
Error: rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
File: F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft (raw, json)
Hash identifier: pbPBBekwUd9R1JA7W+QmGJc7IjxYtgXg+IdYzoIt//k=
Subject key identifier: 1B:7B:00:57:8A:DB:56:4D:BC:1F:2C:A5:B9:8A:1A:29:C6:AC:CE:46
Authority key identifier: F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4
Certificate issuer: /CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
Certificate serial: 369592F07BCD846D636FAB9BDF95493C28A55EE5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
Manifest number: D7
Signing time: Sun 23 Aug 2026 01:34:50 +0000
Manifest this update: Sun 23 Aug 2026 01:29:50 +0000
Manifest next update: Mon 24 Aug 2026 04:05:50 +0000
Files and hashes: 1: 323830343a326362303a38303a3a2f34322d3432203d3e20323635323337.roa (hash: /YBb569jLV2HS7tHcYyuNsFzP3AJ8jvVQFF/qLA9oQE=)
2: 323830343a326362303a34303a3a2f34322d3432203d3e20323635323337.roa (hash: T/4lEy6j6aDDDecUiPfaErYVWDkc7Ez/Bj+mj1Jfinw=)
3: 3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa (hash: PbU3Md6B0o26g9Dd1PU1URbwy2+4LCFNqrFqafMOCi8=)
4: 323830343a326362303a343030303a3a2f33352d3335203d3e20323635323337.roa (hash: +36k2PPEPdARi4cZMKwyRj9dXRi+radhp9L/CmZw3aw=)
5: 3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa (hash: Dgcv0SjW+NhXp4ZmMarF/zApOmgmuVKlDFLYagPKAhM=)
6: F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl (hash: ZoySyCA++6Uy4Zp7y2/0tnrtbQDwc8adqbFn7eRb3PE=)
7: 3136372e3235302e3234302e302f32342d3234203d3e20323635323337.roa (hash: r+zphjPy8bKpGFTeDmKxEjMa+htfUmie8+OhSSdnPHQ=)
8: 3136372e3235302e3234332e302f32342d3234203d3e20323635323337.roa (hash: /Dd9Nncfx5bdbugIPCHyaXdlBvLzIb9PJP2sW5zb+0U=)
9: 3136372e3235302e3234302e302f32332d3233203d3e20323635323337.roa (hash: Aqq6gKUQiu7eeAV3Sco2klz8DoFYijiTKSoijcTVrkA=)
10: 3136372e3235302e3234312e302f32342d3234203d3e20323635323337.roa (hash: muEHCUkqJRbexxY5LTX9NsEJVPgvyiPZLzg2m3Urq9c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl
rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:95:92:f0:7b:cd:84:6d:63:6f:ab:9b:df:95:49:3c:28:a5:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
Validity
Not Before: Aug 23 01:29:50 2026 GMT
Not After : Aug 24 04:05:50 2026 GMT
Subject: CN=1B7B00578ADB564DBC1F2CA5B98A1A29C6ACCE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:89:6b:2f:61:38:c1:2d:37:3a:c2:b6:84:
82:fb:59:2f:92:c3:a5:e4:a6:f3:02:8d:52:6e:fe:
a5:a7:43:1b:68:29:6f:17:5c:af:c0:11:bc:d1:8d:
4a:80:53:ad:1b:a7:50:b1:da:09:9f:2d:d0:75:2f:
4c:e9:a4:60:6c:e9:5a:08:2c:24:27:23:13:6c:88:
7d:40:09:27:69:26:81:56:1c:7f:e8:84:7e:17:6b:
aa:57:4c:30:47:c7:df:ea:1e:88:3b:be:a7:b9:5e:
65:32:18:e7:e0:15:ef:32:83:6a:4e:83:5b:56:b5:
01:10:51:e9:13:85:8c:66:ce:41:69:7a:83:79:af:
21:a3:76:41:61:7d:19:83:d7:91:d3:6c:65:e0:42:
a5:78:1a:a9:b4:0f:12:62:92:d1:6e:d1:a0:4d:4e:
8a:84:99:81:04:af:4c:3b:22:99:ae:45:5b:1d:1f:
79:d7:72:cc:6c:0d:1c:84:f5:71:50:35:87:40:4d:
