
Error: rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json)
Hash identifier: s0gxKMLX6t6Bjho16S9YDkHf44ekIQKSOg0quZalZoE=
Subject key identifier: BA:C7:C3:D5:73:51:B2:CA:DD:F7:15:CF:0D:CD:A6:28:AF:DE:3E:09
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial: 2DCF8975EEA7C23ED8F207280E7AA261044DE53A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
Manifest number: 048D
Signing time: Tue 25 Aug 2026 18:36:53 +0000
Manifest this update: Tue 25 Aug 2026 18:31:53 +0000
Manifest next update: Wed 26 Aug 2026 21:48:53 +0000
Files and hashes: 1: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: viCYaeDXbliGUiFnL2inedPPccMNzkJRxE1a48JIXC8=)
2: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: bUCZ7BZehY+i3arTQ9HforOmJ5Z00Xe4/9acYqEHuf4=)
3: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: 77lMmfsBlWS7z4/jWBsEqCAvWwFXKptaC5X3bZ9GJYw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 21:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cf:89:75:ee:a7:c2:3e:d8:f2:07:28:0e:7a:a2:61:04:4d:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Validity
Not Before: Aug 25 18:31:53 2026 GMT
Not After : Aug 26 21:48:53 2026 GMT
Subject: CN=BAC7C3D57351B2CADDF715CF0DCDA628AFDE3E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:98:1d:c7:6d:de:01:64:03:93:41:80:8b:
f7:6f:a6:79:11:f6:3f:24:9f:46:9b:a5:11:f2:28:
1a:33:b7:7f:a4:4e:3a:b4:ae:d9:de:73:4f:36:0d:
97:b0:d8:e3:dd:6f:1b:01:e3:92:dd:95:90:2f:84:
7a:10:59:33:9f:c1:7d:2e:84:9c:d0:89:91:f6:ab:
95:04:70:79:60:f0:50:cb:ac:6c:4c:13:16:10:72:
d5:a8:9f:ef:e6:e2:0c:0f:1a:a2:40:06:c7:ff:c6:
35:ba:2a:b4:45:ff:b6:97:4a:7d:ca:70:93:f1:67:
7c:fd:62:0c:60:3e:f0:7f:f9:05:fb:13:4b:b1:eb:
d0:9a:a1:c0:8d:e9:d7:77:2c:a0:4a:70:24:5c:5f:
4e:b7:b1:bb:98:01:f0:33:61:ae:94:b3:8c:65:47:
75:9a:ae:6f:a9:94:31:a4:6d:a6:a9:18:b8:4a:4f:
46:1b:6a:e4:1d:cb:94:97:3c:db:86:0b:4a:9e:4a:
a3:ba:7b:d5:58:9e:d0:2d:52:6e:d8:d0:67:44:bf:
04:e9:be:64:1e:89:25:c0:57:91:c6:6a:d8:87:d2:
c6:9c:0f:c0:39:c4:d4:4f:96:0a:e9:c2:10:6c:a0:
a7:1f:af:86:1a:93:82:56:90:50:e8:48:ef:69:13:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:C3:D5:73:51:B2:CA:DD:F7:15:CF:0D:CD:A6:28:AF:DE:3E:09
X509v3 Authority Key Identifier:
keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:84:b8:53:c3:2a:06:0d:63:1d:da:f0:de:4f:0d:73:e5:
8d:2f:00:7a:8f:2c:85:aa:51:80:83:b8:bf:ec:65:11:89:60:
98:6d:c8:e2:ce:e2:9e:d4:6d:50:36:0e:92:c1:b2:02:46:04:
4a:02:01:18:f5:7d:41:05:69:15:05:d7:a3:b3:13:96:65:f3:
c5:ec:0b:d6:e5:94:8c:de:9e:ff:3b:a5:36:5b:3d:48:56:40:
a7:61:79:99:87:ac:4a:23:95:96:3f:3b:06:42:0b:de:f3:aa:
d9:3c:1c:4d:ed:17:29:ab:0b:ba:90:69:91:b4:be:44:b3:61:
95:32:fd:15:15:72:6a:c7:16:5d:e7:3a:db:ed:c7:90:f4:0a:
54:23:54:bd:0d:88:1b:74:3e:c4:20:51:3b:b5:2d:0a:2f:50:
7f:ea:14:52:68:1b:aa:81:4f:b9:d9:86:72:ee:69:60:e9:ef:
14:d9:b8:bb:da:71:bd:03:4d:e8:f5:2c:53:5b:e6:a3:55:95:
de:95:41:f8:0b:76:c9:a4:e9:0f:cb:07:f1:23:d6:e6:bc:47:
35:1b:e4:0a:d4:47:a2:9d:07:6a:79:91:6a:91:21:bc:76:e9:
c7:d6:77:b8:e5:d1:c4:2d:cd:10:56:51:06:7f:cf:37:ba:0b:
32:52:ff:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULc+Jde6nwj7Y8gcoDnqiYQRN5TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx
RUNCMzFFQzAeFw0yNjA4MjUxODMxNTNaFw0yNjA4MjYyMTQ4NTNaMDMxMTAvBgNV
BAMTKEJBQzdDM0Q1NzM1MUIyQ0FEREY3MTVDRjBEQ0RBNjI4QUZERTNFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjpgdx23eAWQDk0GAi/dvpnkR
9j8kn0abpRHyKBozt3+kTjq0rtnec082DZew2OPdbxsB45LdlZAvhHoQWTOfwX0u
hJzQiZH2q5UEcHlg8FDLrGxMExYQctWon+/m4gwPGqJABsf/xjW6KrRF/7aXSn3K
cJPxZ3z9YgxgPvB/+QX7E0ux69CaocCN6dd3LKBKcCRcX063sbuYAfAzYa6Us4xl
R3Warm+plDGkbaapGLhKT0YbauQdy5SXPNuGC0qeSqO6e9VYntAtUm7Y0GdEvwTp
vmQeiSXAV5HGatiH0sacD8A5xNRPlgrpwhBsoKcfr4Yak4JWkFDoSO9pE8GdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUusfD1XNRssrd9xXPDc2mKK/ePgkwHwYDVR0j
BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL
MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND
NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E
M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjJKEuFPDKgYNYx3a8N5PDXPljS8Aeo8shapRgIO4v+xlEYlgmG3I4s7intRt
UDYOksGyAkYESgIBGPV9QQVpFQXXo7MTlmXzxewL1uWUjN6e/zulNls9SFZAp2F5
mYesSiOVlj87BkIL3vOq2TwcTe0XKasLupBpkbS+RLNhlTL9FRVyascWXec62+3H
kPQKVCNUvQ2IG3Q+xCBRO7UtCi9Qf+oUUmgbqoFPudmGcu5pYOnvFNm4u9pxvQNN
6PUsU1vmo1WV3pVB+At2yaTpD8sH8SPW5rxHNRvkCtRHop0HanmRapEhvHbpx9Z3
uOXRxC3NEFZRBn/PN7oLMlL/JQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:12:11 2026 by rpki-client