
Error: rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
File: FF962D3BC2259181BF6817D40CC381E0150C9740.mft (raw, json)
Hash identifier: +SKcV68CSwjzwuqN/t8+ivo2sIq/R5cGres49DsH60g=
Subject key identifier: 38:43:28:70:13:C0:3E:76:9F:03:3B:D8:11:76:D4:92:36:72:3B:EC
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Certificate issuer: /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial: 28B99B770B945A81504A601F2C71D360A8F20760
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
Manifest number: B2
Signing time: Sat 22 Aug 2026 15:50:00 +0000
Manifest this update: Sat 22 Aug 2026 15:45:00 +0000
Manifest next update: Sun 23 Aug 2026 15:50:00 +0000
Files and hashes: 1: 323830343a363432343a343030303a3a2f33342d3334203d3e20323639343039.roa (hash: 5pxTllfSSt39mrxpVTOopwx7Bij3QiO0PqFkE1xkqQY=)
2: 323830343a363432343a633030303a3a2f33342d3334203d3e20323639343039.roa (hash: O59wtkuy6u0ZVeQCC00YngWbDFRQUpm6R6K0XynqQh8=)
3: 323830343a363432343a3a2f33342d3334203d3e20323639343039.roa (hash: sf5SXhnLU4Nw6eKPl0d1hf1rN7Rp9gXfzp+xC38e2Pg=)
4: 323830343a363432343a383030303a3a2f33342d3334203d3e20323639343039.roa (hash: DwyH3PhhBD/actJ91LZABdKNMXC9gQo5/ZuoKZ3pikQ=)
5: 34352e3138362e33372e302f32342d3234203d3e20323639343039.roa (hash: oIaZrYryCuTfcS7ezvxjpMrCO9TWP/j5XCp7eqlLV3w=)
6: 323830343a363432343a3a2f33322d3332203d3e20323639343039.roa (hash: ZO6/23bqjocA9sSLap8Xp+x9XiQi7HCvwyuhk/UoVm4=)
7: 34352e3138362e33392e302f32342d3234203d3e20323639343039.roa (hash: liydYvSVwBN4q9o8xLGuYXfeSRP2Qh/NhObMUijbrTY=)
8: 34352e3138362e33362e302f32342d3234203d3e20323639343039.roa (hash: EIcvQ0buFOAwHfOIicaDOyMjPbxCZdtF0kVrwsCnG80=)
9: 34352e3138362e33362e302f32332d3233203d3e20323639343039.roa (hash: mGrFcNzSLWR0WLO+pzrhyeytcisd01niXadluRtEl7o=)
10: 34352e3138362e33382e302f32342d3234203d3e20323639343039.roa (hash: 5vI0UwOnOEhYwFadfBwIP1Iv5O3PJHFtKnGN/a3zS6M=)
11: FF962D3BC2259181BF6817D40CC381E0150C9740.crl (hash: mAqYrqMkCeX4oDjKZq1QQjxbz2sg/7BBl0fAk/IwhvM=)
12: 34352e3138362e33362e302f32322d3232203d3e20323639343039.roa (hash: ONzqWUxNW04zvvJyxNVfVNsrc7NgBnjZvqVCP2OSs7I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 15:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b9:9b:77:0b:94:5a:81:50:4a:60:1f:2c:71:d3:60:a8:f2:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Validity
Not Before: Aug 22 15:45:00 2026 GMT
Not After : Aug 23 15:50:00 2026 GMT
