
Error: rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json)
Hash identifier: pUia90awwaY2cfhZB9FwIU20pfhlAcflmIK2Ay9I2X8=
Subject key identifier: D3:70:C9:DC:B2:10:71:70:E8:29:71:F8:D3:67:87:FF:27:56:73:B8
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial: 296B35A4E7FA7457D9FCD9654D40B7727D7AB65C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
Manifest number: 02BB
Signing time: Mon 24 Aug 2026 05:59:01 +0000
Manifest this update: Mon 24 Aug 2026 05:54:01 +0000
Manifest next update: Tue 25 Aug 2026 09:42:01 +0000
Files and hashes: 1: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: gbhYVNXKSuPOuaIFim9rJRGdKDo6Ic0UEgtG6GdNZ4A=)
2: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: cHuOPq83fyZycA9OivEI8RZpnJFYB4O5O0akoWDT9S0=)
3: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: Hmws/jJFn0VN8Xks54tRAE1tCfukJ+bjms95p1AhjjM=)
4: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: VVVi4pftfTQRHSeh+GVIe3lzcFAqtQS5U/66nny4V6o=)
5: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: 009xoYY1a8xoxZvUG5f5D5bCMdyhk7siToL545WF7CM=)
6: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: HQGEFf/iQ0yBbvT+aAFFyqTmvKE6BiJ4Y71y4t8Lpf8=)
7: 323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa (hash: v850qNKD0KujsfrVucUFAOwwC34fXg2h11HTSDRpK8o=)
8: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: VQm1PlLGS2rO5W62H1D7LZFOUniS9xKOSKCC4xH98BU=)
9: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: B5BW7RlDI0chx3DVIb7z4wFQ1p5AsWaBX0cYjoMzI0A=)
10: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: nbNRhVM63fBTdd6Cl5Pe78PBKrOpp9rgv57ATKvxXgk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 09:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6b:35:a4:e7:fa:74:57:d9:fc:d9:65:4d:40:b7:72:7d:7a:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Validity
Not Before: Aug 24 05:54:01 2026 GMT
Not After : Aug 25 09:42:01 2026 GMT
Subject: CN=D370C9DCB2107170E82971F8D36787FF275673B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:e4:b8:94:4c:b3:25:4a:97:ab:e2:2b:03:
d8:0e:af:1d:b3:13:eb:3a:c6:13:a4:53:fa:ab:62:
7e:c2:03:a7:d4:98:a5:bd:03:06:63:e9:72:96:a3:
3c:f0:fc:cb:ee:f4:b9:67:4c:8a:86:3a:e2:ef:1a:
3f:ea:88:e5:06:57:69:80:56:92:2a:e8:f7:89:c0:
5c:9f:11:da:d1:39:ff:58:b5:b4:20:19:b8:52:9a:
91:32:b2:21:9f:54:1f:71:cd:5e:8c:fa:a2:f6:94:
ca:72:4b:c2:9e:20:0f:a9:7d:cb:d2:08:92:ed:b5:
1c:82:16:af:ba:a1:ba:bc:d7:c4:51:bd:9d:b1:46:
c2:f4:27:53:3c:fb:08:8e:a3:c5:65:4a:1a:25:c4:
be:b4:78:b4:f9:1f:0f:c2:7a:e4:fb:cf:c4:32:00:
19:48:be:f8:9f:aa:b3:80:64:67:6d:a1:cf:58:94:
1f:5e:32:9a:12:53:2c:c0:c8:6d:dc:17:28:be:aa:
32:20:b5:7d:23:86:79:42:17:68:c6:8b:10:2b:3b:
6b:33:76:ff:25:85:69:3a:fe:4e:da:78:b6:42:e7:
79:f2:0a:4a:4c:aa:47:05:93:a9:07:73:21:43:5f:
74:2c:6a:eb:18:31:9e:16:89:8a:5f:c3:98:9a:ee:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:C9:DC:B2:10:71:70:E8:29:71:F8:D3:67:87:FF:27:56:73:B8
X509v3 Authority Key Identifier:
keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d2:0f:4e:70:a2:4d:8c:96:6d:59:d7:1c:20:88:eb:41:0f:
6a:c6:ac:63:07:a4:f2:a4:16:6b:e5:fd:3d:4d:55:2f:e5:85:
d2:88:cd:6b:09:58:0a:50:29:6d:c2:dd:2c:d5:4b:8d:46:c9:
d1:a7:e2:27:b3:56:ed:26:f1:6a:0b:2d:0b:54:c1:ab:52:f6:
23:cb:d0:29:88:4b:69:11:25:9d:45:d4:0f:89:74:ad:59:ce:
90:69:5d:9a:6c:43:95:86:d5:84:e8:50:ec:be:8c:e9:91:d9:
c3:53:c9:24:46:48:0e:e5:68:98:e4:c8:d9:e9:96:c6:be:f2:
79:5c:d5:05:a3:2f:c3:6a:d9:11:69:d4:81:12:21:a5:d2:a3:
78:ab:eb:52:cf:d0:e1:86:f2:79:7e:b3:d1:d3:bc:55:e0:76:
55:bd:fc:d7:d9:42:2f:ed:28:4a:98:11:c0:65:a0:10:53:7e:
04:41:aa:89:17:65:82:fc:23:5e:ba:fa:46:77:cd:23:5a:8c:
fb:0c:d0:e3:17:9f:4d:f7:a1:10:6c:d0:fa:23:9c:b5:07:6c:
b1:0f:e2:1d:61:5e:06:c7:e9:ca:2b:4b:3a:12:ad:ec:2c:e2:
77:bb:8c:01:34:dd:87:24:8d:0a:5c:14:3f:ba:ce:a6:9b:92:
7d:21:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:58:39 2026 by rpki-client