839383a3a2f33322d3430203d3e203631393432.roa (hash: MTSIW9OG/6g79JqNzXOS6suIJzY+iyX6qIWY52vA9V0=)
10: 3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (hash: 9P2w7BtRiGunbE7Dhl819E+nMHeQGNGRIZd1Oc/GcCA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 08:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e5:fb:b9:ca:2f:52:6c:25:31:c4:52:b0:d7:66:87:ea:9a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Validity
Not Before: Aug 24 06:04:11 2026 GMT
Not After : Aug 25 08:35:11 2026 GMT
Subject: CN=FF9899886523DF4185AEBA8E9843C3259A3C14C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:6f:80:48:c5:02:96:c0:e8:62:1d:8e:a8:
34:5d:60:99:77:fd:b1:42:60:73:98:3c:b9:44:03:
eb:10:6b:eb:a6:c3:bf:dd:54:3e:56:65:a6:eb:b8:
80:44:54:42:b8:31:69:11:0f:11:bf:84:e6:11:42:
ae:7a:0a:4f:50:a4:d8:3c:bb:09:5c:d5:f7:e1:ff:
fd:3c:3c:0a:1f:1f:0a:38:71:9c:1a:6b:24:5e:84:
63:90:05:f5:fe:46:b2:20:28:04:e5:66:b3:67:e4:
5a:5d:af:12:c5:50:4d:2d:4e:91:c9:1f:d7:ef:51:
85:77:b9:7b:47:db:47:50:1d:e1:f3:7b:97:92:2d:
ce:0d:1e:0c:76:5d:63:c1:ee:c0:cc:97:04:b9:56:
81:78:cd:ff:2e:4e:16:42:1a:35:ba:5e:68:81:5a:
e7:39:ec:e2:27:a3:0f:01:d0:60:7d:ee:61:f5:b7:
a3:57:c0:69:f6:81:5b:7a:bb:a4:7e:d7:44:69:da:
1c:a5:fc:c2:d9:fb:78:f8:c7:41:a7:33:82:91:bd:
0d:e4:56:1e:ba:68:c4:a4:ba:3b:d0:bd:6d:0c:1b:
0b:97:0f:e6:40:34:8a:a1:92:70:23:11:c9:a1:b2:
3c:16:78:57:da:9c:8b:eb:98:33:41:d5:4c:84:94:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:99:88:65:23:DF:41:85:AE:BA:8E:98:43:C3:25:9A:3C:14:C2
X509v3 Authority Key Identifier:
keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:ba:9f:74:c5:f8:a4:1d:b8:f1:ad:2b:bd:61:fb:7e:90:
9f:98:cd:63:15:84:1f:bf:e0:04:26:6d:dc:6a:95:fa:7e:cc:
ac:10:78:b9:43:4f:39:10:b9:ea:56:b5:91:e8:6c:8e:45:c6:
e6:1c:e3:16:79:de:6e:58:05:6c:c8:2a:e4:ca:d2:08:ee:71:
d1:0c:b9:d8:d6:f9:be:4a:0c:a5:9f:be:86:a6:db:2a:88:f8:
e4:de:fd:54:bf:86:88:f1:21:28:f2:f8:b3:1c:54:3f:dd:96:
eb:cf:6e:e2:3a:3d:fa:0c:8d:a4:e1:71:2d:92:8c:a7:0d:76:
08:04:01:3a:15:59:97:7a:32:e4:cb:62:4b:91:5d:c0:c8:44:
ce:b2:40:83:d9:68:a4:c0:f2:76:3e:8c:70:42:55:7c:62:4b:
db:66:3e:29:8c:75:a9:c0:41:24:1c:c5:53:29:80:03:1c:65:
6f:43:1c:f8:a1:01:3e:e1:a1:dc:ae:1b:42:47:6e:08:68:c0:
1e:fc:93:06:6d:d0:88:75:ad:16:d1:78:a9:8d:c2:58:7b:bb:
48:1a:28:d3:ab:0f:7e:81:22:df:8f:1a:9f:24:8f:f9:c0:36:
0d:e2:c2:11:01:87:a7:a4:be:81:05:ca:9e:da:d2:3a:4a:b6:
e3:0e:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:42:05 2026 by rpki-client