
Error: rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier: ryU5I6fAiMeBsQbszXcqMULuGmwa3M5wl/Mne06zz4Q=
Subject key identifier: 81:80:B2:79:10:4A:29:41:C9:4F:C5:CE:45:A7:2D:27:40:8E:B7:81
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer: /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial: 1C98525C24DB63C9044A4CB7A0BB5556F7220013
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number: 0489
Signing time: Sat 22 Aug 2026 17:02:53 +0000
Manifest this update: Sat 22 Aug 2026 16:57:53 +0000
Manifest next update: Sun 23 Aug 2026 17:38:53 +0000
Files and hashes: 1: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: wyyET1DGhGa7Xe1zXLwWevcUDf7Wv1xZ5zRGmvFFB8s=)
2: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: GZlkc04TEiHS/yGu7rHFVGgZRHXaY2e7fADLFday7lc=)
3: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: QyXOQDEs96gWpD7KTDqJA1FGdGMTzFA2NR1MSDpVqME=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 17:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:98:52:5c:24:db:63:c9:04:4a:4c:b7:a0:bb:55:56:f7:22:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Validity
Not Before: Aug 22 16:57:53 2026 GMT
Not After : Aug 23 17:38:53 2026 GMT
Subject: CN=8180B279104A2941C94FC5CE45A72D27408EB781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:71:a9:16:d0:7b:8d:db:0d:42:bd:e7:b2:
e4:2e:96:78:85:1a:9b:c0:46:3d:5d:10:f7:4d:66:
63:9f:c8:b3:7d:bf:b8:40:e2:f2:29:0d:a5:78:e2:
c7:d2:ce:b7:c5:99:3f:d4:9b:01:d4:df:19:e4:83:
8c:fd:e8:fb:fe:59:77:95:c0:5e:25:26:24:51:a7:
5f:59:15:23:d7:81:be:cd:17:16:69:44:3d:05:12:
34:4d:fd:b9:fa:85:3d:7c:4d:1e:c2:5e:8d:0f:04:
42:bf:34:8e:29:7d:1e:a3:66:17:fd:fc:2d:a3:71:
d8:6b:4d:d2:6f:d4:56:ef:89:c7:d3:86:4c:ef:71:
ae:ea:6c:b3:e5:73:fb:4f:eb:95:4c:98:83:9b:ab:
a1:46:48:3f:d8:2f:1f:52:5a:e0:34:8d:3f:ec:ca:
ef:5e:75:a3:cf:2b:bb:0e:56:c9:9b:d7:5c:c0:dc:
dd:a4:b3:97:9e:bc:c8:5b:30:3c:a7:9f:3b:17:f4:
2e:6e:b2:e6:32:71:a5:f7:1e:5b:01:64:71:a0:1a:
d4:39:ce:cd:a3:8d:ce:1f:00:b7:89:12:5e:da:7f:
45:c0:87:db:ef:a9:8f:52:d1:ac:25:83:e1:67:59:
cf:3b:a1:6a:a8:37:ba:49:a5:87:16:14:f2:99:3e:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:B2:79:10:4A:29:41:C9:4F:C5:CE:45:A7:2D:27:40:8E:B7:81
X509v3 Authority Key Identifier:
keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:51:f9:a9:8e:92:17:71:f5:d8:dc:a9:b7:68:c8:21:89:
e3:40:93:a9:d3:1a:0e:07:6b:25:0b:2b:9b:52:b1:4b:4e:3c:
cf:99:9a:8d:0d:ed:f7:e5:c6:05:3c:d3:54:19:9e:ff:e0:e0:
7c:16:ea:3b:6b:93:5f:5d:b9:d8:77:a1:de:9b:9a:fd:87:e7:
8c:42:85:27:b3:d8:4b:fa:4d:2e:61:44:ba:53:f2:46:3a:3d:
d5:1c:3c:1d:ff:08:17:01:e4:18:69:bb:fb:bb:c3:6d:c8:f2:
b7:96:f1:b8:88:3a:36:e8:df:62:e4:c7:86:84:c9:e0:e9:07:
ee:28:05:eb:74:ab:96:83:cf:d8:c5:04:c4:39:c1:2a:c9:e2:
eb:06:bd:43:9a:09:9a:7f:d5:f2:3b:94:79:0d:b9:20:52:25:
25:5d:f5:04:72:89:ab:dd:3b:d5:fc:a1:5c:32:bd:f3:8b:fb:
e9:5b:7a:03:4b:cd:30:32:ac:37:0d:9b:c5:f7:a6:9b:cd:76:
85:e3:de:96:8b:4e:49:e8:7e:5b:55:f8:e5:54:85:92:07:4b:
7a:0f:ec:eb:6d:b5:2b:fd:37:d5:54:a2:08:a1:a8:dc:1a:01:
d7:df:8a:43:a8:94:f6:10:a3:50:49:f7:1a:2d:b2:8f:10:38:
4f:ba:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:21:11 2026 by rpki-client