
Error: rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
File: C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft (raw, json)
Hash identifier: W45vSif47bQOXQ+tYoq+cL6CQmqsh/OnsUa4rTndhg8=
Subject key identifier: 80:16:67:B0:B6:5E:F0:74:B6:21:9A:3D:B3:BF:92:1F:34:CE:DB:87
Authority key identifier: C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F
Certificate issuer: /CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
Certificate serial: 396EBE484395369EE0F36BE092B0E06B82DD897F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
Manifest number: 0486
Signing time: Sun 23 Aug 2026 03:47:48 +0000
Manifest this update: Sun 23 Aug 2026 03:42:48 +0000
Manifest next update: Mon 24 Aug 2026 07:33:48 +0000
Files and hashes: 1: 3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa (hash: VrphqTRM66SFG+2DpnFVWllZ4NrIE1QSfbjaHfsCUyA=)
2: C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl (hash: J+Ebfg43nX1qc0M3cOcRkHWUc60Bo5bqqkJx6+J4KvI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl
rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 07:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6e:be:48:43:95:36:9e:e0:f3:6b:e0:92:b0:e0:6b:82:dd:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
Validity
Not Before: Aug 23 03:42:48 2026 GMT
Not After : Aug 24 07:33:48 2026 GMT
Subject: CN=801667B0B65EF074B6219A3DB3BF921F34CEDB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:d7:f1:27:7d:35:35:bd:1d:b1:67:8e:aa:
fa:6a:f3:03:12:38:48:a8:dc:a3:68:67:60:c8:5a:
40:e4:8e:b5:07:a8:99:3c:3b:33:64:32:c1:22:f9:
3e:96:b0:d7:da:f9:0f:cb:de:f4:7a:3c:3a:36:1b:
c5:e1:e4:77:7a:3a:57:6c:1d:cc:23:3d:05:6a:c3:
e1:6f:9f:c9:6c:56:21:c9:b0:2c:13:77:7b:6b:c8:
57:28:1c:59:66:86:84:b8:32:0c:9a:bc:2f:30:8a:
fd:ed:b7:14:ba:d0:92:22:6f:e6:2f:53:50:b0:08:
1c:f8:65:02:8a:d9:60:86:25:14:de:b7:13:b2:c5:
66:b2:5b:32:83:44:e4:62:dd:09:22:8a:04:0f:ae:
a1:77:cb:f0:fa:fb:c7:0d:da:58:1f:8e:4b:5a:61:
f7:9b:4c:21:ca:b6:4a:0c:7e:e1:90:9b:4a:0f:b4:
cd:77:16:de:cc:aa:74:bb:6a:f2:3d:7e:c0:7a:79:
3b:b8:61:d6:77:1a:e6:e1:cd:7b:34:b5:98:11:10:
f6:64:11:e8:76:66:2f:16:10:ac:5a:a9:29:25:fc:
df:92:20:d4:54:56:25:99:ac:64:34:a0:4b:8a:5f:
35:25:72:7b:3e:cd:ee:f1:51:e7:18:73:d1:7c:0d:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:67:B0:B6:5E:F0:74:B6:21:9A:3D:B3:BF:92:1F:34:CE:DB:87
X509v3 Authority Key Identifier:
keyid:C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:d3:2a:1b:1c:8a:c6:de:e1:d2:2f:ab:f6:c4:20:9f:79:
