
Error: rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
File: 9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft (raw, json)
Hash identifier: GWSI4M19Gdkjfiaq001lDTxZTFYr9KSe9T9FXr/08KY=
Subject key identifier: B1:97:82:E1:EB:3F:01:F4:F1:08:A4:B7:05:05:18:64:1F:55:7C:33
Authority key identifier: 9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7
Certificate issuer: /CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
Certificate serial: 3C58E8EECE2340A979EF3BCCF957D9216D14978A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
Manifest number: 0244
Signing time: Sun 23 Aug 2026 08:10:00 +0000
Manifest this update: Sun 23 Aug 2026 08:05:00 +0000
Manifest next update: Mon 24 Aug 2026 09:18:00 +0000
Files and hashes: 1: 34352e3233332e3138382e302f32322d3332203d3e20323637333438.roa (hash: yJhSqR6sY+RWX328V/4SPjt/m5uViEEbVyuoi+3Bc/Y=)
2: 323830343a346331343a3a2f33322d313238203d3e20323637333438.roa (hash: QaUBZvIRzlgLNe+cCcSysvwHxqcjlDsVHI7LHkgqSRc=)
3: 9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl (hash: JlNP2bHI9z0ZbLN6Fm5jFQiQEDz77pomVaKy9thdpVE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl
rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 09:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:58:e8:ee:ce:23:40:a9:79:ef:3b:cc:f9:57:d9:21:6d:14:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
Validity
Not Before: Aug 23 08:05:00 2026 GMT
Not After : Aug 24 09:18:00 2026 GMT
Subject: CN=B19782E1EB3F01F4F108A4B7050518641F557C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:0e:7d:33:2a:68:ae:69:41:5a:90:7c:14:
ac:f4:40:81:70:d1:da:c3:bf:2e:76:02:7d:93:17:
c3:3b:54:ac:66:78:54:fb:ad:74:4b:10:4b:60:11:
c6:7b:98:65:e9:e1:8e:4f:9f:26:bf:fa:b7:00:55:
37:96:97:f4:89:97:e1:0f:e0:03:d5:ae:05:ed:95:
98:e3:62:06:df:89:93:fc:c6:99:5d:11:40:0c:ba:
70:58:1d:39:f9:a3:ea:47:28:33:d4:59:16:2d:c5:
eb:cb:5e:4b:4f:3c:39:d4:be:55:84:5d:db:4c:e2:
69:a2:d2:97:3d:90:c4:0c:8c:65:60:3a:ff:5c:42:
ce:6d:52:b5:0f:df:4f:ff:11:e6:f4:7c:6f:04:28:
b9:24:0d:a7:61:7a:bf:3e:0f:c6:06:dc:4a:64:d6:
bb:bb:d5:c3:26:70:4d:07:e1:cb:e3:ea:3a:07:4b:
c2:41:72:0d:72:07:77:eb:00:85:61:e2:4f:0d:37:
4f:56:8c:26:e6:3f:d2:de:e9:fa:61:76:99:77:c3:
52:8e:bd:c9:47:54:4c:09:a8:b1:92:fd:c1:2e:53:
f1:1a:54:9c:4e:31:76:b8:d2:15:d8:e4:1c:67:22:
d4:93:19:a6:01:1d:35:06:19:17:cf:2b:a7:8f:6d:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:97:82:E1:EB:3F:01:F4:F1:08:A4:B7:05:05:18:64:1F:55:7C:33
X509v3 Authority Key Identifier:
