
Error: rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
File: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft (raw, json)
Hash identifier: OkAXVrslXElva7N/3r4ySxUMxShk+4UzEygglj1EU2I=
Subject key identifier: 03:1D:68:13:13:EC:EE:E2:74:4A:EA:0B:4C:57:13:4E:BE:0F:11:6F
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Certificate issuer: /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial: 2205AB3DEC2A6EEF622714BDC8AADA17F9CEED53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
Manifest number: 0521
Signing time: Sun 23 Aug 2026 20:00:00 +0000
Manifest this update: Sun 23 Aug 2026 19:55:00 +0000
Manifest next update: Mon 24 Aug 2026 20:00:00 +0000
Files and hashes: 1: 3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (hash: tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=)
2: 3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (hash: N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=)
3: 3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (hash: QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=)
4: 221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl (hash: zkXf7AKG/lQHNjqes8h+qc3lp0C+u+BUe/uJidy+LA0=)
5: 323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (hash: 6mXhJtRvjSEIgFUUiLlob2avhD5IklqXkSLqmiqCB8k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:05:ab:3d:ec:2a:6e:ef:62:27:14:bd:c8:aa:da:17:f9:ce:ed:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Validity
Not Before: Aug 23 19:55:00 2026 GMT
Not After : Aug 24 20:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:3f:77:6c:d7:67:c9:61:14:e6:d1:5f:70:
8c:67:ad:04:a5:d8:81:4a:d2:c7:78:87:ac:b3:41:
c1:6f:ad:10:74:09:f5:c7:5b:45:36:48:0f:cf:c0:
17:9a:5e:3c:29:9f:48:85:42:0f:86:f6:19:33:c6:
66:d9:b0:1a:0d:52:74:be:d9:55:03:d5:8f:1c:52:
01:d5:b4:53:9b:c5:ca:98:93:e1:24:f9:d3:a9:47:
94:45:d5:47:b3:3b:da:b3:73:dd:af:83:28:a9:36:
06:8e:08:2e:51:36:9a:f2:d5:63:d3:75:aa:d6:83:
6c:93:19:cf:42:0b:63:ec:1a:17:a9:74:fc:46:e4:
71:44:97:c0:6a:7e:c6:da:69:8a:f6:70:73:1d:3b:
1c:e8:a1:1e:11:7e:18:d9:74:72:4c:a7:d5:31:7e:
d9:2e:32:e2:5e:55:28:29:3a:f0:70:31:8a:4f:21:
a3:d5:d5:76:b2:88:51:ca:86:be:d8:38:2e:09:47:
41:ff:1a:fc:16:b0:d9:4b:8e:ab:65:58:42:98:62:
34:6f:7b:bd:29:a7:ef:61:30:0f:69:b3:25:7d:2a:
69:33:3a:5c:c3:38:c2:9f:5b:eb:41:8e:5b:21:17:
49:5c:4c:f3:3b:c9:90:d1:89:57:17:f4:39:ec:56:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:68:13:13:EC:EE:E2:74:4A:EA:0B:4C:57:13:4E:BE:0F:11:6F
X509v3 Authority Key Identifier:
keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:3e:48:77:0b:2d:9a:96:f1:14:a9:cb:50:2e:57:53:f8:
1b:24:63:eb:4c:27:c7:8e:ff:41:40:25:5a:d9:f0:1e:47:f4:
95:26:51:59:81:2e:f6:20:26:ee:c8:dd:f7:63:f2:c3:cf:b4:
29:da:e0:58:05:08:dd:0c:b3:65:81:02:e3:15:ed:b1:5b:84:
98:2c:7e:8d:55:b4:5d:b9:b7:89:f2:51:09:32:b0:a3:d3:87:
93:8e:5d:98:fb:9a:93:2d:53:f0:05:29:7d:14:34:24:06:1a:
ab:7f:f5:c9:fe:70:06:9c:53:7c:b0:1c:a6:6e:40:17:d9:81:
37:ef:f6:a4:23:fa:44:44:1f:f1:5e:e2:4b:8e:9d:3c:5f:4d:
71:ce:9d:55:c4:52:e5:32:ea:11:f5:c3:0c:0c:39:e6:45:1a:
01:05:f2:35:2e:3a:d3:b9:b1:b3:6a:32:eb:48:e7:76:ea:db:
37:17:a2:28:2f:5b:13:2e:41:6a:cd:9e:f6:0a:0a:eb:d1:5d:
c8:b4:ab:54:cc:be:04:c2:ec:f5:1f:a0:74:dc:19:b1:77:fe:
14:02:8a:98:56:74:11:4f:fe:1b:d4:70:aa:e0:2b:aa:39:9f:
0d:22:91:ac:99:13:2a:59:3f:bb:97:7b:78:90:3a:01:e5:d6:
34:b4:63:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:26:03 2026 by rpki-client