f6:70:5a:1f:77:f8:d0:fd:14:8a:db:ae:12:28:15:e2:b2:f0:
95:9a:4a:4b:e2:ed:c8:70:64:8f:69:fe:e7:2d:d0:5d:95:c6:
f7:69:22:79:23:73:a8:e0:49:8d:d5:58:b0:10:c2:08:ad:43:
90:25:3d:e3:4b:13:8d:ff:83:fd:9f:9c:ba:bd:63:35:81:61:
60:f5:80:e1:60:c5:9f:a4:cd:4e:90:21:27:a1:07:cb:11:fe:
73:05:9a:71:43:01:be:fe:2d:6a:93:66:10:84:42:e5:f7:2c:
08:cd:5f:21:04:d9:6f:37:f8:e4:fe:84:e8:ac:0f:7f:eb:b4:
d0:9b:d3:a4:f7:5d:67:7e:4a:ad:ab:ec:83:0f:da:da:6d:d4:
2b:dc:66:13:58:71:02:3a:c7:81:1d:a1:83:ec:d4:2c:d0:ff:
fe:a3:3b:e7:5c:94:be:87:f6:9c:54:37:fc:82:fd:15:46:5e:
fb:1b:fb:34:51:66:e9:70:de:2d:ed:11:2a:69:a8:54:bd:08:
d1:eb:94:cc:33:09:47:68:31:1b:c9:18:89:70:b9:a8:53:5e:
8a:dd:63:74:51:af:bf:99:7a:be:fa:c4:4b:48:b0:54:31:ce:
a5:65:c4:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOW6+SEOVNp7g82vgkrDga4LdiX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwNkMxOTFEOEFFMzFGOURGMTRENkMxMTQ3NEJDRTU4
ODQxQUQwRjAeFw0yNjA4MjMwMzQyNDhaFw0yNjA4MjQwNzMzNDhaMDMxMTAvBgNV
BAMTKDgwMTY2N0IwQjY1RUYwNzRCNjIxOUEzREIzQkY5MjFGMzRDRURCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+9fxJ301Nb0dsWeOqvpq8wMS
OEio3KNoZ2DIWkDkjrUHqJk8OzNkMsEi+T6WsNfa+Q/L3vR6PDo2G8Xh5Hd6Olds
HcwjPQVqw+Fvn8lsViHJsCwTd3tryFcoHFlmhoS4MgyavC8wiv3ttxS60JIib+Yv
U1CwCBz4ZQKK2WCGJRTetxOyxWayWzKDRORi3QkiigQPrqF3y/D6+8cN2lgfjkta
YfebTCHKtkoMfuGQm0oPtM13Ft7MqnS7avI9fsB6eTu4YdZ3GubhzXs0tZgREPZk
Eeh2Zi8WEKxaqSkl/N+SINRUViWZrGQ0oEuKXzUlcns+ze7xUecYc9F8DVLrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgBZnsLZe8HS2IZo9s7+SHzTO24cwHwYDVR0j
BBgwFoAUxwbBkdiuMfnfFNbBFHS85YhBrQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm4yVUdITWNZSGprQ3NQcEFBaGhwR2NTOXVpVmdDM3ZleDFSVFhLeHJM
VzYvMS9DNzA2QzE5MUQ4QUUzMUY5REYxNEQ2QzExNDc0QkNFNTg4NDFBRDBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MDZDMTkxRDhBRTMxRjlE
RjE0RDZDMTE0NzRCQ0U1ODg0MUFEMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm4yVUdITWNZSGprQ3NQcEFBaGhwR2NTOXVpVmdDM3ZleDFSVFhLeHJMVzYvMS9D
NzA2QzE5MUQ4QUUzMUY5REYxNEQ2QzExNDc0QkNFNTg4NDFBRDBGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP13TKhscisbe4dIvq/bEIJ959nBaH3f40P0UituuEigV4rLwlZpKS+LtyHBk
j2n+5y3QXZXG92kieSNzqOBJjdVYsBDCCK1DkCU940sTjf+D/Z+cur1jNYFhYPWA
4WDFn6TNTpAhJ6EHyxH+cwWacUMBvv4tapNmEIRC5fcsCM1fIQTZbzf45P6E6KwP
f+u00JvTpPddZ35Kravsgw/a2m3UK9xmE1hxAjrHgR2hg+zULND//qM751yUvof2
nFQ3/IL9FUZe+xv7NFFm6XDeLe0RKmmoVL0I0euUzDMJR2gxG8kYiXC5qFNeit1j
dFGvv5l6vvrES0iwVDHOpWXERw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 10:30:59 2026 by rpki-client