
Error: rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
File: D83644536B842CD15686D699796D2336D6F94682.mft (raw, json)
Hash identifier: nuxvH2j2Ib9fgM+KgzZS8OL/+F78dQuW2gK3UB80ch8=
Subject key identifier: 52:C3:A7:27:FA:E1:9C:C9:C0:08:08:29:AA:5C:1C:C9:94:F7:62:6C
Authority key identifier: D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
Certificate issuer: /CN=D83644536B842CD15686D699796D2336D6F94682
Certificate serial: 29721EE270144A43104E33CA3EF2B51CAC969AD7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
Manifest number: 051E
Signing time: Sun 23 Aug 2026 22:10:00 +0000
Manifest this update: Sun 23 Aug 2026 22:05:00 +0000
Manifest next update: Mon 24 Aug 2026 22:10:00 +0000
Files and hashes: 1: 3230312e3133302e32302e302f32322d3234203d3e203631383232.roa (hash: hNFjtOXkIzsKv1HgDB29K3gxhy+DdRem6xg3v8UjTR8=)
2: 323830343a313964383a3a2f33322d3335203d3e203631383232.roa (hash: 9KScmkenESc04jyZ4w2wv4c9N5aGe/Xn79plVlSZm3w=)
3: D83644536B842CD15686D699796D2336D6F94682.crl (hash: Vz48gifEDk30UsB1q+PQ8sNLF8+ozWGs74J2po8wEYg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl
rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 22:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:72:1e:e2:70:14:4a:43:10:4e:33:ca:3e:f2:b5:1c:ac:96:9a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D83644536B842CD15686D699796D2336D6F94682
Validity
Not Before: Aug 23 22:05:00 2026 GMT
Not After : Aug 24 22:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:42:f1:ae:4f:31:f2:97:de:12:7c:84:a8:
3b:5e:c1:7c:c6:ba:41:dc:5e:03:2a:fe:ac:c2:6e:
43:fa:d7:f6:ad:a7:11:c8:78:47:f3:d7:1a:4c:14:
87:9c:65:91:99:a5:84:de:0e:10:85:78:0e:47:06:
75:03:8b:73:6e:05:70:a6:0a:35:ff:4c:60:78:00:
f2:d4:97:0a:a4:9c:de:19:c0:a4:ac:03:42:18:b3:
a9:19:e7:df:00:a5:14:69:de:e0:96:88:a7:8c:e5:
ca:e4:26:55:6f:f1:f2:95:0a:3c:bc:1a:d8:e3:34:
ea:02:af:ce:10:e7:61:dc:3c:ea:f9:02:c0:1b:82:
4d:71:be:2f:30:22:05:cf:bb:85:a8:f9:5d:79:f6:
1b:c6:93:97:06:28:1b:6c:27:84:ae:b8:0c:51:94:
f0:10:ec:d9:d4:28:58:f7:db:94:73:72:64:0c:f5:
99:7a:32:20:80:43:37:15:3b:ea:fe:11:8f:6c:6b:
17:af:c8:37:10:45:17:59:ce:b8:b6:e6:ac:bd:c5:
bd:6f:fe:c7:0c:76:5c:07:6a:96:99:dc:d8:9c:38:
54:8e:5c:9d:1d:a8:b1:fe:65:84:63:34:b6:bf:f2:
ad:8a:c9:41:b1:b1:13:bd:22:52:b9:d9:16:4f:cc:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:A7:27:FA:E1:9C:C9:C0:08:08:29:AA:5C:1C:C9:94:F7:62:6C
X509v3 Authority Key Identifier:
keyid:D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:e3:b6:bb:58:58:a2:0d:2f:4b:45:af:dd:ad:b2:cb:08:61:
b5:16:16:00:fa:61:2e:d9:a4:8e:18:b7:09:23:69:86:c7:13:
61:8c:6c:85:f0:c1:2e:e0:7a:bc:95:48:28:93:c7:a9:fc:b2:
36:17:ab:2b:b7:7e:48:3e:8d:c0:b6:71:a2:0b:3f:9e:d1:cb:
91:58:8a:f1:bf:fb:17:77:cc:7e:78:8a:c7:2e:3e:c3:8d:88:
e3:b9:1b:00:8c:ba:71:74:8c:fa:bf:20:ef:e1:22:26:72:a8:
88:a8:11:f8:2e:24:bc:45:3c:1d:a9:a8:5f:38:67:22:c9:b9:
