
Error: rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
File: 97A621E397E2627D02EB77E74594261CF2F5C6EC.mft (raw, json)
Hash identifier: diIiXWJst6fidVFFxzxwK0cq8FHvYHIB4I6gtetQdow=
Subject key identifier: 1B:34:B9:D5:DB:5F:11:27:D5:8C:97:F5:C3:1C:62:FE:83:7A:80:11
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Certificate issuer: /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial: 149D66EF79080EE17F2E58BFA4E4ED9AE755E586
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
Manifest number: C4
Signing time: Sun 23 Aug 2026 10:14:52 +0000
Manifest this update: Sun 23 Aug 2026 10:09:52 +0000
Manifest next update: Mon 24 Aug 2026 10:37:52 +0000
Files and hashes: 1: 323830343a326664383a3a2f33322d3332203d3e20323634393135.roa (hash: 4/p7iktfPZ3FzEJGJwgI4xXCTRD8fUcxbS4cMbtli5o=)
2: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (hash: 2VuK46iw1ehIan4E8MnSlBaremuJkCzXFvgcxanIJ5M=)
3: 323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa (hash: QBAKlTf2mKg3yjcunYnFCZHVLafFX4ne+8u6f0t9+rc=)
4: 3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa (hash: KZQG8wj6TYi2CfzKF/1jrVXB3jmUvEl7aUcEi8vWMUQ=)
5: 3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa (hash: XA9ceTvb07vUlnV9erA1d0J8kgmyX0wxxjKJSR5SI2Y=)
6: 97A621E397E2627D02EB77E74594261CF2F5C6EC.crl (hash: iiKlHiCcDNH3Zlso2x7EBZHhnKR3WpIlfJHYBLPS5rc=)
7: 3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa (hash: tLlIXTuNL0W9CIFpRG+vW6BjunKNrsFHx5CzAjshXDA=)
8: 323830343a326664383a633030303a3a2f33342d3334203d3e20323634393135.roa (hash: 3l932b8sD2IG7ogdIGIH+UQ02/QuaxzV48ra/jugaIw=)
9: 3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (hash: 5NQnhbGHAeve84zFV9On8w+HVykcUfOplHsa0re1YTI=)
10: 3136382e3232382e3232302e302f32342d3234203d3e20323634393135.roa (hash: 5laV255IHJuhWwYzF7CM2fbU79xFqNC5/O/lkLIxdSY=)
11: 3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (hash: x1wE/e5UEa6cvf3XKi0JfIQEcyfwLsuJw3Hg1mnZtsw=)
12: 323830343a326664383a3a2f33342d3334203d3e20323634393135.roa (hash: leEwpeLMRXn0tMxoWFZQ2M9mzfDmlPlUVYNpvia07Cc=)
13: 323830343a326664383a383030303a3a2f33342d3334203d3e20323634393135.roa (hash: xUbeDcYbgPjUJaUOMTW7O5FilpjrQ0brVMLBRWxLNzE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9d:66:ef:79:08:0e:e1:7f:2e:58:bf:a4:e4:ed:9a:e7:55:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Validity
Not Before: Aug 23 10:09:52 2026 GMT
Not After : Aug 24 10:37:52 2026 GMT
Subject: CN=1B34B9D5DB5F1127D58C97F5C31C62FE837A8011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:f5:a4:1c:a8:31:9e:dd:29:81:30:ed:2e:
ee:29:14:d3:9f:12:e2:2b:fc:d9:d1:69:39:c6:55:
04:ad:97:82:b2:ba:eb:e3:91:90:57:35:09:45:fc:
e5:3d:96:44:2e:d9:c5:dc:37:65:65:36:e4:98:d0:
00:98:7f:b0:70:db:b7:44:74:9b:08:a2:2d:75:dc:
a3:07:16:42:d8:5f:21:ee:3b:52:07:3f:87:1d:96:
99:02:21:b8:88:c7:d6:20:cb:77:69:8d:e3:92:29:
8f:d7:d5:64:e3:56:b7:e7:ea:01:85:58:9f:ff:22:
05:0f:4e:0e:ac:1b:2b:03:b6:78:d8:44:05:58:4a:
