
Error: rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json)
Hash identifier: y+57GgMuzQT9jFPsEuGi1dN9qYbjPRRtvJNx/zQRHGg=
Subject key identifier: 58:1D:08:4C:94:1B:11:75:FC:EC:05:0E:3A:1A:6C:B0:D0:25:95:C5
Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Certificate serial: 6E8E2DC822DF4FB8FE8F829DFE45C9201B79F083
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
Manifest number: 048D
Signing time: Sun 23 Aug 2026 15:21:40 +0000
Manifest this update: Sun 23 Aug 2026 15:16:40 +0000
Manifest next update: Mon 24 Aug 2026 18:41:40 +0000
Files and hashes: 1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: +fidGeveYYJFuPV6TNJAmiHWC5Gfl3uMa2wM1L974LE=)
2: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=)
3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=)
4: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 18:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8e:2d:c8:22:df:4f:b8:fe:8f:82:9d:fe:45:c9:20:1b:79:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Validity
Not Before: Aug 23 15:16:40 2026 GMT
Not After : Aug 24 18:41:40 2026 GMT
Subject: CN=581D084C941B1175FCEC050E3A1A6CB0D02595C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:72:72:f5:7e:07:44:d4:46:66:3a:5e:84:
8f:d9:63:d3:8a:25:68:08:bf:92:05:7b:ff:fb:40:
ac:66:99:f6:bf:d1:fa:9f:e7:31:ae:66:23:67:7a:
54:c5:3e:79:8c:d2:66:e5:b5:7b:f8:a2:62:ef:f0:
80:bd:6c:9f:08:f9:17:f5:90:89:19:a3:88:4a:1c:
17:f5:ea:2a:4f:be:f5:ac:0e:ab:68:de:7b:1a:d4:
a4:4c:f8:99:80:45:fb:29:88:d8:5d:89:1c:1a:38:
b9:d7:64:b1:69:78:44:e1:ad:fb:25:b4:46:0f:af:
16:4e:85:a1:fe:ec:3c:0f:a4:cd:cc:ac:77:02:38:
3b:b9:cc:51:cf:ad:76:70:0f:68:8d:d9:22:88:c0:
02:cf:c7:a4:c5:cc:c4:7d:ec:ba:9e:d7:2e:79:3f:
f7:d8:3e:0f:3b:0d:ac:64:61:6e:78:43:90:c8:b2:
d6:c7:d9:00:f4:e0:37:be:5c:ec:a5:36:74:9f:42:
22:b3:67:ac:8b:51:2e:ec:69:e1:50:2f:b2:e9:f5:
9e:f3:d5:c0:60:eb:51:28:96:b1:86:aa:34:0d:57:
64:b0:d8:58:6c:89:c5:b4:23:e7:98:cb:16:33:b3:
c6:61:3f:16:ea:ac:4f:5a:b0:98:23:84:d2:df:25:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:08:4C:94:1B:11:75:FC:EC:05:0E:3A:1A:6C:B0:D0:25:95:C5
X509v3 Authority Key Identifier:
keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:43:74:d2:57:45:ba:6f:c1:0a:bc:4d:58:2b:35:2f:27:
9b:27:37:1b:6c:1a:91:b2:0b:0e:5d:9b:98:cf:ef:61:a8:04:
44:1a:92:29:e9:cf:4f:f2:0d:eb:de:28:fa:0a:0d:f6:3e:54:
5e:bc:1c:83:4b:b0:31:35:f3:ec:30:a1:fa:f9:3f:5f:22:4e:
e2:cf:52:f9:60:2b:6c:d0:4f:ae:6f:29:99:c1:d6:85:38:f0:
f8:32:9f:58:06:8d:ef:d7:9b:26:ab:20:34:95:18:4d:e3:af:
c4:6b:f3:0c:1d:98:47:b2:f9:39:a6:e7:44:54:bc:3c:9d:80:
2f:28:06:b1:23:fc:63:5c:6b:8c:34:d9:d8:20:14:b7:13:0a:
0f:38:fb:9d:65:3d:9f:b1:e8:ac:81:81:c6:eb:ee:ea:12:18:
6c:c4:19:e1:ad:00:fd:e6:d4:57:8a:75:6a:2c:9e:80:b2:57:
04:b0:f4:dd:b3:10:c3:79:8c:a2:2b:9d:0e:f0:ec:91:8e:72:
6c:0b:9c:35:52:a4:e6:91:65:54:8f:a4:6c:75:15:0d:4e:7f:
55:f5:c0:de:66:c4:d9:bc:e5:4e:2e:0d:6b:a8:2d:46:6b:66:
a8:2c:a6:f2:2c:10:08:cb:eb:ed:70:e6:19:9f:7f:1f:be:7d:
1f:6c:b5:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbo4tyCLfT7j+j4Kd/kXJIBt58IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC
RjdCQjJFRTAeFw0yNjA4MjMxNTE2NDBaFw0yNjA4MjQxODQxNDBaMDMxMTAvBgNV
BAMTKDU4MUQwODRDOTQxQjExNzVGQ0VDMDUwRTNBMUE2Q0IwRDAyNTk1QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKnJy9X4HRNRGZjpehI/ZY9OK
JWgIv5IFe//7QKxmmfa/0fqf5zGuZiNnelTFPnmM0mbltXv4omLv8IC9bJ8I+Rf1
kIkZo4hKHBf16ipPvvWsDqto3nsa1KRM+JmARfspiNhdiRwaOLnXZLFpeEThrfsl
tEYPrxZOhaH+7DwPpM3MrHcCODu5zFHPrXZwD2iN2SKIwALPx6TFzMR97Lqe1y55
P/fYPg87DaxkYW54Q5DIstbH2QD04De+XOylNnSfQiKzZ6yLUS7saeFQL7Lp9Z7z
1cBg61EolrGGqjQNV2Sw2FhsicW0I+eYyxYzs8ZhPxbqrE9asJgjhNLfJWsDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWB0ITJQbEXX87AUOOhpssNAllcUwHwYDVR0j
BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy
VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx
MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D
RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjgBDdNJXRbpvwQq8TVgrNS8nmyc3G2wakbILDl2bmM/vYagERBqSKenPT/IN
694o+goN9j5UXrwcg0uwMTXz7DCh+vk/XyJO4s9S+WArbNBPrm8pmcHWhTjw+DKf
WAaN79ebJqsgNJUYTeOvxGvzDB2YR7L5OabnRFS8PJ2ALygGsSP8Y1xrjDTZ2CAU
txMKDzj7nWU9n7HorIGBxuvu6hIYbMQZ4a0A/ebUV4p1aiyegLJXBLD03bMQw3mM
oiudDvDskY5ybAucNVKk5pFlVI+kbHUVDU5/VfXA3mbE2bzlTi4Na6gtRmtmqCym
8iwQCMvr7XDmGZ9/H759H2y1WQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:49:26 2026 by rpki-client