
Error: rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier: QzdMJZeq1ozHLqhnLUrSJ+2hBVFmJad3cKQt6/zE6qM=
Subject key identifier: 99:0F:AC:7E:D3:4C:CA:8A:FC:EA:2E:ED:77:EF:C9:D3:EA:CF:7B:C5
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer: /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial: 7EB899ACDA3A67B0839A0F5A08783AF23303F585
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number: 03EE
Signing time: Mon 24 Aug 2026 06:48:31 +0000
Manifest this update: Mon 24 Aug 2026 06:43:31 +0000
Manifest next update: Tue 25 Aug 2026 09:38:31 +0000
Files and hashes: 1: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: z+YShh2i7AQbjwfbZCScAlLVJtG/p4Cg8MeyqUB1gOA=)
2: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: OQmF0Jk90VHvSqF5ofjjQsI1Xy469L2IQZ9fHgYE6JQ=)
3: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: Zt4MkmT1uIFa4aI0STmrWKmBdbodYsLe4VeYI+RxS9A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 09:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b8:99:ac:da:3a:67:b0:83:9a:0f:5a:08:78:3a:f2:33:03:f5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Validity
Not Before: Aug 24 06:43:31 2026 GMT
Not After : Aug 25 09:38:31 2026 GMT
Subject: CN=990FAC7ED34CCA8AFCEA2EED77EFC9D3EACF7BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:5d:3e:98:ba:74:dd:7b:c8:5f:aa:d4:ea:
e9:44:e3:77:ca:b7:04:d3:7d:1c:73:4d:a5:54:8e:
36:72:46:83:7f:c0:7c:aa:30:91:74:75:02:d3:15:
8f:15:d7:ea:2b:55:49:7e:15:bc:b0:56:e1:85:8d:
4b:fa:7d:bb:11:ec:10:1f:6c:4a:9d:46:18:4b:6b:
11:a9:19:b8:ba:d6:77:33:44:b4:a8:51:95:e9:48:
92:79:15:d7:07:3b:37:11:d7:db:87:e6:96:01:c8:
83:48:d5:12:96:6f:14:39:78:19:71:d0:95:c1:2e:
4a:3c:16:70:5e:11:86:bf:c3:02:47:fb:83:80:ca:
e5:63:db:7c:f0:80:d1:e3:08:25:96:38:6b:98:31:
a2:78:1e:3d:86:cc:76:d3:e9:dc:31:54:26:07:58:
e1:3f:13:71:cf:f3:e1:28:be:a3:4f:07:aa:0a:22:
8e:69:24:31:9d:b0:5b:a0:3c:28:67:60:51:cc:3d:
8f:c1:a2:4b:79:0c:6b:c4:33:23:31:3e:a5:38:ec:
67:cd:7d:2e:c1:52:6c:d1:5b:ff:7e:f5:89:f5:89:
ee:bf:79:2f:aa:0e:39:93:8e:97:91:75:c2:be:90:
23:62:7a:21:79:75:4f:8e:00:7f:80:0f:61:68:c5:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:AC:7E:D3:4C:CA:8A:FC:EA:2E:ED:77:EF:C9:D3:EA:CF:7B:C5
X509v3 Authority Key Identifier:
keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:a0:83:83:6e:7d:90:32:62:74:39:29:39:c7:f0:66:d9:
bb:7a:dd:09:13:1f:8b:f4:8c:1f:27:7f:11:8a:82:a9:1e:4b:
2f:2a:63:13:84:1f:7f:16:0f:b8:43:24:fc:ca:ce:ca:ba:e3:
95:e1:77:c8:56:de:73:e8:06:8d:80:ae:e1:78:1f:3e:eb:15:
01:b1:2a:b7:89:da:87:0a:a0:d0:5d:d2:20:1a:0d:a2:b2:1b:
7b:dd:48:f5:fd:2a:0f:49:a6:27:67:85:f5:d9:85:87:0f:c4:
23:2f:ee:6f:17:ad:c7:48:50:a9:d8:36:62:c1:f7:96:30:d6:
10:37:fa:e9:26:f1:79:b9:87:ee:a9:04:77:57:97:bc:aa:f9:
cb:24:25:62:4e:b6:10:49:74:69:de:19:7e:f1:fa:df:5b:a6:
5c:4f:d7:7f:bf:8d:77:e9:8a:55:43:24:48:16:85:5f:de:91:
17:f4:dc:ff:2a:ce:8b:f9:52:29:c8:01:80:09:b8:3a:f1:a1:
a1:96:a1:8a:2f:a1:b9:fb:e3:f9:20:f8:72:cf:53:01:d3:64:
df:51:58:b6:68:72:04:01:9f:03:43:18:32:0a:0d:12:70:92:
32:76:dd:a8:bf:96:bc:55:8f:7c:a0:a5:3b:67:cd:9e:fe:d3:
19:98:e3:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfriZrNo6Z7CDmg9aCHg68jMD9YUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBDMzNBN0ZCNUZGRENDRUM5OUVFRjhBNjlDQUY5MUQ1
NzkxQTlBMzAeFw0yNjA4MjQwNjQzMzFaFw0yNjA4MjUwOTM4MzFaMDMxMTAvBgNV
BAMTKDk5MEZBQzdFRDM0Q0NBOEFGQ0VBMkVFRDc3RUZDOUQzRUFDRjdCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZV0+mLp03XvIX6rU6ulE43fK
twTTfRxzTaVUjjZyRoN/wHyqMJF0dQLTFY8V1+orVUl+FbywVuGFjUv6fbsR7BAf
bEqdRhhLaxGpGbi61nczRLSoUZXpSJJ5FdcHOzcR19uH5pYByINI1RKWbxQ5eBlx
0JXBLko8FnBeEYa/wwJH+4OAyuVj23zwgNHjCCWWOGuYMaJ4Hj2GzHbT6dwxVCYH
WOE/E3HP8+EovqNPB6oKIo5pJDGdsFugPChnYFHMPY/Bokt5DGvEMyMxPqU47GfN
fS7BUmzRW/9+9Yn1ie6/eS+qDjmTjpeRdcK+kCNieiF5dU+OAH+AD2FoxfpXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmQ+sftNMyor86i7td+/J0+rPe8UwHwYDVR0j
BBgwFoAUUMM6f7X/3M7Jnu+Kacr5HVeRqaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZ
S3EvMC81MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzMzQTdGQjVGRkRDQ0VD
OTlFRUY4QTY5Q0FGOTFENTc5MUE5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZS3EvMC81
MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf4Ggg4NufZAyYnQ5KTnH8GbZu3rdCRMfi/SMHyd/EYqCqR5LLypjE4QffxYP
uEMk/MrOyrrjleF3yFbec+gGjYCu4XgfPusVAbEqt4nahwqg0F3SIBoNorIbe91I
9f0qD0mmJ2eF9dmFhw/EIy/ubxetx0hQqdg2YsH3ljDWEDf66SbxebmH7qkEd1eX
vKr5yyQlYk62EEl0ad4ZfvH631umXE/Xf7+Nd+mKVUMkSBaFX96RF/Tc/yrOi/lS
KcgBgAm4OvGhoZahii+hufvj+SD4cs9TAdNk31FYtmhyBAGfA0MYMgoNEnCSMnbd
qL+WvFWPfKClO2fNnv7TGZjjTw==
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:23:51 2026 by rpki-client