c8:7c:60:48:73:c5:f2:42:06:86:51:5b:1d:d5:6b:
b1:fe:19:3c:a6:2b:6f:b9:14:08:32:e1:07:f1:14:
90:fc:fe:a6:cc:e4:69:f6:6c:ca:98:ae:09:77:b3:
3b:d0:9d:25:ec:28:80:9d:7f:83:58:84:dd:62:c2:
50:f7:bd:5d:f6:57:9e:e7:bd:58:5e:44:5a:e8:85:
64:f0:eb:5b:2e:5b:5a:c2:08:07:29:25:d0:b2:77:
68:4f:58:2f:69:9e:80:3e:ff:92:2d:20:fd:a9:8e:
fd:55:e2:3b:26:e9:b7:35:b2:1b:f3:0a:ca:f6:c5:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:B9:D5:DB:5F:11:27:D5:8C:97:F5:C3:1C:62:FE:83:7A:80:11
X509v3 Authority Key Identifier:
keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:87:5f:6e:4c:9e:38:75:6c:8e:e8:d9:91:c9:12:e2:4f:ed:
3c:e9:ef:63:65:b0:ec:5e:07:de:35:98:f0:d8:46:6c:da:9f:
ba:e3:c6:30:8f:5a:13:a5:1c:1e:d2:e0:f6:94:fe:c9:c0:f5:
71:a3:b7:40:88:05:ca:c5:67:32:22:1a:2d:84:4a:8a:02:fd:
f4:c3:f7:70:9a:d4:0b:f7:99:05:aa:80:26:2e:5d:a0:16:c0:
ed:78:98:32:4f:44:94:e6:0e:ac:1f:cf:cf:48:32:5e:59:fa:
40:1a:86:ce:9c:b7:d7:f8:48:3c:25:8f:8c:3a:96:d5:db:fd:
03:96:a2:49:6c:5c:81:10:8d:00:44:e8:e2:80:3a:79:f4:6d:
75:2a:b8:10:b0:9a:16:44:2b:5c:fe:98:cf:f3:fc:f8:ff:e9:
1e:8f:73:20:66:73:34:f0:ac:50:47:e7:1b:96:56:a7:19:a5:
51:b9:bf:96:29:d4:b7:52:e5:ce:fd:b6:22:4e:5c:41:85:13:
9b:cd:dd:5a:69:12:da:1a:5c:a5:03:0b:b6:df:aa:ce:b7:78:
ae:91:e6:3b:01:58:d3:ce:6a:42:20:e1:3b:17:71:8a:02:f5:
fa:cf:4d:5f:33:43:f3:f5:ee:fa:cc:1d:88:0c:06:d6:a0:33:
b8:89:be:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFJ1m73kIDuF/Lli/pOTtmudV5YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdBNjIxRTM5N0UyNjI3RDAyRUI3N0U3NDU5NDI2MUNG
MkY1QzZFQzAeFw0yNjA4MjMxMDA5NTJaFw0yNjA4MjQxMDM3NTJaMDMxMTAvBgNV
BAMTKDFCMzRCOUQ1REI1RjExMjdENThDOTdGNUMzMUM2MkZFODM3QTgwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH/WkHKgxnt0pgTDtLu4pFNOf
EuIr/NnRaTnGVQStl4KyuuvjkZBXNQlF/OU9lkQu2cXcN2VlNuSY0ACYf7Bw27dE
dJsIoi113KMHFkLYXyHuO1IHP4cdlpkCIbiIx9Ygy3dpjeOSKY/X1WTjVrfn6gGF
WJ//IgUPTg6sGysDtnjYRAVYSsh8YEhzxfJCBoZRWx3Va7H+GTymK2+5FAgy4Qfx
FJD8/qbM5Gn2bMqYrgl3szvQnSXsKICdf4NYhN1iwlD3vV32V57nvVheRFrohWTw
61suW1rCCAcpJdCyd2hPWC9pnoA+/5ItIP2pjv1V4jsm6bc1shvzCsr2xT21AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGzS51dtfESfVjJf1wxxi/oN6gBEwHwYDVR0j
BBgwFoAUl6Yh45fiYn0C63fnRZQmHPL1xuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC85N0E2MjFFMzk3RTI2MjdEMDJFQjc3RTc0NTk0MjYxQ0YyRjVDNkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3QTYyMUUzOTdFMjYyN0Qw
MkVCNzdFNzQ1OTQyNjFDRjJGNUM2RUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3a2MvMC85
N0E2MjFFMzk3RTI2MjdEMDJFQjc3RTc0NTk0MjYxQ0YyRjVDNkVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc4dfbkyeOHVsjujZkckS4k/tPOnvY2Ww7F4H3jWY8NhGbNqfuuPGMI9aE6Uc
HtLg9pT+ycD1caO3QIgFysVnMiIaLYRKigL99MP3cJrUC/eZBaqAJi5doBbA7XiY
Mk9ElOYOrB/Pz0gyXln6QBqGzpy31/hIPCWPjDqW1dv9A5aiSWxcgRCNAETo4oA6
efRtdSq4ELCaFkQrXP6Yz/P8+P/pHo9zIGZzNPCsUEfnG5ZWpxmlUbm/linUt1Ll
zv22Ik5cQYUTm83dWmkS2hpcpQMLtt+qzrd4rpHmOwFY085qQiDhOxdxigL1+s9N
XzND8/Xu+swdiAwG1qAzuIm+sQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:16 2026 by rpki-client