
Error: rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
File: FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft (raw, json)
Hash identifier: ftDtc5lxEoXnp6O6X1YN259O/QQX9sCVsKsJZSkKjaE=
Subject key identifier: EF:A4:BB:B4:EA:4B:B1:26:62:07:8C:5A:93:ED:03:2E:95:D6:99:37
Authority key identifier: FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
Certificate issuer: /CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Certificate serial: 721E081A41A6FFF3E0C32DEA19C567C1E6C1507A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
Manifest number: 0500
Signing time: Sun 23 Aug 2026 02:00:00 +0000
Manifest this update: Sun 23 Aug 2026 01:55:00 +0000
Manifest next update: Mon 24 Aug 2026 02:00:00 +0000
Files and hashes: 1: FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl (hash: qGaz+318GjjvU56XudYQv2gpQ2qPPfqWoXGXu2/8SLo=)
2: 3139302e352e3230382e302f32322d3234203d3e20323731313835.roa (hash: Jx8F998J8Wo7vfqNuSdhyM19ohWkXplQDb0V6bx/4gA=)
3: 323830343a373738633a3a2f33322d3334203d3e20323731313835.roa (hash: s9BBvAyD5UXkWHj+RaRPmRJ/VP/Lla7/e7ZV/QbH818=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl
rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1e:08:1a:41:a6:ff:f3:e0:c3:2d:ea:19:c5:67:c1:e6:c1:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Validity
Not Before: Aug 23 01:55:00 2026 GMT
Not After : Aug 30 02:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:f5:18:d8:77:90:bf:4c:1a:c7:7b:69:19:
fe:7d:4c:c8:98:5c:67:c5:8e:64:38:a1:a4:b1:77:
5d:40:f9:41:d3:3e:7c:ce:d3:ce:4f:b0:04:cc:32:
c0:e3:db:71:ec:f7:f2:49:ac:5d:af:7b:66:80:c3:
f9:17:04:fb:45:09:b1:dd:2f:34:3a:88:e9:56:cd:
d1:1e:a2:66:da:dc:27:b5:c9:db:27:80:4e:fa:a6:
64:85:e5:58:35:4b:27:5d:17:b3:f8:f5:4e:80:50:
04:ac:71:fb:db:fb:52:18:41:cd:4d:98:91:f2:c1:
6f:34:43:5a:b8:b9:4b:b1:84:cf:0d:f9:76:9e:8b:
47:1e:9c:6d:c7:7c:9f:ff:1c:5f:ca:9c:21:62:7c:
57:26:6e:79:d7:39:05:c1:97:f8:fb:6d:43:ef:a5:
0e:47:f5:92:59:3f:09:80:b9:fa:5b:bc:e4:9f:81:
80:05:56:21:40:b5:eb:c6:87:f6:11:37:9f:73:19:
ef:ed:eb:0c:bd:9f:c8:13:01:17:26:75:4d:5e:ce:
dd:8c:97:8b:4a:b5:d2:d1:2c:25:79:98:0d:7b:23:
a1:91:84:24:91:01:8e:40:99:e2:00:23:97:05:d9:
06:69:24:fc:b7:f4:f5:a6:73:cc:fe:fe:e0:60:c5:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:BB:B4:EA:4B:B1:26:62:07:8C:5A:93:ED:03:2E:95:D6:99:37
X509v3 Authority Key Identifier:
keyid:FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d4:ba:4a:47:a7:b8:00:65:1b:25:f6:14:25:c1:38:51:d5:
92:cb:24:66:90:f8:cf:4b:14:36:23:9e:f9:c9:91:bd:3f:be:
e5:c9:aa:0f:c2:b9:84:4c:30:35:27:2a:75:cd:25:5b:d9:e7:
57:31:6e:cc:a2:69:d4:7d:e2:bc:48:62:5f:88:bc:0a:86:34:
c1:6f:5d:1a:5f:ef:1d:88:ca:9d:bd:a4:b0:69:c5:e8:c4:c4:
ef:49:06:be:7a:93:24:18:b3:7b:a1:38:1b:ad:b5:06:e4:11:
7f:24:56:80:32:af:af:4b:9e:79:1a:81:27:ea:a4:81:8c:cc:
78:82:5c:3e:14:ef:ca:92:36:99:1d:6e:24:8e:be:85:c1:f4:
75:3e:91:88:4c:7c:87:fa:e7:41:f9:b2:f4:be:66:80:c4:c8:
03:d0:29:a2:94:fa:a4:22:6a:4d:cc:f1:10:b7:77:95:7e:c0:
a9:b7:9d:16:94:25:8c:3c:2d:46:fe:91:16:64:66:45:b4:17:
6e:53:94:6f:c5:9f:01:5e:46:49:38:24:58:a7:8b:c8:2a:89:
c5:dc:3d:47:dc:bb:03:f2:74:f7:0b:91:49:76:1e:99:fb:8c:
ab:4c:6a:4e:fb:3f:cf:56:57:96:52:6e:40:b6:db:c5:d0:65:
f2:3f:b2:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:14:21 2026 by rpki-client