
Error: rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier: 3P3QfD/nXnh3WW+irwF10r+r8Z4a/6oWWwMohBSY5P4=
Subject key identifier: 35:BD:2D:D7:03:B9:C6:17:86:DC:23:61:83:BA:00:6D:67:47:54:D8
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer: /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial: 09D18E4E3E2983B6CA42FFEA1B77CC77D57BD06E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number: 0295
Signing time: Tue 25 Aug 2026 05:03:23 +0000
Manifest this update: Tue 25 Aug 2026 04:58:23 +0000
Manifest next update: Wed 26 Aug 2026 08:52:23 +0000
Files and hashes: 1: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: tljc+I0lzZxmfXT/GTTIbeFDEF0AbDPvxxOtTLrWDAo=)
2: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: dig3xRrHhM4M8UKI/4BtOWiD1x9xi/FcK98aLvq0eA0=)
3: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: b9QIUgJtUhc1DnIcA/Gdx2o7O0dNKcyCNg/LY9BZbiU=)
4: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: rwsjpt3v/cKN6ybsz3/VWV2Cp5xllHQ1w4JsPmiji1A=)
5: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: kpXbj/VFh2puGbD2VjTYD77oB6crDJaCbIFxZqmqgFA=)
6: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: Qajh9SgmhOLwen8Do03xNwlcQDXX+9U0uvI6DViyQAE=)
7: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: DZRqMFV0kn51Txx6M2zwoJDkH5At0vKiB0hV6L/6a6o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 08:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d1:8e:4e:3e:29:83:b6:ca:42:ff:ea:1b:77:cc:77:d5:7b:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Validity
Not Before: Aug 25 04:58:23 2026 GMT
Not After : Aug 26 08:52:23 2026 GMT
Subject: CN=35BD2DD703B9C61786DC236183BA006D674754D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:20:e1:d8:66:70:66:99:b2:f2:18:86:2a:
1b:ee:d6:e6:a8:54:b1:04:2f:0a:7d:10:a4:f4:57:
cd:91:91:2e:f1:94:f1:ec:3b:21:3e:c9:6d:9f:5b:
52:f3:d6:25:0b:bd:e9:7f:3b:1c:32:c1:75:08:2d:
e1:0f:7a:f0:1d:25:19:85:50:d8:7e:50:b1:05:23:
a5:b6:9d:b1:42:0a:b9:52:73:9f:e1:3c:85:31:b8:
0d:2e:04:cb:49:50:79:71:c9:f6:a6:8d:31:db:40:
f7:52:f3:90:19:50:e1:93:f8:89:4f:78:fe:f6:41:
b1:77:e8:e4:94:e6:f2:be:9c:dd:8d:db:31:f0:99:
bb:32:7c:ba:b5:9e:96:dc:38:a0:1e:2d:19:af:5b:
4d:07:2b:12:af:90:a3:59:3e:89:ab:e8:00:fe:7e:
77:c1:49:f9:e1:8e:c4:1f:99:15:d7:75:32:00:bd:
91:86:31:58:fc:1f:85:de:99:4d:58:ca:cf:30:be:
de:f5:99:ad:63:c3:99:67:76:ab:15:88:8d:8c:d1:
15:f9:47:23:21:38:91:b4:de:3b:dc:f1:a2:49:93:
c2:d4:11:ec:31:00:3c:71:cd:80:a2:be:0c:cb:ec:
40:96:67:9d:cf:1e:3e:6c:cf:01:ad:e0:5a:5b:28:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:2D:D7:03:B9:C6:17:86:DC:23:61:83:BA:00:6D:67:47:54:D8
X509v3 Authority Key Identifier:
keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:85:8b:34:56:e7:d1:f7:97:50:8d:84:e9:7d:be:92:33:
1e:85:d3:35:b7:6b:6b:49:df:78:d3:f8:5c:3b:9b:12:b0:b8:
ed:e0:3e:a8:6f:e7:97:08:9c:cd:8b:ba:97:e1:0f:71:fa:07:
77:c0:42:6c:db:3e:d6:84:c6:33:20:b7:d9:70:22:e8:db:48:
21:a4:a6:3e:79:f1:fc:1a:49:12:07:1c:21:dd:b1:85:4c:0d:
b9:95:25:0b:17:01:f7:58:69:3e:4f:21:a9:08:b1:af:a6:40:
58:52:fc:39:1b:5a:99:8f:20:b8:3e:c4:d3:a1:78:9d:ca:37:
47:2b:9a:26:64:7a:70:6d:40:fe:ff:d7:b0:8c:67:80:3c:df:
bb:0f:83:e6:cb:14:ef:ee:89:74:94:a7:eb:f3:52:21:7c:f2:
72:c7:6a:29:e1:7a:c6:c4:b2:04:5b:8e:4d:3a:95:ab:ba:3a:
e8:34:66:79:88:df:95:6e:01:02:14:9f:1e:70:9f:7f:5c:e3:
18:73:b6:db:e6:ba:b0:66:14:c6:a4:a2:9b:15:ed:a4:3c:2d:
af:47:50:26:0b:3e:0f:73:c8:74:33:78:bf:32:f3:a1:d1:f4:
db:d2:d5:3e:d3:d7:9d:84:5a:0e:55:6f:12:58:9f:ef:1f:4b:
d6:0e:83:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCdGOTj4pg7bKQv/qG3fMd9V70G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNjA4MjUwNDU4MjNaFw0yNjA4MjYwODUyMjNaMDMxMTAvBgNV
BAMTKDM1QkQyREQ3MDNCOUM2MTc4NkRDMjM2MTgzQkEwMDZENjc0NzU0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QyDh2GZwZpmy8hiGKhvu1uao
VLEELwp9EKT0V82RkS7xlPHsOyE+yW2fW1Lz1iULvel/OxwywXUILeEPevAdJRmF
UNh+ULEFI6W2nbFCCrlSc5/hPIUxuA0uBMtJUHlxyfamjTHbQPdS85AZUOGT+IlP
eP72QbF36OSU5vK+nN2N2zHwmbsyfLq1npbcOKAeLRmvW00HKxKvkKNZPomr6AD+
fnfBSfnhjsQfmRXXdTIAvZGGMVj8H4XemU1Yys8wvt71ma1jw5lndqsViI2M0RX5
RyMhOJG03jvc8aJJk8LUEewxADxxzYCivgzL7ECWZ53PHj5szwGt4FpbKMtFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNb0t1wO5xheG3CNhg7oAbWdHVNgwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQyS2EvMC9D
QjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiU6FizRW59H3l1CNhOl9vpIzHoXTNbdra0nfeNP4XDubErC47eA+qG/nlwic
zYu6l+EPcfoHd8BCbNs+1oTGMyC32XAi6NtIIaSmPnnx/BpJEgccId2xhUwNuZUl
CxcB91hpPk8hqQixr6ZAWFL8ORtamY8guD7E06F4nco3RyuaJmR6cG1A/v/XsIxn
gDzfuw+D5ssU7+6JdJSn6/NSIXzycsdqKeF6xsSyBFuOTTqVq7o66DRmeYjflW4B
AhSfHnCff1zjGHO22+a6sGYUxqSimxXtpDwtr0dQJgs+D3PIdDN4vzLzodH029LV
PtPXnYRaDlVvElif7x9L1g6D8A==
-----END CERTIFICATE-----
Generated at Wed Aug 26 00:18:56 2026 by rpki-client