
Error: rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier: tGHZapph8lhRSOeWA18vpbxn2KTHxlwbj5quq8/2eNU=
Subject key identifier: 00:5E:EF:88:D3:74:4D:78:9E:77:4F:6E:37:5C:7B:ED:82:38:26:F7
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer: /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial: 448A4612C6670CCCD8EC3D9142BC047B73D4927B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number: 0587
Signing time: Fri 30 Oct 2026 20:00:00 +0000
Manifest this update: Fri 30 Oct 2026 19:55:00 +0000
Manifest next update: Sat 31 Oct 2026 20:00:00 +0000
Files and hashes: 1: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=)
2: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=)
3: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=)
4: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: 6mXhJtRvjSEIgFUUiLlob2avhD5IklqXkSLqmiqCB8k=)
5: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: 8Kr4gwXED9RVv+g1rPgBb+0d/xp/louMIu6y5DEXIrU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8a:46:12:c6:67:0c:cc:d8:ec:3d:91:42:bc:04:7b:73:d4:92:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Validity
Not Before: Oct 30 19:55:00 2026 GMT
Not After : Oct 31 20:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:e8:ab:7d:dc:ea:f5:6a:5c:e7:0c:52:7e:
4c:f0:17:19:36:f6:e7:a1:45:6f:84:d4:73:c7:8c:
da:3f:35:4a:a2:90:b3:45:8c:7e:f5:df:b5:de:6b:
d3:61:f8:58:4c:5a:e7:a2:56:59:9d:74:f9:09:c3:
78:0d:69:48:cc:eb:e7:3c:0d:5f:c7:8f:2c:e6:da:
a7:b4:a0:39:42:f2:32:75:e6:5e:72:fe:46:2b:ff:
8a:6a:9c:f1:06:f7:ff:74:41:a8:73:3f:fe:cc:8f:
80:2f:7c:71:e4:cf:29:33:5d:60:6a:08:e7:d9:a7:
52:ed:c0:2c:b0:d1:52:d9:4b:d2:d9:bc:6d:ae:cd:
60:19:8c:cb:1b:49:39:23:2f:9e:68:6d:03:8a:03:
14:cd:67:20:19:0d:be:4e:e1:9f:ea:04:26:87:5f:
72:8e:dd:e3:ad:f7:8a:3b:28:f4:d5:47:fe:99:e6:
ea:6e:19:07:32:43:59:60:3f:a8:0c:af:19:dd:fb:
75:09:be:1e:c7:eb:e1:d6:b1:9f:85:8d:3a:ee:5c:
49:17:ed:76:f1:28:b0:e7:b1:e0:d6:80:62:ec:7c:
cf:77:5c:a1:e8:a3:59:e8:cc:b9:63:4b:cd:e3:f2:
c5:6b:df:d6:d0:32:2c:78:83:a8:bb:da:03:9e:d7:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:EF:88:D3:74:4D:78:9E:77:4F:6E:37:5C:7B:ED:82:38:26:F7
X509v3 Authority Key Identifier:
keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dd:93:59:9b:27:ef:87:dd:74:68:78:a7:f2:78:55:34:26:
45:51:78:e6:b8:97:7d:1b:ff:9b:b6:60:e6:08:c3:80:47:21:
36:71:a1:f3:12:89:3a:87:49:25:1f:7e:15:93:dc:79:d8:b6:
34:d6:53:c3:23:08:a8:73:6d:5f:29:e7:97:f8:40:02:2a:15:
ff:b5:23:53:31:8c:24:87:e0:f2:9c:a2:ee:d9:19:07:ba:f6:
0a:cb:23:80:dd:82:a9:24:0a:40:21:df:11:86:d4:ca:16:f3:
76:8c:68:aa:62:52:3b:66:75:6b:72:72:9a:da:e5:a1:20:db:
aa:24:3b:bc:0e:7f:bd:aa:b5:97:7d:cf:14:a3:25:d3:f7:12:
31:a7:02:cc:0a:40:89:cc:ae:76:7e:df:5d:06:c8:05:18:4d:
1d:04:10:21:68:94:20:f9:9c:29:66:a7:db:fb:35:43:9a:76:
14:fd:92:b1:de:90:a8:d2:77:92:a5:89:ff:18:81:2f:1b:98:
08:50:09:a4:13:98:db:bc:f6:6f:f6:9e:16:98:bc:5c:0b:69:
cb:13:0d:ae:7e:7b:6e:b4:1d:f7:40:72:17:06:6c:24:a0:90:
2a:03:19:1f:c6:9f:6b:62:cf:4d:67:c3:86:bd:ff:0c:3b:34:
7a:0e:1d:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:20:15 2026 by rpki-client