
Error: rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
File: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft (raw, json)
Hash identifier: gWKmvlYoB86D8EiowwtNCip19nbzr+25b0hlGcag/9Y=
Subject key identifier: F3:66:8F:26:8A:B2:61:D9:5C:09:FE:D3:98:FF:0A:04:6F:81:ED:3A
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Certificate issuer: /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial: 1281B5FFC46F30ECA709CBEE63A4DE16AA71E2C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
Manifest number: 051F
Signing time: Sun 23 Aug 2026 04:10:00 +0000
Manifest this update: Sun 23 Aug 2026 04:05:00 +0000
Manifest next update: Mon 24 Aug 2026 04:10:00 +0000
Files and hashes: 1: 3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (hash: 6TmFEqzOQWRsAeV0zguTjF+hUywcqJbljzvmxncc7aw=)
2: 3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa (hash: 1yd1A7DGRmyDLmbw6dBeYHszZiwpWU2UO9ejflEseEc=)
3: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl (hash: hSDjnxF4xPbFcVvhHkKMnAtn8XJZevYh0FBqumiuBWY=)
4: 323830343a316561303a3a2f33322d3634203d3e20323634343430.roa (hash: xqC+gOH7rBq/jDtYnOw+knrs+Scwd70y3IYgSn+N77M=)
5: 3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (hash: KeATW2+WTsAZ3teiwzE5i1dJQy7AfZCS2Ly3+ZHxEBo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:81:b5:ff:c4:6f:30:ec:a7:09:cb:ee:63:a4:de:16:aa:71:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Validity
Not Before: Aug 23 04:05:00 2026 GMT
Not After : Aug 24 04:10:00 2026 GMT
Subject: CN=3082010A0282010100A32637302D6FF0213C8C15F35ACB8AD2EC15E2C56BB4A4552FEAC379A30BC99F57FCCB0C1EC05B68BED7ADE4F155C90721B13F19B6EBCCB28A5D5119CFEC021C70DEDA698ADB56585AF38712E316ADB9F1C6E3E2A8B0282F96E7F3743464AF0DCC5C3378F749A6F1405C2E21286EBD9328700D0F41326E2D76BC1D6A76D629057361B3650BA0EF0EDABE1543B2C7C27CF2AE482A2FBB4357AA15400929F73949164D61616B114CBBE83413C8FE67BA18714511219255DEC88B5D9B39007A99F506DD5F929D9239C82BCB31C9A5C577407AF31FADA1E622891EE22ADA3803007424DB07A24CD04F7D95D73F80F26E0D938769D814E56F7D98BFA792CCABF2E49B0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:37:30:2d:6f:f0:21:3c:8c:15:f3:5a:cb:
8a:d2:ec:15:e2:c5:6b:b4:a4:55:2f:ea:c3:79:a3:
0b:c9:9f:57:fc:cb:0c:1e:c0:5b:68:be:d7:ad:e4:
f1:55:c9:07:21:b1:3f:19:b6:eb:cc:b2:8a:5d:51:
19:cf:ec:02:1c:70:de:da:69:8a:db:56:58:5a:f3:
87:12:e3:16:ad:b9:f1:c6:e3:e2:a8:b0:28:2f:96:
e7:f3:74:34:64:af:0d:cc:5c:33:78:f7:49:a6:f1:
40:5c:2e:21:28:6e:bd:93:28:70:0d:0f:41:32:6e:
2d:76:bc:1d:6a:76:d6:29:05:73:61:b3:65:0b:a0:
ef:0e:da:be:15:43:b2:c7:c2:7c:f2:ae:48:2a:2f:
bb:43:57:aa:15:40:09:29:f7:39:49:16:4d:61:61:
6b:11:4c:bb:e8:34:13:c8:fe:67:ba:18:71:45:11:
21:92:55:de:c8:8b:5d:9b:39:00:7a:99:f5:06:dd:
5f:92:9d:92:39:c8:2b:cb:31:c9:a5:c5:77:40:7a:
f3:1f:ad:a1:e6:22:89:1e:e2:2a:da:38:03:00:74:
24:db:07:a2:4c:d0:4f:7d:95:d7:3f:80:f2:6e:0d:
93:87:69:d8:14:e5:6f:7d:98:bf:a7:92:cc:ab:f2:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:8F:26:8A:B2:61:D9:5C:09:FE:D3:98:FF:0A:04:6F:81:ED:3A
X509v3 Authority Key Identifier:
keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:fb:2b:be:0c:bc:73:fb:2f:75:a2:2f:c8:7c:01:6d:d4:
ea:ba:81:c7:7b:80:94:cb:20:94:8c:2f:bd:69:b1:e8:32:f3:
32:06:ce:d9:84:1c:7a:89:80:75:94:8e:09:7f:08:42:20:8a:
25:9e:a2:54:18:3a:79:35:46:fe:40:03:46:ac:64:af:eb:2e:
d9:5d:9c:0b:df:68:bf:33:dd:ed:33:05:da:20:8e:87:6d:a9:
54:88:f3:df:35:39:2b:34:2f:0f:e0:e6:01:ce:bd:1a:37:ab:
bd:c7:6c:2d:12:25:91:d0:39:f4:8d:75:3b:0f:e0:af:e9:43:
66:88:23:5e:1a:9d:0b:cd:d3:81:6e:b8:2e:d6:d2:9f:b5:ec:
7a:02:7e:2a:72:8b:8e:b0:0c:47:0e:b9:42:11:6b:2d:ef:07:
a5:34:d0:3a:a0:46:5c:6c:f8:1d:2a:b3:75:56:da:7a:e1:cf:
3e:a0:9e:b5:a6:ba:94:bd:20:02:63:95:56:c7:80:78:bc:de:
ec:89:20:dd:8f:5c:bb:0a:aa:ec:51:7b:84:fb:3e:4e:33:49:
4c:c4:ac:08:ad:a1:77:f2:0e:3b:59:a6:3b:0a:d3:de:9b:ac:
f5:3e:cc:23:f7:d1:5b:b4:3e:ba:fc:0a:a8:75:07:6f:39:80:
a5:58:ed:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:03:52 2026 by rpki-client