
Error: rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
File: 9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft (raw, json)
Hash identifier: Wbpk9S0K4rdQzcGgwJ0aJsDUXwW/VDDiQbTGx1bBDDU=
Subject key identifier: 77:26:29:92:17:EC:6F:1F:EB:AD:1A:52:58:9D:0F:E6:15:84:1E:EC
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Certificate issuer: /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial: 535F134C58B213044E91CE23BC00B330AB1C4B5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
Manifest number: 0488
Signing time: Sun 23 Aug 2026 23:30:40 +0000
Manifest this update: Sun 23 Aug 2026 23:25:40 +0000
Manifest next update: Tue 25 Aug 2026 01:54:40 +0000
Files and hashes: 1: 9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl (hash: thuoBsTcgga3wS4z2LA5qc8c2ypbhIzSoLSiWxKKxPk=)
2: 323830343a363133303a3a2f33322d3438203d3e20323639323139.roa (hash: lFdnaz5/yVIcpdz7wRTI+m1aEZucDGeKki3kr5g2t7A=)
3: 34352e3138322e302e302f32322d3234203d3e20323639323139.roa (hash: mjyt1OBknjEZsKtF1vX4ibzhCkrxO5LHKKVoduEir3U=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 01:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5f:13:4c:58:b2:13:04:4e:91:ce:23:bc:00:b3:30:ab:1c:4b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Validity
Not Before: Aug 23 23:25:40 2026 GMT
Not After : Aug 25 01:54:40 2026 GMT
Subject: CN=7726299217EC6F1FEBAD1A52589D0FE615841EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:72:32:d7:4f:d7:e7:c1:72:44:0c:66:be:
3c:5a:1b:71:d5:92:3a:bc:9f:3e:d9:d1:4b:f4:0b:
d0:19:47:c5:b8:bc:ab:47:cc:83:23:90:c4:82:c9:
d7:9b:61:84:43:97:c7:e7:10:8f:fa:20:62:6e:19:
4f:83:46:eb:d2:5d:f3:60:4d:d6:83:c8:fc:66:5c:
c7:cb:86:96:1a:62:19:68:e2:dd:f8:c3:9d:e1:62:
95:b9:49:96:fb:7f:93:fa:cb:bb:de:f4:23:bd:7d:
5b:fe:ca:b8:a2:44:bc:f4:80:13:97:a6:87:7a:d6:
f0:50:10:3b:62:4c:86:da:96:99:0e:14:69:1b:9d:
66:33:cc:20:fc:b4:98:1b:ed:5c:74:a9:d1:11:8e:
68:1d:21:26:47:f3:18:77:c2:0d:8e:62:7d:23:02:
a6:01:c4:7f:b2:75:e5:47:f8:44:d3:10:f9:6f:e4:
97:ca:73:5c:d7:89:90:54:48:46:d8:6d:e2:de:35:
f5:7c:7c:40:33:b8:bd:83:cf:2e:27:d1:83:b6:05:
1e:16:c9:e5:41:77:33:32:c7:fc:0c:c0:ce:d5:80:
53:d6:94:8e:9c:95:df:bc:95:87:51:eb:9c:d2:9b:
bf:37:9c:a2:6f:95:a7:bc:a9:af:84:5c:6a:3a:29:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:29:92:17:EC:6F:1F:EB:AD:1A:52:58:9D:0F:E6:15:84:1E:EC
X509v3 Authority Key Identifier:
keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:0e:7e:3c:c9:93:bf:e7:27:aa:2a:95:d5:19:90:e8:56:
6b:d5:44:be:e1:1a:39:ab:6b:71:35:c7:5e:1d:9d:a2:24:82:
45:69:93:79:b8:0d:7f:95:96:7b:90:54:2a:2e:df:e0:ff:49:
eb:01:62:80:fd:e9:4b:98:d9:bc:d5:bc:9b:26:a5:91:d9:83:
dd:63:a2:eb:85:e7:96:af:ec:02:53:32:e3:e7:53:25:30:6a:
62:b3:b1:9e:09:cb:6e:72:06:cf:f2:cb:9b:84:1e:4c:1a:0e:
4a:9a:ef:18:cd:0a:c2:d5:fb:21:01:af:37:74:b0:a9:f2:d1:
e3:91:24:f6:f7:20:88:76:24:53:de:27:b2:64:64:a8:a4:08:
5a:11:eb:68:23:d4:80:8d:c8:ec:fe:b3:af:13:f7:8e:63:ba:
c0:c8:5f:13:5a:7a:94:60:c9:f0:3e:aa:d1:58:db:0a:4f:c0:
6e:e6:64:76:ef:54:96:cd:ed:2c:a4:3e:46:99:dc:92:7d:71:
96:fc:a4:b0:ce:8c:5e:8d:7c:55:78:49:32:d8:94:ef:b0:94:
f8:5d:25:f6:b9:a6:58:0c:b6:fb:bf:d5:70:bb:a4:90:b4:fc:
90:13:02:6f:b3:18:7d:bd:f0:a7:49:16:9d:e6:df:c2:7a:2c:
f5:76:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:24:42 2026 by rpki-client