
Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier: NYaFuwpP15rZTgKxQgT/+EsSDkJV0wbhJ0KsDu45aWg=
Subject key identifier: 86:7D:D4:59:4C:E0:3C:B8:EC:E0:52:AA:33:97:D8:F7:46:7A:46:6B
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial: 169A7FA09B4DC4EF1D49EAF27CE87EC081C5E9EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number: 0487
Signing time: Mon 24 Aug 2026 07:37:24 +0000
Manifest this update: Mon 24 Aug 2026 07:32:24 +0000
Manifest next update: Tue 25 Aug 2026 08:12:24 +0000
Files and hashes: 1: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
3: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: BEmSHutE45tl9LsnRNjWDggBJLW6FDQ1YLEEoO4blGs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 08:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9a:7f:a0:9b:4d:c4:ef:1d:49:ea:f2:7c:e8:7e:c0:81:c5:e9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Validity
Not Before: Aug 24 07:32:24 2026 GMT
Not After : Aug 25 08:12:24 2026 GMT
Subject: CN=867DD4594CE03CB8ECE052AA3397D8F7467A466B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:a8:47:60:6f:07:10:02:ac:00:d3:60:66:
9a:ec:47:35:b5:aa:de:76:1c:48:fc:52:88:78:c6:
32:77:95:79:7b:48:90:76:3e:72:73:b2:55:5d:8e:
a8:de:cc:6d:26:c7:a2:01:83:8c:9d:ed:06:80:33:
e1:5c:dc:45:23:9f:b9:f7:bf:4f:13:d6:8c:01:d8:
27:3c:67:c8:ed:29:df:39:df:a4:3e:a7:e3:3c:3e:
7d:a4:d5:9e:5d:3d:0b:cc:12:b0:df:41:3a:7e:c4:
09:c1:41:7e:bb:e2:6a:e3:5d:5b:91:7d:9c:78:58:
20:03:16:a3:28:a2:8c:5d:85:5c:95:b6:87:24:60:
81:d4:dd:4d:64:f4:0e:0d:c1:a0:81:87:71:5b:9a:
d3:82:48:a3:63:1c:b8:03:ce:4f:d9:a9:4e:9f:8d:
22:2d:87:25:34:43:a2:86:c4:49:3b:7a:52:9c:ce:
1c:fa:cc:60:4d:f7:f5:2b:17:bd:a4:57:02:eb:2a:
9c:c8:64:90:b5:e5:9b:25:54:0e:41:67:b3:3d:df:
4a:9d:ca:3f:cf:92:35:19:b2:3f:b9:43:c6:e5:17:
51:96:1e:15:d8:a3:aa:4f:91:dd:dd:98:e3:81:ce:
a9:79:8e:60:b9:ae:87:17:fe:36:c9:0f:92:f7:77:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:D4:59:4C:E0:3C:B8:EC:E0:52:AA:33:97:D8:F7:46:7A:46:6B
X509v3 Authority Key Identifier:
keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fe:1d:d3:20:e7:86:91:21:1a:c7:06:83:64:b7:94:0b:23:
83:cb:22:8f:93:30:22:7e:1f:70:f5:4a:1e:07:d5:c0:c6:56:
c0:ff:8d:81:81:c2:5e:36:a0:e6:30:dc:aa:bf:4b:6b:0c:77:
18:60:fb:ab:29:ef:d7:98:d8:91:ec:43:2d:30:99:e3:60:81:
02:12:5a:94:f2:32:c6:c7:86:de:c2:69:45:14:2d:e6:f8:8c:
91:c9:ed:16:10:3c:83:54:c1:0a:73:4d:d4:33:64:fe:da:36:
42:1f:b4:36:51:08:a6:7e:9c:2a:44:bd:14:be:d0:2e:e1:c5:
b5:78:a1:fa:e3:ff:38:9f:df:da:83:95:02:fa:1b:d9:9b:42:
da:de:8f:cc:d4:47:66:ff:8a:ac:eb:f6:c6:59:8e:93:29:da:
e6:93:c4:7a:2e:51:34:79:19:8e:b4:c0:11:3d:b2:73:15:2f:
43:0b:7f:58:b6:28:05:60:3b:c5:68:9b:39:ed:fa:58:2f:56:
1a:89:36:f2:2b:d6:4e:3d:a6:fd:0c:bc:a1:3a:53:7f:70:18:
e4:ff:54:ef:61:47:cb:28:e6:2d:db:c3:d6:a1:23:9d:96:01:
c7:d1:f3:8d:48:39:97:02:96:fb:91:40:ca:ec:3d:27:01:5c:
f3:51:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:28:16 2026 by rpki-client