
Error: rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
File: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft (raw, json)
Hash identifier: PDgs4+Z3dlebD1+wO0evQEmJqYFBB1oxctWdjIpP7a8=
Subject key identifier: 9F:60:B4:2E:ED:DF:E8:F1:8D:1B:16:D8:5E:C1:D6:85:F7:F4:A5:41
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 4A854EB201E385C0661A909B29B523EE386E1E12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
Manifest number: 048F
Signing time: Sat 22 Aug 2026 23:50:05 +0000
Manifest this update: Sat 22 Aug 2026 23:45:05 +0000
Manifest next update: Mon 24 Aug 2026 00:15:05 +0000
Files and hashes: 1: 3137372e33362e32332e302f32342d3234203d3e20323636313239.roa (hash: WQyzyVr9T8nU6DTwCcYSYBy8PKxayM2AyVoRNInY1vw=)
2: 3137372e33362e32302e302f32332d3233203d3e20323636313239.roa (hash: 75tImqlK7/7L5dHXNS98UoDqx/fgz+ka9ElxvTcSRrY=)
3: 323830343a336231383a3a2f33322d3332203d3e20323636313239.roa (hash: USazM2CtNeGZcr+7SYcBOSCAiwxDB2/Wq6p4DMndcEQ=)
4: 34352e3136352e35342e302f32342d3234203d3e20323636313239.roa (hash: 0Bmjebd6VQlooKxaAycRihbaOfGzX2ExevFTkovYc74=)
5: 323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa (hash: TCEcDTB5Q8dFR8Mqoiu+Qh/1yBJmydbdEjd3Du9Ld6E=)
6: 3137372e33362e32312e302f32342d3234203d3e20323636313239.roa (hash: 6wBvnOWNyS0Dv/dNk4WOa02j618LapNjUGjLJkvbXbw=)
7: 3137372e33362e32322e302f32342d3234203d3e20323636313239.roa (hash: uPol3MsRsGyM47QHL0ZYwlt//r/ZIZ5N9h9Y+JH66ic=)
8: 34352e362e39342e302f32332d3233203d3e20323636313239.roa (hash: GqfMOHccr/COwMIMXMnYWouuF0vGQiaqrbb2hzBAMzA=)
9: 34352e362e39322e302f32322d3232203d3e20323636313239.roa (hash: 0Kqca4xKLOdgP8iMoKRBlmpSsLjqnnE/FNSpDOebfF8=)
10: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl (hash: abORKtjUtGnGyv2y3+iIfx0fCz/eK7z/AapBfnzYEws=)
11: 323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa (hash: XFBSUgqBj26smDZ+FcgruSOizN5E2pZIK5GAgx42WwQ=)
12: 323830343a336231383a3a2f33342d3334203d3e20323636313239.roa (hash: 9ncbYnpAEDwAnVnpstHXTXKXQuWrDSmsLv4y3lPvNxM=)
13: 323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa (hash: f+Hv4VLR7y7Ep/IKTVvqMv8pUdJiKYJSedLJC5Odt4c=)
14: 323830343a336231383a3a2f33332d3333203d3e20323636313239.roa (hash: ke6rqXOkSI20zuVBcucC/xwqkqDHhrubY/UPrbyYRt4=)
15: 323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa (hash: 9Cu9ReVH+Cy6SZIPdkOoJNfbNf1esIgV9G+9y/mLFYU=)
16: 34352e3136352e35342e302f32332d3233203d3e20323636313239.roa (hash: NQr0KgZV7ptWK05aLZGLSGbKlbPUaqGWC8SlXxVcmyU=)
17: 3137372e33362e32322e302f32332d3233203d3e20323636313239.roa (hash: IUev7umUJAGkhUYVgUuKBMDQ4lWrGc0ML2HA5RODxM0=)
18: 34352e362e39352e302f32342d3234203d3e20323636313239.roa (hash: wEPtoq2gEQtXin/0KFQZCoCBDxG4dqlzqhDvI8GIDBo=)
19: 3137372e33362e32302e302f32322d3232203d3e20323636313239.roa (hash: LiFuYu+aj1f1AIdMo1xyniCNiVmFJaA9rwBOW/ertSU=)
