
Error: rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
File: C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft (raw, json)
Hash identifier: yFyYe30gwUrgGNk3+cU6LfO8zy4VZiBXMMCb4aPenGg=
Subject key identifier: 59:4F:47:6F:10:D5:03:83:18:69:33:31:A5:62:6F:C8:28:36:43:85
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Certificate issuer: /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial: 300AA3F5DCE4BED2FEA0CFA87F05DC5F8067ABAA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
Manifest number: 0486
Signing time: Sat 22 Aug 2026 17:50:04 +0000
Manifest this update: Sat 22 Aug 2026 17:45:04 +0000
Manifest next update: Sun 23 Aug 2026 18:25:04 +0000
Files and hashes: 1: C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl (hash: ijpq07zKrSp8D8zGq5k1i4al4RX5q2XlnWhHXAzkSxc=)
2: 3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa (hash: rXr2bJ39jCeqU4SAckeSsiqb861SznCx7EmadTic1Zo=)
3: 323830313a38303a323338303a3a2f34382d3438203d3e20323637333232.roa (hash: KExcizYhHhkMV1K2CswhOn5ah8t1rPEpFSSWTFdYK30=)
4: 3139322e3134342e37332e302f32342d3234203d3e20323637333232.roa (hash: eSvj4yYk18ujgeVCgQsEgThv6MN+lIo/2x0kRcoRKdo=)
5: 3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa (hash: hwG0glhADyLl+sBZuGLSUoD4VUocqifWQezYD4Z11uI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 18:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0a:a3:f5:dc:e4:be:d2:fe:a0:cf:a8:7f:05:dc:5f:80:67:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Validity
Not Before: Aug 22 17:45:04 2026 GMT
Not After : Aug 23 18:25:04 2026 GMT
Subject: CN=594F476F10D5038318693331A5626FC828364385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:60:4a:b0:58:cc:c6:be:ef:14:ef:e8:4b:
7a:73:a3:aa:d5:15:7f:ca:97:fd:8b:3b:7e:10:c2:
ac:9f:a9:1f:f4:83:fa:ec:66:68:46:78:12:e7:d3:
9e:2e:fa:4a:87:a3:43:c8:46:44:df:5c:0e:15:7a:
d1:55:6d:9c:0b:a1:74:68:7a:97:36:39:35:bc:23:
21:6e:89:94:35:5b:bf:90:c6:0b:4a:26:c3:61:6b:
f9:19:d2:5b:17:63:63:7a:12:b7:a6:b9:7e:30:8a:
ee:6e:96:da:d4:42:29:a0:56:b0:50:96:fc:a4:ff:
ec:39:74:ff:4c:f8:8b:99:72:3e:79:83:ff:e2:4b:
68:af:e6:82:d7:9a:00:78:de:46:85:de:9a:98:f0:
f8:c2:fa:3a:16:4d:58:04:d0:53:1e:43:03:d7:77:
0a:bc:71:5b:2d:80:57:9b:37:99:71:68:f6:ec:3f:
9a:76:a7:bb:e4:87:33:cf:e1:80:86:b6:f1:8c:34:
24:e4:c4:30:18:25:45:d2:53:c9:84:c3:fc:f7:54:
2e:4a:89:57:8b:4f:09:c3:05:83:7b:d0:09:7f:ec:
2b:78:f9:53:ee:3b:54:f1:f1:ca:3e:5d:25:6e:de:
14:0b:37:d4:c2:0f:1e:26:7a:63:6a:e4:9a:00:20:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:47:6F:10:D5:03:83:18:69:33:31:A5:62:6F:C8:28:36:43:85
X509v3 Authority Key Identifier:
keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:c9:fb:f6:57:b0:2f:2f:46:e1:82:df:1c:9c:78:92:ae:
c9:f5:06:c5:c4:d0:7e:b5:11:35:40:61:a6:61:b9:52:79:4d:
bf:6e:6b:2e:06:7a:29:c4:6e:c4:39:1a:3e:88:12:6c:c2:22:
09:0a:25:79:0c:ef:5a:af:2f:3a:5f:19:2e:d3:87:0e:c3:61:
42:e7:0d:c2:88:ff:53:cd:5a:e2:c5:71:5c:56:91:8d:2f:8d:
76:bc:34:43:0d:3b:cd:28:83:f7:07:1d:d5:fd:68:eb:c8:7c:
d5:1f:25:6c:13:e5:2c:b8:0d:92:e8:0f:fd:17:01:a9:03:3a:
fb:a3:20:7b:7c:6f:63:29:a8:e0:09:84:da:0a:8f:25:71:33:
d8:31:03:09:0f:93:e6:09:d3:94:43:67:bf:4f:48:14:31:ff:
21:ac:36:8f:75:61:0c:f0:fa:b4:47:a7:72:a8:9e:4c:a1:20:
16:36:86:2c:2e:d9:fc:74:52:52:4c:5e:d7:5b:8b:fc:6c:f0:
9f:b1:de:7a:35:f1:18:07:d3:69:6f:b4:3a:83:ee:63:e9:d5:
c9:44:00:53:ff:7a:b2:76:92:f7:60:b1:51:79:35:06:d2:48:
f7:8f:c7:b0:c8:9d:0a:4b:f8:e2:85:eb:68:8c:4b:34:21:6c:
70:90:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:23:27 2026 by rpki-client