
Error: rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
File: D2FC8637672F6995F171A261D51674A50FE454A6.mft (raw, json)
Hash identifier: RckL5leBNW10JN6UHkIHxWhGyH1LtAWY3Tj4oqP9kkg=
Subject key identifier: A6:20:B9:48:AD:30:7D:D7:0C:51:C9:2F:C4:4C:ED:8F:3B:42:0C:EA
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Certificate issuer: /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial: 22936AA8CE680CBD6D140316A0EFBA6B9C946BDB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
Manifest number: 0480
Signing time: Sat 22 Aug 2026 11:10:00 +0000
Manifest this update: Sat 22 Aug 2026 11:05:00 +0000
Manifest next update: Sun 23 Aug 2026 13:38:00 +0000
Files and hashes: 1: 323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (hash: xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=)
2: 323830343a346265303a383030303a3a2f33342d3334203d3e20323637333334.roa (hash: dbyHcT+WPlp5FVMKEMjK8+it8GRMeEQdQl+5GHqVSuY=)
3: 34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (hash: 1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=)
4: 323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (hash: 6FiIqFD4BA0F4EwSW3P6ekKNWYGR3g9PC/cmQmzMsCY=)
5: 34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (hash: UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=)
6: 34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (hash: YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=)
7: D2FC8637672F6995F171A261D51674A50FE454A6.crl (hash: eB2ZrZqSccGWC4yn7ZsP1raQijPBImcF9+8Z6jJ38uU=)
8: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (hash: ouAK0kg+/aVpVcCbP4bexh8VaG4XPjMUX+oO6I58BDo=)
9: 34352e3233332e3235332e302f32342d3234203d3e20323637333334.roa (hash: +RyxeuoxhIKAMJEFMFWIS8Ulh+f+4ywuY0/2h9LL3ZI=)
10: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (hash: Uc1aN6iWD8f8P9eEDgxgniCHPV3udq5wKyIMhj5Ggxw=)
11: 323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (hash: bPDjHNBUl/H6ulvwmhReA/RBgXTLcWuKJZY4ftKoDkc=)
12: 323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (hash: G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=)
13: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (hash: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=)
14: 323830343a346265303a343030303a3a2f33342d3334203d3e20323637333334.roa (hash: wrniQHnF8nS0MuQ4m91PKnaCakmlJ1TuIBqSLuoiyQk=)
15: 34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (hash: j2qGuSPvxexL96NEu1I1xCgoaChpbHCA9ZE87e2oaPQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 13:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:93:6a:a8:ce:68:0c:bd:6d:14:03:16:a0:ef:ba:6b:9c:94:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
Validity
Not Before: Aug 22 11:05:00 2026 GMT
Not After : Aug 23 13:38:00 2026 GMT
Subject: CN=A620B948AD307DD70C51C92FC44CED8F3B420CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:dc:39:cb:8d:bb:85:fd:5b:e9:16:34:92:
40:8e:5b:72:e6:6b:f0:68:8d:ca:99:28:6c:f9:0e:
66:20:ad:5a:b2:05:a7:52:19:b0:5f:ff:bc:1a:e3:
1f:f7:6c:25:bd:2a:cc:11:8d:e7:ac:6d:d8:f2:e1:
88:e0:f5:60:30:78:a5:48:67:b6:87:cf:a5:7f:40:
ff:77:ec:46:51:e4:0f:d2:a2:1d:26:bf:91:0f:84:
21:c6:2d:60:db:e1:b7:e1:64:59:d9:6a:e3:95:72:
fe:51:df:f2:c5:a1:71:86:e1:49:6c:92:28:f2:2f:
43:17:fd:be:b3:5b:9e:92:be:b7:78:0a:23:b5:33:
0f:ca:f4:70:e2:c2:bc:5b:9c:44:7c:62:a3:38:48:
3f:eb:c2:18:fb:81:20:87:bf:66:73:6c:f1:9b:1e:
7f:ed:53:5c:a6:37:03:54:2c:6b:38:14:42:a4:63:
c4:cb:5b:74:fe:1b:17:50:52:56:89:99:16:08:47:
5e:3e:93:0f:10:a8:9a:29:9d:4d:fa:16:e9:5a:de:
41:47:6e:ab:9a:34:e8:21:12:82:f6:42:60:f4:15:
db:3c:8a:43:ee:12:da:1e:07:d5:42:dc:b2:7d:49:
20:93:77:69:a9:97:13:87:21:25:82:69:5b:05:bf:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:20:B9:48:AD:30:7D:D7:0C:51:C9:2F:C4:4C:ED:8F:3B:42:0C:EA
X509v3 Authority Key Identifier:
keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:34:3d:dd:45:38:2a:a1:ea:a1:dc:71:7b:a4:ed:2a:02:13:
d4:72:03:d8:a9:dc:bc:b9:c1:33:f1:42:a9:7e:2d:f6:46:14:
d5:a7:f6:07:51:55:55:75:1d:48:d8:a2:86:f1:e7:99:81:87:
7b:9a:07:29:cf:70:d8:6a:ea:91:5d:a6:11:4f:19:d9:de:64:
f1:ae:aa:5d:94:16:7e:07:87:1a:fd:48:76:5b:c2:d1:b9:4d:
77:75:5f:d0:2a:ab:22:a3:1f:e7:d9:08:63:2e:e7:af:78:12:
f0:50:98:ba:84:e9:e0:ac:33:38:61:94:78:81:24:87:d4:28:
2c:59:5c:4f:d1:86:5d:04:e3:fb:7d:ff:e0:72:dc:58:fe:cf:
b8:76:9f:b8:a8:1e:13:2b:51:ca:ba:ff:4a:f2:29:de:1d:0e:
60:5c:53:a9:40:0d:f3:b0:bc:9a:59:7b:e4:84:bf:30:1d:da:
fc:39:e4:de:7c:a3:2c:08:a1:a1:28:e7:29:ea:27:7f:ae:67:
80:0f:72:85:78:6b:03:bc:80:9a:85:27:1d:dc:9b:00:46:47:
51:91:4e:61:f2:37:1d:07:6d:9a:0c:d1:bb:bf:19:23:18:00:
44:ef:f8:08:14:25:10:d8:d7:f1:92:5f:8c:85:6a:0b:01:e8:
aa:a6:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:50:29 2026 by rpki-client