20: 34352e362e39342e302f32342d3234203d3e20323636313239.roa (hash: qyavqEguo84jLMu00BOXZLO4fwIuj/EK9FkuVbdUj68=)
21: 34352e3136352e35352e302f32342d3234203d3e20323636313239.roa (hash: 0QwWEpP33UKkJDB6SNAcCllfy1KLU0pFjL03e1tOTmU=)
22: 34352e362e39322e302f32342d3234203d3e20323636313239.roa (hash: IVwiTpO7RUDCpV3rAepoYyxB5swteJiI8dwtRBW3eHU=)
23: 3137372e33362e32302e302f32342d3234203d3e20323636313239.roa (hash: zncYhF7SjS8GdaLTJj2y17e11jwUeHHWOVGm0xdXlwc=)
24: 34352e362e39332e302f32342d3234203d3e20323636313239.roa (hash: UilPLzK6o4qRaO7TGDc5/PfmGvX/cBYJAzNQDnjadEA=)
25: 34352e362e39322e302f32332d3233203d3e20323636313239.roa (hash: oYuOLFkDEOOkUvG3kmEZKvt0GIP1lKcblAzzTy1/qdc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 00:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:85:4e:b2:01:e3:85:c0:66:1a:90:9b:29:b5:23:ee:38:6e:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Aug 22 23:45:05 2026 GMT
Not After : Aug 24 00:15:05 2026 GMT
Subject: CN=9F60B42EEDDFE8F18D1B16D85EC1D685F7F4A541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:1d:24:a6:fa:db:0f:a3:76:f2:3a:7f:3d:
8b:72:e8:cb:9a:ac:18:05:24:46:99:9f:c0:b8:a8:
14:2b:11:d7:2a:d9:81:09:54:ec:1d:e4:91:6f:97:
c7:ea:b2:11:05:17:d8:0e:17:f0:25:6a:0f:e0:42:
93:91:9d:52:7a:42:fa:60:80:c7:fd:83:8b:e3:42:
c6:4b:e6:b1:00:61:8a:7b:5e:eb:ac:91:c8:ab:ca:
9b:58:3e:b5:1d:13:4b:34:19:8d:bc:da:51:8c:00:
87:40:9e:54:8c:f8:cb:4a:ef:35:2a:2e:a8:4a:ba:
94:d9:77:b7:c5:15:c0:70:49:fd:f9:55:16:ac:91:
d5:37:3f:44:e7:f5:82:45:4a:cf:5c:04:31:c5:ca:
5d:c8:2c:07:2f:03:8d:e7:f0:1d:86:08:a1:d9:38:
32:ac:53:3a:33:9c:8e:a8:ea:74:00:f3:a5:ee:e1:
e7:6e:dd:43:be:34:85:ec:28:15:06:83:04:16:ba:
4c:b6:bf:07:5c:53:c8:58:a8:85:26:a4:a0:be:ee:
dd:0b:ab:d2:a2:3b:43:5d:9b:8e:3c:01:66:27:23:
d8:4f:5c:c2:50:1f:c7:21:ae:a7:ef:45:d0:89:51:
08:f8:7d:e6:32:d6:d5:4c:9c:55:26:f7:e5:d7:6b:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:B4:2E:ED:DF:E8:F1:8D:1B:16:D8:5E:C1:D6:85:F7:F4:A5:41
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:76:e9:a0:4a:19:54:d4:76:63:33:59:56:39:ac:c9:e4:31:
ff:74:dd:af:02:64:2b:1d:e6:b4:66:e0:fd:64:3b:06:ce:6a:
b7:15:5e:d6:6f:a5:92:ba:55:e0:64:f8:78:47:2e:91:96:a7:
ca:ba:ca:3e:fa:d8:4f:27:64:50:86:f6:cf:ad:e1:99:5f:73:
3f:1d:98:f3:ab:09:58:f7:d3:5d:ae:f1:50:8f:3b:1c:20:6c:
23:9d:29:dc:2b:77:9a:7b:3c:f3:77:bd:39:d1:fe:b7:7e:db:
2b:d0:cc:6c:d8:d7:40:a5:9a:56:88:4d:50:1f:ef:fa:e7:f9:
89:8b:96:c3:e2:8b:47:7a:d8:dc:a4:d2:9e:39:c9:eb:00:2b:
1e:c5:a8:7e:37:1a:fa:27:22:b3:f1:64:fe:50:11:71:79:70:
3e:82:e9:e9:d0:9a:bf:83:c5:8f:16:ed:0b:84:b7:fc:f9:3e:
3c:90:83:fe:d4:00:8e:34:ca:1d:c8:3e:ec:32:a3:5d:10:b1:
92:0a:c8:13:29:2b:d3:f0:02:9a:21:6c:4a:08:21:e3:dd:a3:
63:66:11:2f:54:80:76:63:56:98:fe:9e:6f:a8:ba:63:50:2e:
05:f3:5e:4f:b6:71:0e:35:c6:39:fb:32:cc:04:7e:ba:89:0f:
a6:21:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:24:54 2026 by rpki-client