Subject: CN=3082010A0282010100AC39302134FD8C634985DA9EAE1A56A87AF577E069BE447800AB44795959869A3197E252A3E20A1283E47669F73A1DBC24A43E51F9C149AC116F1E6C591C4844FFED43AB0636D178419B5B71DF36940D6F81009BE28A03521F10DA449766D603BD2AF4B46A5D2DC4778A1423AED77AF8A251103A404FCBFC92E17B7ADF3402C06FDCBD40C63EC8AC716CBCCF8729863A74A865628AC5FA02919EA802B165E2770893F034B42A663C08A9EEDCB656AFC426260949F9BFDDACDA432DC139617AFA987DC3331BE75F0234245D18C569A208EFE1EC038908A9770225F0FBB4B46EC30736ABE8DFBC70737B00D6BFCE1E6E1E04639331CA718A1EB07D126C3C9A0C8D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:30:21:34:fd:8c:63:49:85:da:9e:ae:1a:
56:a8:7a:f5:77:e0:69:be:44:78:00:ab:44:79:59:
59:86:9a:31:97:e2:52:a3:e2:0a:12:83:e4:76:69:
f7:3a:1d:bc:24:a4:3e:51:f9:c1:49:ac:11:6f:1e:
6c:59:1c:48:44:ff:ed:43:ab:06:36:d1:78:41:9b:
5b:71:df:36:94:0d:6f:81:00:9b:e2:8a:03:52:1f:
10:da:44:97:66:d6:03:bd:2a:f4:b4:6a:5d:2d:c4:
77:8a:14:23:ae:d7:7a:f8:a2:51:10:3a:40:4f:cb:
fc:92:e1:7b:7a:df:34:02:c0:6f:dc:bd:40:c6:3e:
c8:ac:71:6c:bc:cf:87:29:86:3a:74:a8:65:62:8a:
c5:fa:02:91:9e:a8:02:b1:65:e2:77:08:93:f0:34:
b4:2a:66:3c:08:a9:ee:dc:b6:56:af:c4:26:26:09:
49:f9:bf:dd:ac:da:43:2d:c1:39:61:7a:fa:98:7d:
c3:33:1b:e7:5f:02:34:24:5d:18:c5:69:a2:08:ef:
e1:ec:03:89:08:a9:77:02:25:f0:fb:b4:b4:6e:c3:
07:36:ab:e8:df:bc:70:73:7b:00:d6:bf:ce:1e:6e:
1e:04:63:93:31:ca:71:8a:1e:b0:7d:12:6c:3c:9a:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:28:70:13:C0:3E:76:9F:03:3B:D8:11:76:D4:92:36:72:3B:EC
X509v3 Authority Key Identifier:
keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2f:5c:44:41:24:4e:40:7d:57:10:d8:b6:2a:69:5d:75:00:
78:7d:4f:b3:70:cf:29:82:83:55:0d:5a:9f:fd:b6:a4:e5:be:
e8:c5:f6:3e:a7:50:a5:f7:95:72:61:8b:c9:cf:50:74:f6:0c:
f7:1c:50:a4:11:ae:bc:96:d0:53:bc:20:f5:32:35:6e:da:52:
30:63:93:83:1c:41:6e:5d:af:a8:ad:80:1d:ad:99:ee:94:22:
7d:6c:f7:06:e1:6c:8e:24:d9:9a:5d:77:ec:be:28:95:cf:cd:
5f:c6:7c:94:02:46:ed:45:78:b7:b7:83:e4:16:ef:70:ba:d4:
74:0e:1d:2c:4f:05:3d:9a:a1:51:48:c3:83:e0:47:6e:dc:ca:
c5:86:01:f5:a9:80:64:bc:4e:ac:b7:28:6a:67:eb:70:c3:d4:
e8:18:1e:51:0e:f7:46:30:39:7a:4b:dc:5d:4c:25:c2:4d:3f:
71:7f:3b:f6:c8:8d:1b:53:98:c1:2c:15:69:90:4a:81:bf:75:
41:d2:0d:ad:e7:f9:33:f1:55:71:71:49:b5:e5:25:38:eb:08:
3e:05:1f:c2:09:17:bf:3c:87:83:a3:60:2c:bf:89:3f:de:c9:
b5:68:f7:7d:86:cb:97:83:9f:4f:60:0f:2c:80:12:8f:76:d9:
cc:e9:e8:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:23:26 2026 by rpki-client