
Error: rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier: Rgg2D5KatZWfp9sF025UW6/xf+lie3oo3ejzbAjd+0w=
Subject key identifier: 36:21:20:23:FF:F4:F5:B1:28:88:C0:92:17:19:07:EB:83:9B:81:3D
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial: 2FAB101AAC78E0219E5B01B2ECD3BA690A4EA577
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number: 0407
Signing time: Sat 22 Aug 2026 19:36:10 +0000
Manifest this update: Sat 22 Aug 2026 19:31:10 +0000
Manifest next update: Sun 23 Aug 2026 21:44:10 +0000
Files and hashes: 1: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: P6G6AZFRp5kqOosNoCryglvvtcBc6hA5DOR0IbYdZVw=)
2: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: i0yKyKqtZ+u6EfWzOwTfMZDgwD91EaKwajVLtaMrJbY=)
3: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: rpzTvujFf5WqwOlcgDZSFzIkdHepRTqi1III3eflS2U=)
4: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: PwEE2yFzWkd/RQGOKXJbPG6Y0N/z1Yd/al3n0qj/auM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 21:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ab:10:1a:ac:78:e0:21:9e:5b:01:b2:ec:d3:ba:69:0a:4e:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Validity
Not Before: Aug 22 19:31:10 2026 GMT
Not After : Aug 23 21:44:10 2026 GMT
Subject: CN=36212023FFF4F5B12888C092171907EB839B813D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:5d:c4:54:c0:64:80:01:f4:3a:ac:12:e6:
f3:14:ce:f3:36:30:a4:8d:66:92:76:5e:c5:90:8e:
bb:83:b4:b4:04:73:9b:5a:2e:2f:4e:e2:46:a5:bd:
cc:f5:6c:7d:45:90:36:e5:61:e1:b9:c8:12:01:5f:
a4:a9:68:80:0d:eb:49:33:05:5c:20:8e:6c:66:e5:
b3:68:59:10:18:77:96:37:07:e4:ae:a9:93:b0:06:
b8:5f:c6:fd:56:80:32:eb:81:29:9d:84:c6:cc:17:
20:c7:92:6f:3f:99:06:1b:ad:e5:bb:87:f8:63:64:
d6:e7:af:bd:13:5b:1d:e2:c8:38:26:37:33:8e:d3:
d5:2f:ea:8c:14:17:07:8c:f9:74:da:99:c1:49:d9:
8e:90:29:93:11:f1:c9:e8:f5:9b:66:3c:fc:db:d2:
9e:f2:c3:c5:32:fe:41:20:7e:85:0a:b2:a2:13:a2:
cf:ed:7d:cf:d7:a0:ff:f3:fe:c9:d6:42:1a:da:47:
43:ff:c0:4a:5d:c9:22:26:fd:05:a4:12:c2:15:81:
c3:43:9e:95:5c:be:3c:10:f9:68:28:2b:98:32:09:
34:03:b1:ef:e9:aa:ce:cc:27:23:a6:95:35:42:19:
16:10:d4:99:4e:56:f1:5d:d9:a3:a6:93:67:40:51:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:20:23:FF:F4:F5:B1:28:88:C0:92:17:19:07:EB:83:9B:81:3D
X509v3 Authority Key Identifier:
keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:d3:d9:1b:48:a1:2e:51:f1:7f:db:6c:9f:42:3f:92:7f:
48:8b:4d:8d:ea:b8:96:2c:6d:d8:a7:93:48:2f:5e:6b:26:52:
62:11:7e:87:e2:74:eb:e1:ff:1e:ec:79:17:36:74:45:b9:a2:
31:fc:90:a5:5b:d9:4e:b6:5e:b8:4c:02:81:59:65:e7:36:97:
b8:6f:5a:e4:b5:0a:41:c6:51:b5:61:53:01:40:22:55:38:7e:
9e:4b:6c:99:16:94:53:fd:4b:96:ac:e8:3b:3b:e1:bc:fc:22:
60:c5:d7:31:bf:36:61:5d:22:cc:2b:e0:68:87:e4:0f:c0:7b:
ca:84:e4:f2:e0:f4:cf:02:bd:f5:cf:49:ea:ff:f0:12:81:9a:
e8:ae:b6:56:5d:af:73:6c:09:4d:79:cb:1b:f4:b5:ef:dd:8f:
66:9c:85:3b:1e:ce:4a:8d:f0:3f:bc:b9:b7:cc:86:8e:38:44:
14:96:dc:b5:7b:71:60:49:df:df:74:98:21:d6:2d:47:b7:12:
e5:e0:65:65:4f:62:5e:00:e1:f0:02:bf:8d:21:d4:83:f8:a3:
c4:89:6f:d6:d1:8e:33:34:a0:f1:bb:30:0d:b1:a3:f7:dc:fa:
47:ff:ae:fd:b6:c5:10:d5:03:99:14:87:d8:a8:df:a3:f7:a7:
34:cb:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:40:07 2026 by rpki-client