
Error: rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier: cISZNLAzUz6CEcxeI+1Mfm6kwcrvHfcN462d+rEyGGI=
Subject key identifier: CA:44:A4:FF:32:74:51:1F:77:A4:6D:F9:4E:17:EE:DA:06:19:4F:F0
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer: /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial: 2C17E87CD2C42264565AE65C62B2FA3A6F38399E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number: 047C
Signing time: Sun 23 Aug 2026 07:14:18 +0000
Manifest this update: Sun 23 Aug 2026 07:09:18 +0000
Manifest next update: Mon 24 Aug 2026 08:47:18 +0000
Files and hashes: 1: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: orL7FTz+mFf13FHlczzu0BX6cB95fhLXUECmK+7Vv0c=)
2: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: J8jIMCvEjl6vVle5cWfCfgA491Vo8PDn8PBaUGMUX48=)
3: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: 4CLcti7KNk+GMx9kAJER3FdELp1VyatQYYeeSPiq+Gw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 08:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:17:e8:7c:d2:c4:22:64:56:5a:e6:5c:62:b2:fa:3a:6f:38:39:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Validity
Not Before: Aug 23 07:09:18 2026 GMT
Not After : Aug 24 08:47:18 2026 GMT
Subject: CN=CA44A4FF3274511F77A46DF94E17EEDA06194FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:5e:93:c5:36:59:9e:fe:de:8e:36:b3:9b:
98:76:9e:8e:77:6c:80:eb:f6:96:5a:d3:43:43:ea:
e3:3d:dd:c9:dc:00:cd:a8:d6:2d:09:6a:6d:24:b5:
8b:0f:c9:f2:a0:75:50:52:f6:9b:ac:5f:68:e0:b5:
d9:a8:7e:72:07:2a:73:fa:fa:73:32:a1:03:50:1f:
2a:fa:43:3c:ac:1e:bd:3e:af:59:23:bf:9e:a3:ae:
60:d8:98:0d:a9:40:2b:83:83:e0:03:6e:cb:be:38:
a5:7f:31:c7:83:42:a8:43:6c:cc:6a:bf:e0:7d:29:
74:78:a6:69:78:01:cf:89:05:4c:9a:a1:b7:be:5f:
db:b0:11:dc:78:79:2f:c9:c5:ed:f6:65:c0:c6:e5:
a5:4c:e2:06:c9:4b:92:3c:80:fe:b2:fb:57:ba:fb:
ba:ed:a9:77:d5:21:0b:5e:e4:a7:27:d4:1b:d2:5a:
7d:e9:5a:d2:45:ea:c1:99:02:5e:33:be:0a:51:d8:
7c:c2:21:db:ea:e6:77:51:c3:10:61:79:03:31:4c:
47:81:27:c7:d8:f9:a5:03:c4:fd:14:49:8a:b3:a6:
6b:00:2d:1c:98:7b:24:3e:11:7a:89:50:66:e5:1f:
a8:53:e2:cf:f4:b6:7d:d8:c3:77:d5:4e:07:6d:0c:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:A4:FF:32:74:51:1F:77:A4:6D:F9:4E:17:EE:DA:06:19:4F:F0
X509v3 Authority Key Identifier:
keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1c:05:35:b6:5a:d2:7f:8e:e6:e4:bc:11:06:ca:e4:cb:4c:
14:0a:65:52:5f:32:88:09:65:26:7e:88:27:cc:20:3e:0d:85:
b1:3a:e9:a8:56:2f:a1:11:60:2c:84:c0:a9:71:8e:c6:7e:c6:
2e:c2:d2:7f:07:57:c9:05:0d:22:4e:b6:28:a3:53:c9:4e:19:
07:2c:93:74:46:6c:9e:fa:3f:db:07:78:f8:b1:1e:b6:9a:3e:
e7:27:24:cc:30:dd:9a:9c:d8:1c:a5:57:78:af:a9:9d:40:43:
cc:c6:a7:38:d9:7f:08:bf:19:f2:90:f4:45:c0:03:5a:bc:4b:
37:84:dc:bb:46:bd:e1:56:28:32:cf:df:5b:4c:e2:ea:50:c4:
b0:7c:93:53:45:e2:73:10:a1:b5:25:36:92:69:6b:27:2a:e6:
75:83:89:fd:c4:36:ee:72:13:4d:4e:a4:a8:b1:71:38:a4:ac:
76:50:41:01:6c:ac:05:62:d8:e3:59:1b:83:15:f3:68:94:20:
52:95:9e:c0:26:6a:66:13:8c:e9:1c:6f:ff:39:1c:c4:2b:99:
9e:f0:f8:0a:76:26:ba:f7:b9:c6:a0:ac:ff:69:97:f9:e4:27:
15:50:b1:41:52:69:e7:17:9d:9d:6d:df:33:2e:6d:06:69:62:
68:e3:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:44:13 2026 by rpki-client