keyid:9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1d:45:35:e0:4d:2d:64:02:71:8c:da:bb:76:ae:5f:1d:44:
bf:ef:64:b0:e3:2f:a3:5c:ff:a4:df:ba:0b:ab:b3:fe:4f:63:
0b:a5:db:cb:0e:02:c9:b8:a4:b5:ab:7f:24:d3:28:8d:17:71:
3f:85:72:6e:3b:c1:f9:a0:ad:8c:22:ce:b2:7b:1d:06:0e:54:
90:0b:5e:4e:c8:af:57:72:0c:41:a5:70:59:94:0f:c0:53:4b:
7b:0d:43:53:cf:71:90:71:a3:bf:6a:85:97:e6:ff:21:f6:c3:
e8:a8:e9:91:49:42:6f:e7:2c:3e:ba:6b:1b:d9:a3:f5:98:af:
b3:0d:c1:e5:01:da:37:ea:6f:f7:63:2f:d8:7b:9a:96:f3:98:
5b:6e:87:19:89:53:ac:03:7b:f3:9c:c9:09:35:96:de:ff:8c:
d2:ad:1d:fe:01:38:20:dc:b2:2d:09:4d:0a:16:65:42:50:44:
98:01:c3:0d:7e:f2:f9:0a:b9:1f:f7:3a:fe:4a:b3:e4:d5:c0:
32:ae:56:2b:3f:1a:ea:f6:a5:9a:d4:a7:b8:83:c0:9b:ec:be:
b0:27:43:2e:a1:6b:12:14:3e:02:3f:f9:ca:43:f1:21:e1:32:
7c:64:2c:2e:e6:29:97:43:38:5d:4d:dc:0f:c6:06:30:55:b7:
65:77:d3:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPFjo7s4jQKl57zvM+VfZIW0Ul4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZCMkNFMkI5N0NFODJFMEZBMkZBNTY3NEUzNjlFNENG
MkU2RTFDNzAeFw0yNjA4MjMwODA1MDBaFw0yNjA4MjQwOTE4MDBaMDMxMTAvBgNV
BAMTKEIxOTc4MkUxRUIzRjAxRjRGMTA4QTRCNzA1MDUxODY0MUY1NTdDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ow59MypormlBWpB8FKz0QIFw
0drDvy52An2TF8M7VKxmeFT7rXRLEEtgEcZ7mGXp4Y5Pnya/+rcAVTeWl/SJl+EP
4APVrgXtlZjjYgbfiZP8xpldEUAMunBYHTn5o+pHKDPUWRYtxevLXktPPDnUvlWE
XdtM4mmi0pc9kMQMjGVgOv9cQs5tUrUP30//Eeb0fG8EKLkkDadher8+D8YG3Epk
1ru71cMmcE0H4cvj6joHS8JBcg1yB3frAIVh4k8NN09WjCbmP9Le6fphdpl3w1KO
vclHVEwJqLGS/cEuU/EaVJxOMXa40hXY5BxnItSTGaYBHTUGGRfPK6ePbU4HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsZeC4es/AfTxCKS3BQUYZB9VfDMwHwYDVR0j
BBgwFoAUn7LOK5fOguD6L6VnTjaeTPLm4ccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR1ZFVqSnFISGc4UVFOQjhBZVZqYzFCU0JpQWpmQjJEdWFaeUNoemNI
Z0IvMC85RkIyQ0UyQjk3Q0U4MkUwRkEyRkE1Njc0RTM2OUU0Q0YyRTZFMUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQjJDRTJCOTdDRTgyRTBG
QTJGQTU2NzRFMzY5RTRDRjJFNkUxQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDR1ZFVqSnFISGc4UVFOQjhBZVZqYzFCU0JpQWpmQjJEdWFaeUNoemNIZ0IvMC85
RkIyQ0UyQjk3Q0U4MkUwRkEyRkE1Njc0RTM2OUU0Q0YyRTZFMUM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACR1FNeBNLWQCcYzau3auXx1Ev+9ksOMvo1z/pN+6C6uz/k9jC6Xbyw4Cybik
tat/JNMojRdxP4VybjvB+aCtjCLOsnsdBg5UkAteTsivV3IMQaVwWZQPwFNLew1D
U89xkHGjv2qFl+b/IfbD6KjpkUlCb+csPrprG9mj9Zivsw3B5QHaN+pv92Mv2Hua
lvOYW26HGYlTrAN785zJCTWW3v+M0q0d/gE4INyyLQlNChZlQlBEmAHDDX7y+Qq5
H/c6/kqz5NXAMq5WKz8a6valmtSnuIPAm+y+sCdDLqFrEhQ+Aj/5ykPxIeEyfGQs
LuYpl0M4XU3cD8YGMFW3ZXfTDw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:11:46 2026 by rpki-client