
Error: rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier: DdC5oWN96hbfMb7NG5nObMLiIvbzf3+is/4uNcAGBeg=
Subject key identifier: DA:E6:07:64:D1:5C:B1:4D:A7:C2:66:22:4F:87:59:4F:C7:C0:68:25
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 13B4A5E4D2D5BE3464DEB6B4F3504117ED665F7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number: 0489
Signing time: Sun 23 Aug 2026 06:45:51 +0000
Manifest this update: Sun 23 Aug 2026 06:40:51 +0000
Manifest next update: Mon 24 Aug 2026 08:33:51 +0000
Files and hashes: 1: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: HH80gMvMCHmEDWf+tt5FXPQLxoGNqhj/p0AifwqPBJM=)
2: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: yQAbTGsm4/404qzKHHLyWF94GWacmJ1ggdbGP3BIY2c=)
3: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: ncwTOoc+mNDVBWX1XYsqLYEaCqb03rAmAt6444aTZMo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 08:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b4:a5:e4:d2:d5:be:34:64:de:b6:b4:f3:50:41:17:ed:66:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Aug 23 06:40:51 2026 GMT
Not After : Aug 24 08:33:51 2026 GMT
Subject: CN=DAE60764D15CB14DA7C266224F87594FC7C06825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:54:9e:8d:61:b3:ae:f7:d4:fc:20:1f:cd:
dc:f7:a6:b7:d7:f4:9f:f3:35:22:c8:1f:39:ca:1e:
02:5f:3d:85:07:fc:4f:68:be:26:7a:ff:66:bd:a8:
15:f7:9d:ec:ed:e8:3c:74:4f:ca:da:57:7a:dc:bf:
05:1c:52:57:39:5f:27:54:c3:12:cc:83:e4:be:e4:
ac:d5:ab:4c:f5:10:8c:14:39:c3:09:51:56:dd:c0:
6c:51:da:d0:9c:df:3d:0a:59:31:a9:7a:47:75:20:
bc:45:be:dc:4e:d2:7a:76:73:e6:7e:29:9f:6c:06:
87:55:79:13:3a:21:7a:36:5b:12:b7:e7:a2:ac:7f:
ab:4c:44:a7:e5:33:0e:c8:28:df:54:11:1f:03:1f:
32:4e:c5:9a:06:15:e4:db:bf:87:f5:57:b1:a2:2e:
ad:38:df:91:13:01:f4:a8:f2:0f:cc:9e:b0:ee:72:
82:b2:ce:11:64:2f:52:c2:28:e5:ed:0e:12:39:24:
60:54:6b:fd:16:14:cb:46:92:9c:ff:eb:1f:57:64:
c8:7f:6f:ad:6b:7e:7a:b1:e9:21:c5:1d:46:a0:36:
f3:e9:b1:84:24:a5:6c:dd:b3:2a:06:6c:bd:43:a0:
fb:d6:1f:e7:10:ca:25:b6:fe:17:51:c3:50:a7:0c:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E6:07:64:D1:5C:B1:4D:A7:C2:66:22:4F:87:59:4F:C7:C0:68:25
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:de:d0:6d:b9:9d:e4:42:c5:9d:f5:8a:75:1f:94:1b:1e:5b:
de:93:f9:40:54:d8:60:9b:eb:da:fb:03:a9:78:36:b4:82:d1:
e2:9d:8b:de:23:c9:71:11:68:33:1e:ae:7a:0b:2b:a7:d6:e7:
3d:82:2d:74:22:e0:23:d1:33:52:c3:bf:b0:1b:bc:27:ad:45:
63:3e:2b:2e:08:68:49:ec:b9:7d:6c:82:c2:da:8b:18:8b:76:
03:53:40:65:7a:ef:c0:c0:fe:a5:20:3d:e7:71:f8:ed:ba:51:
aa:db:06:f3:1f:f7:53:0c:5d:d2:1f:0d:14:9c:9c:d4:9e:df:
60:34:69:f2:ed:2d:27:24:90:8e:a0:74:13:51:e4:1b:13:18:
9c:ee:13:6b:27:bc:28:0f:78:44:92:c0:7d:9f:bd:1a:07:9e:
27:81:48:23:91:f8:81:35:1a:95:97:3d:88:9a:db:54:8d:7a:
8f:2a:3a:84:27:6d:56:2b:26:9e:e6:46:05:b2:38:a8:fd:ec:
80:ec:25:a1:43:bd:e3:37:26:89:fc:d5:58:65:04:41:0a:8f:
a4:e5:fb:1c:10:5d:98:0c:30:99:b0:ca:0b:4f:5e:ac:fc:16:
a8:de:c1:1d:78:d2:ae:d6:0e:33:07:44:a2:ea:dc:d5:50:30:
32:0d:1b:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE7Sl5NLVvjRk3ra081BBF+1mX34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0NTg2RTVGRUFERDYyNDIwNUNBOUNBQTE3NUQzRENB
NTlEMzJCMzAeFw0yNjA4MjMwNjQwNTFaFw0yNjA4MjQwODMzNTFaMDMxMTAvBgNV
BAMTKERBRTYwNzY0RDE1Q0IxNERBN0MyNjYyMjRGODc1OTRGQzdDMDY4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrFSejWGzrvfU/CAfzdz3prfX
9J/zNSLIHznKHgJfPYUH/E9oviZ6/2a9qBX3nezt6Dx0T8raV3rcvwUcUlc5XydU
wxLMg+S+5KzVq0z1EIwUOcMJUVbdwGxR2tCc3z0KWTGpekd1ILxFvtxO0np2c+Z+
KZ9sBodVeRM6IXo2WxK356Ksf6tMRKflMw7IKN9UER8DHzJOxZoGFeTbv4f1V7Gi
Lq0435ETAfSo8g/MnrDucoKyzhFkL1LCKOXtDhI5JGBUa/0WFMtGkpz/6x9XZMh/
b61rfnqx6SHFHUagNvPpsYQkpWzdsyoGbL1DoPvWH+cQyiW2/hdRw1CnDCgDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2uYHZNFcsU2nwmYiT4dZT8fAaCUwHwYDVR0j
BBgwFoAU80WG5f6t1iQgXKnKoXXT3KWdMrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMS9GMzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU4NkU1RkVBREQ2MjQy
MDVDQTlDQUExNzVEM0RDQTU5RDMyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdCTDQvMS9G
MzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtt7Qbbmd5ELFnfWKdR+UGx5b3pP5QFTYYJvr2vsDqXg2tILR4p2L3iPJcRFo
Mx6uegsrp9bnPYItdCLgI9EzUsO/sBu8J61FYz4rLghoSey5fWyCwtqLGIt2A1NA
ZXrvwMD+pSA953H47bpRqtsG8x/3Uwxd0h8NFJyc1J7fYDRp8u0tJySQjqB0E1Hk
GxMYnO4Taye8KA94RJLAfZ+9GgeeJ4FII5H4gTUalZc9iJrbVI16jyo6hCdtVism
nuZGBbI4qP3sgOwloUO94zcmifzVWGUEQQqPpOX7HBBdmAwwmbDKC09erPwWqN7B
HXjSrtYOMwdEourc1VAwMg0b+A==
-----END CERTIFICATE-----
Generated at Sun Aug 23 23:04:11 2026 by rpki-client