b1:b2:9c:39:7d:f0:ac:20:bf:5e:df:7a:93:20:48:ec:47:72:
bc:0d:1f:74:96:fd:69:59:6c:70:6f:c3:1e:66:44:cd:17:0a:
d1:18:da:44:b3:a6:8c:eb:da:cd:c3:5a:a8:c6:0c:b3:7a:31:
e5:51:4c:eb:c9:d8:e7:09:8d:e0:4b:9f:aa:c5:89:fa:da:ea:
68:31:a7:56:d2:5a:e7:f5:61:57:0a:b7:45:3f:1c:78:fe:bf:
e7:7e:5e:83:ca:06:82:0b:d5:68:7a:c8:0f:0e:a2:85:e3:b7:
66:61:d3:ab:aa:6a:42:51:11:38:ea:30:2c:ec:ff:9d:43:ba:
81:47:45:e6
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUKXIe4nAUSkMQTjPKPvK1HKyWmtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgzNjQ0NTM2Qjg0MkNEMTU2ODZENjk5Nzk2RDIzMzZE
NkY5NDY4MjAeFw0yNjA4MjMyMjA1MDBaFw0yNjA4MjQyMjEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdEQjQyRjFBRTRGMzFGMjk3
REUxMjdDODRBODNCNUVDMTdDQzZCQTQxREM1RTAzMkFGRUFDQzI2RTQzRkFEN0Y2
QURBNzExQzg3ODQ3RjNENzFBNEMxNDg3OUM2NTkxOTlBNTg0REUwRTEwODU3ODBF
NDcwNjc1MDM4QjczNkUwNTcwQTYwQTM1RkY0QzYwNzgwMEYyRDQ5NzBBQTQ5Q0RF
MTlDMEE0QUMwMzQyMThCM0E5MTlFN0RGMDBBNTE0NjlERUUwOTY4OEE3OENFNUNB
RTQyNjU1NkZGMUYyOTUwQTNDQkMxQUQ4RTMzNEVBMDJBRkNFMTBFNzYxREMzQ0VB
RjkwMkMwMUI4MjRENzFCRTJGMzAyMjA1Q0ZCQjg1QThGOTVENzlGNjFCQzY5Mzk3
MDYyODFCNkMyNzg0QUVCODBDNTE5NEYwMTBFQ0Q5RDQyODU4RjdEQjk0NzM3MjY0
MENGNTk5N0EzMjIwODA0MzM3MTUzQkVBRkUxMThGNkM2QjE3QUZDODM3MTA0NTE3
NTlDRUI4QjZFNkFDQkRDNUJENkZGRUM3MEM3NjVDMDc2QTk2OTlEQ0Q4OUMzODU0
OEU1QzlEMURBOEIxRkU2NTg0NjMzNEI2QkZGMkFEOEFDOTQxQjFCMTEzQkQyMjUy
QjlEOTE2NEZDQzU2OUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx9tC8a5PMfKX3hJ8hKg7XsF8xrpB3F4DKv6swm5D+tf2racRyHhH
89caTBSHnGWRmaWE3g4QhXgORwZ1A4tzbgVwpgo1/0xgeADy1JcKpJzeGcCkrANC
GLOpGeffAKUUad7gloinjOXK5CZVb/HylQo8vBrY4zTqAq/OEOdh3Dzq+QLAG4JN
cb4vMCIFz7uFqPldefYbxpOXBigbbCeErrgMUZTwEOzZ1ChY99uUc3JkDPWZejIg
gEM3FTvq/hGPbGsXr8g3EEUXWc64tuasvcW9b/7HDHZcB2qWmdzYnDhUjlydHaix
/mWEYzS2v/KtislBsbETvSJSudkWT8xWnQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFLDpyf64ZzJwAgIKapcHMmU92JsMB8GA1UdIwQYMBaAFNg2RFNrhCzRVobWmXlt
IzbW+UaCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRuaU5NYkt4VUZxVHZ1
aU5vbWpuRVlVMlZnRVZ0WUVEYU1TN0gyM1NncWc4LzEvRDgzNjQ0NTM2Qjg0MkNE
MTU2ODZENjk5Nzk2RDIzMzZENkY5NDY4Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EODM2NDQ1MzZCODQyQ0QxNTY4NkQ2OTk3OTZEMjMzNkQ2Rjk0
NjgyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRuaU5NYkt4VUZxVHZ1aU5vbWpu
RVlVMlZnRVZ0WUVEYU1TN0gyM1NncWc4LzEvRDgzNjQ0NTM2Qjg0MkNEMTU2ODZE
Njk5Nzk2RDIzMzZENkY5NDY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANfjtrtYWKINL0tFr92tsssI
YbUWFgD6YS7ZpI4YtwkjaYbHE2GMbIXwwS7geryVSCiTx6n8sjYXqyu3fkg+jcC2
caILP57Ry5FYivG/+xd3zH54iscuPsONiOO5GwCMunF0jPq/IO/hIiZyqIioEfgu
JLxFPB2pqF84ZyLJubGynDl98Kwgv17fepMgSOxHcrwNH3SW/WlZbHBvwx5mRM0X
CtEY2kSzpozr2s3DWqjGDLN6MeVRTOvJ2OcJjeBLn6rFifra6mgxp1bSWuf1YVcK
t0U/HHj+v+d+XoPKBoIL1Wh6yA8OooXjt2Zh06uqakJRETjqMCzs/51DuoFHReY=
-----END CERTIFICATE-----
Generated at Mon Aug 24 11:48:13 2026 by rpki-client