
Error: rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier: 0Y6YmgPulcT0ihJ6vCKUX1TJ+DoV61HU627V4xUOYV8=
Subject key identifier: 14:27:90:C6:2D:67:62:F0:5B:AB:C3:F0:87:65:55:6D:FD:BD:82:95
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial: 02715AD8FFDF89A2398577D1DF76A473AF23A4F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number: 048C
Signing time: Sun 23 Aug 2026 19:02:18 +0000
Manifest this update: Sun 23 Aug 2026 18:57:18 +0000
Manifest next update: Mon 24 Aug 2026 22:24:18 +0000
Files and hashes: 1: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: dBK5EWUwBHCRzo0bpYkF0fx5VE9hBRp/pTinxYG0hU8=)
2: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: 8E//CHmlFt0V69LUnQIaeto+o+ys4+GeLYY6D4Bwqhs=)
3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: 6goGBettQXlYT3dwNzXMNEk/cOwbQJLprhXKpD/i9z0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 22:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:71:5a:d8:ff:df:89:a2:39:85:77:d1:df:76:a4:73:af:23:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Validity
Not Before: Aug 23 18:57:18 2026 GMT
Not After : Aug 24 22:24:18 2026 GMT
Subject: CN=142790C62D6762F05BABC3F08765556DFDBD8295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:1a:e8:16:05:68:ca:a2:f1:86:8b:73:e1:
08:77:90:77:b0:0b:f7:b6:69:cd:da:24:4f:6e:91:
8b:9c:e9:f1:16:2b:bf:7e:4b:d5:88:ac:e0:9b:99:
20:e4:bf:2e:2f:63:91:97:b1:66:64:03:95:9a:6b:
9f:65:18:47:be:88:67:8a:a5:15:63:16:69:ee:cb:
85:5c:81:36:fc:3f:70:64:a4:07:54:01:55:51:15:
99:45:e0:da:c8:00:6b:4c:09:ab:7c:6c:33:28:d1:
b8:79:1f:c4:30:24:9b:ed:3e:36:13:37:a6:94:74:
75:5e:7f:41:62:0d:ff:29:b3:69:8a:cb:ea:a6:7d:
04:95:42:c1:5c:52:75:87:9e:de:3d:a5:2d:7f:e2:
0a:e7:72:04:00:17:52:6d:e4:93:af:0e:ff:20:fb:
92:4a:c1:84:0f:ab:9d:c5:ef:eb:9d:59:a2:6e:f6:
ad:48:73:97:89:6f:0b:00:dd:8e:54:92:5c:4a:51:
1b:6e:98:ed:39:3b:f3:9c:ab:a5:3f:d9:da:0b:09:
88:1c:2d:7c:07:40:ac:c3:e6:f0:a9:cb:ee:c6:af:
20:96:ad:89:ab:b2:bb:2a:fd:5e:05:a7:51:eb:e1:
f2:7a:42:09:7d:bf:6c:72:54:03:65:3f:84:38:58:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:90:C6:2D:67:62:F0:5B:AB:C3:F0:87:65:55:6D:FD:BD:82:95
X509v3 Authority Key Identifier:
keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cd:73:61:3b:7a:6d:91:ff:66:f0:75:bc:8b:a7:25:d1:15:
ed:e2:1d:1a:e5:cd:b6:30:3c:bb:63:e8:db:cf:d4:d9:7f:7e:
eb:f9:10:8a:c0:6b:98:48:c3:20:50:1b:86:c4:62:7b:ba:6d:
37:ff:1e:1a:d8:0e:04:d5:f6:be:1c:1f:c4:b2:6e:14:80:19:
d4:15:81:2d:05:84:f5:ae:30:b7:eb:d7:0c:f9:1b:ae:df:6a:
db:c0:96:79:73:ff:d4:54:7e:b8:e3:55:1d:ad:3f:3e:dd:e1:
61:3f:99:9b:4e:53:b9:4f:5c:72:2a:a3:93:8a:31:a6:ca:90:
c3:1e:6d:1b:30:b4:57:9d:1d:4a:c6:b5:5c:c9:00:7d:85:0b:
52:6e:a4:26:ec:f2:b0:d3:85:d7:ea:a7:5b:67:26:50:a8:be:
e4:7f:42:af:d5:5d:b7:03:05:84:6d:55:7d:46:cb:77:0e:a1:
c0:50:ef:b5:6a:fc:dd:dd:85:53:e9:62:4c:0c:34:e4:38:5e:
f6:12:f9:54:2c:3c:18:46:53:5a:53:ce:ae:ed:5b:a5:de:13:
c7:c3:69:62:03:6e:80:a9:e7:8f:29:96:cd:fa:c6:39:68:ca:
16:7a:c1:c9:3f:d0:06:38:3c:12:b9:ba:45:20:97:6a:6a:0d:
67:3a:b6:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAnFa2P/fiaI5hXfR33akc68jpPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF
NDY1OTIxODAeFw0yNjA4MjMxODU3MThaFw0yNjA4MjQyMjI0MThaMDMxMTAvBgNV
BAMTKDE0Mjc5MEM2MkQ2NzYyRjA1QkFCQzNGMDg3NjU1NTZERkRCRDgyOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtBroFgVoyqLxhotz4Qh3kHew
C/e2ac3aJE9ukYuc6fEWK79+S9WIrOCbmSDkvy4vY5GXsWZkA5Waa59lGEe+iGeK
pRVjFmnuy4VcgTb8P3BkpAdUAVVRFZlF4NrIAGtMCat8bDMo0bh5H8QwJJvtPjYT
N6aUdHVef0FiDf8ps2mKy+qmfQSVQsFcUnWHnt49pS1/4grncgQAF1Jt5JOvDv8g
+5JKwYQPq53F7+udWaJu9q1Ic5eJbwsA3Y5UklxKURtumO05O/Ocq6U/2doLCYgc
LXwHQKzD5vCpy+7GryCWrYmrsrsq/V4Fp1Hr4fJ6Qgl9v2xyVANlP4Q4WCktAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFCeQxi1nYvBbq8Pwh2VVbf29gpUwHwYDVR0j
BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK
VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx
OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z
NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAas1zYTt6bZH/ZvB1vIunJdEV7eIdGuXNtjA8u2Po28/U2X9+6/kQisBrmEjD
IFAbhsRie7ptN/8eGtgOBNX2vhwfxLJuFIAZ1BWBLQWE9a4wt+vXDPkbrt9q28CW
eXP/1FR+uONVHa0/Pt3hYT+Zm05TuU9cciqjk4oxpsqQwx5tGzC0V50dSsa1XMkA
fYULUm6kJuzysNOF1+qnW2cmUKi+5H9Cr9VdtwMFhG1VfUbLdw6hwFDvtWr83d2F
U+liTAw05Dhe9hL5VCw8GEZTWlPOru1bpd4Tx8NpYgNugKnnjymWzfrGOWjKFnrB
yT/QBjg8Erm6RSCXamoNZzq2Qg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 09:12:41 2026 by rpki-client