f5:14:20:3b:6a:dc:a4:6d:da:29:db:47:ad:52:5e:
81:18:d0:11:a5:36:5d:67:f7:81:d4:04:2b:54:94:
ff:3f:90:d3:81:1c:e7:41:af:86:94:0e:24:c7:1d:
76:c2:c1:a5:0f:4d:6b:4c:49:86:9a:17:a5:15:b5:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:00:57:8A:DB:56:4D:BC:1F:2C:A5:B9:8A:1A:29:C6:AC:CE:46
X509v3 Authority Key Identifier:
keyid:F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:09:4c:83:52:68:d5:a5:80:dc:b7:1b:01:71:d5:59:70:
ef:96:7f:a1:dc:3b:b0:c7:b0:bf:71:36:74:5c:4d:2c:6a:d9:
eb:9b:f5:4e:a9:c4:94:19:d5:e9:94:9f:dd:0b:47:ca:83:b0:
ac:cd:00:e3:37:10:b9:6b:f9:f2:0e:3d:e4:7a:13:f3:90:4a:
90:c0:4c:4d:2d:ed:c8:6e:33:1d:f2:1a:49:1d:0f:61:35:32:
1d:0b:3c:3d:ca:82:0e:2a:21:56:aa:bf:eb:25:c2:b4:f0:a9:
22:15:c3:af:25:ee:95:b5:8f:65:b9:84:21:57:7b:7a:14:9c:
c8:9a:0a:b1:e6:41:26:a0:7e:11:c7:28:e1:cb:36:81:c5:11:
3c:0a:40:ab:9c:97:17:34:75:ea:53:9c:b7:e5:ca:22:82:bd:
c2:bf:c3:4c:a5:7e:61:6f:d9:45:38:34:87:28:34:39:9c:28:
6a:2b:59:9f:92:a1:46:24:ce:68:e8:a4:cb:92:b5:e2:12:ea:
ef:43:3c:08:3b:b0:b0:eb:3d:7e:20:2e:e0:55:28:6a:ab:ab:
2c:18:87:e3:96:7e:dd:e3:6e:d3:ae:03:05:8d:78:22:3a:11:
81:d7:0a:fb:7e:a6:38:30:2b:50:e5:58:cd:77:b5:6c:2e:81:
07:b1:20:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNpWS8HvNhG1jb6ub35VJPCilXuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEMzJDQUFCMDI4OUNDNUU3RkQxN0I5OTA0NDZFNUJF
NzUwQUFGNDAeFw0yNjA4MjMwMTI5NTBaFw0yNjA4MjQwNDA1NTBaMDMxMTAvBgNV
BAMTKDFCN0IwMDU3OEFEQjU2NERCQzFGMkNBNUI5OEExQTI5QzZBQ0NFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWIlrL2E4wS03OsK2hIL7WS+S
w6XkpvMCjVJu/qWnQxtoKW8XXK/AEbzRjUqAU60bp1Cx2gmfLdB1L0zppGBs6VoI
LCQnIxNsiH1ACSdpJoFWHH/ohH4Xa6pXTDBHx9/qHog7vqe5XmUyGOfgFe8yg2pO
g1tWtQEQUekThYxmzkFpeoN5ryGjdkFhfRmD15HTbGXgQqV4Gqm0DxJiktFu0aBN
ToqEmYEEr0w7IpmuRVsdH3nXcsxsDRyE9XFQNYdATfUUIDtq3KRt2inbR61SXoEY
0BGlNl1n94HUBCtUlP8/kNOBHOdBr4aUDiTHHXbCwaUPTWtMSYaaF6UVtZxDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUG3sAV4rbVk28HyyluYoaKcaszkYwHwYDVR0j
BBgwFoAU99MsqrAonMXn/Re5kERuW+dQqvQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWkxeDdDNFBMVDRUcmZaWWJNS0ZVOGtNSzJDdkIzcGpjeEt6MUs4SEh0
RTMvMC9GN0QzMkNBQUIwMjg5Q0M1RTdGRDE3Qjk5MDQ0NkU1QkU3NTBBQUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3RDMyQ0FBQjAyODlDQzVF
N0ZEMTdCOTkwNDQ2RTVCRTc1MEFBRjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWkxeDdDNFBMVDRUcmZaWWJNS0ZVOGtNSzJDdkIzcGpjeEt6MUs4SEh0RTMvMC9G
N0QzMkNBQUIwMjg5Q0M1RTdGRDE3Qjk5MDQ0NkU1QkU3NTBBQUY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADmQJTINSaNWlgNy3GwFx1Vlw75Z/odw7sMewv3E2dFxNLGrZ65v1TqnElBnV
6ZSf3QtHyoOwrM0A4zcQuWv58g495HoT85BKkMBMTS3tyG4zHfIaSR0PYTUyHQs8
PcqCDiohVqq/6yXCtPCpIhXDryXulbWPZbmEIVd7ehScyJoKseZBJqB+Ecco4cs2
gcURPApAq5yXFzR16lOct+XKIoK9wr/DTKV+YW/ZRTg0hyg0OZwoaitZn5KhRiTO
aOiky5K14hLq70M8CDuwsOs9fiAu4FUoaqurLBiH45Z+3eNu064DBY14IjoRgdcK
+36mODArUOVYzXe1bC6BB7Eg2w==
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:32:47 2026 by rpki-client