
Error: rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
File: C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft (raw, json)
Hash identifier: K4lCmus6FnKRDkZeedxSo7yWyvmBeRRxOUD3QdxA5uE=
Subject key identifier: 7B:F5:28:7A:CF:45:A9:B4:A3:7E:72:2B:8C:3C:97:FE:6D:41:E6:7F
Authority key identifier: C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38
Certificate issuer: /CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
Certificate serial: 34B95FB099AF91F13942F45E06C0967A9A61FA84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
Manifest number: 048A
Signing time: Sun 23 Aug 2026 09:10:20 +0000
Manifest this update: Sun 23 Aug 2026 09:05:20 +0000
Manifest next update: Mon 24 Aug 2026 09:41:20 +0000
Files and hashes: 1: C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl (hash: VIWAlk8XHVKKQetUmUwB0q79Iu95tTS5T39AneZY/W8=)
2: 323830343a336435303a3a2f33322d3438203d3e20323636323637.roa (hash: n6fncwerXa8O6326gVqxLrhWLxth5Siqh7klsCPs3gg=)
3: 34352e36352e3139322e302f32322d3234203d3e20323636323637.roa (hash: VQPlHbQdgeXYytytU7aUNAh8AgKxhG/DRfRBZOQV1PM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl
rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 09:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b9:5f:b0:99:af:91:f1:39:42:f4:5e:06:c0:96:7a:9a:61:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38
Validity
Not Before: Aug 23 09:05:20 2026 GMT
Not After : Aug 24 09:41:20 2026 GMT
Subject: CN=7BF5287ACF45A9B4A37E722B8C3C97FE6D41E67F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:68:0a:03:23:0e:76:de:c2:fb:70:09:1a:
04:b4:88:55:7c:8c:17:3e:53:95:9c:3e:a6:6e:8b:
15:a0:da:b5:f4:03:c7:3e:23:86:46:52:44:8b:b0:
ab:11:39:d9:27:c7:bc:59:5e:2b:f3:0c:88:8f:9a:
0a:b4:01:1a:1c:4b:1c:d9:23:d8:b9:d9:b5:32:fd:
35:39:cc:50:c7:8c:ae:0c:ee:47:e0:02:20:3a:32:
61:46:54:38:47:65:69:f4:5a:19:85:6d:41:4b:b1:
ac:8b:a1:1d:e9:8e:2d:50:0c:b2:57:f7:ad:63:37:
af:1d:d5:10:26:02:6a:cd:c1:ff:34:c1:56:76:4f:
36:5a:53:92:cb:51:d9:79:1b:6a:7f:32:e6:0d:b6:
77:8b:02:4c:0d:84:ff:6e:fb:60:f6:02:4f:c5:e6:
6c:4d:e5:f8:68:d8:71:7b:e3:e9:12:16:d1:ad:00:
db:88:5b:e1:9e:57:86:aa:04:65:66:a8:a1:2e:81:
72:a8:2e:ca:8b:95:13:5f:1a:00:1f:64:c7:78:2a:
22:cd:e1:b9:a0:da:7a:1d:9c:af:e1:1b:e9:05:db:
2d:55:5c:a2:8c:df:46:e5:9d:07:47:47:92:de:60:
70:4a:00:61:0e:e8:f0:11:9f:9a:5f:5f:1a:10:6a:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:28:7A:CF:45:A9:B4:A3:7E:72:2B:8C:3C:97:FE:6D:41:E6:7F
X509v3 Authority Key Identifier:
keyid:C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e2:4b:12:00:9c:88:74:93:c5:75:c8:0f:94:41:6a:bd:9b:
a1:1b:96:3f:1e:82:1d:7a:65:72:75:34:3f:b4:94:d1:ef:42:
4d:a8:63:8a:a2:29:66:27:bf:7c:6e:33:01:e5:cc:3b:ed:c2:
44:ed:52:03:7e:18:a0:6a:e0:14:f2:cb:01:78:ae:29:e4:29:
30:9a:12:e4:f5:2d:d5:41:1e:87:c7:0d:d7:a1:5c:35:0b:5e:
73:40:b6:90:d3:1b:03:f9:56:74:92:7c:f8:ee:c5:40:0a:2d:
3b:3f:34:c0:54:ca:cb:ee:bc:90:b3:c3:35:51:b2:cd:19:e3:
ae:95:48:c1:b7:00:b8:e3:fc:e9:ca:6d:88:da:c4:e9:2e:c4:
85:9b:41:6a:b1:76:2f:52:77:90:c8:cf:4f:87:d2:b3:d0:22:
33:5b:6c:9f:f6:b9:02:c4:ec:38:27:34:5f:5b:15:bc:58:16:
e1:7d:c2:df:9a:ae:ef:4e:ba:a5:9d:eb:56:04:93:fd:59:6f:
96:bc:58:e0:0b:52:6a:7b:9b:64:e7:ea:74:f6:3a:00:75:41:
a9:88:52:29:cb:8d:52:6d:3c:23:d0:99:94:21:b7:92:c3:78:
79:ad:75:35:93:b1:23:5c:3a:9f:8b:c0:07:e3:85:fd:2e:c4:
5f:41:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:28:42 2026 by rpki-client