
Error: rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
File: 32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft (raw, json)
Hash identifier: 2MTaOks6WFN3osNDBlIwsxNOihvTXJzwP5HtMZRqnGQ=
Subject key identifier: CF:71:2A:05:0B:79:F5:B5:CC:5B:53:8F:5C:08:10:D7:8B:F0:8A:65
Authority key identifier: 32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
Certificate issuer: /CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
Certificate serial: 6A3BCCFAA49397DA0C266DEB4320FB52102AD96E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
Manifest number: 048B
Signing time: Sat 22 Aug 2026 22:28:18 +0000
Manifest this update: Sat 22 Aug 2026 22:23:18 +0000
Manifest next update: Sun 23 Aug 2026 22:48:18 +0000
Files and hashes: 1: 34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa (hash: rsvLfLXWmOmsFvXKOuIFMASLp2GgTe3uybkrsT6ZPQE=)
2: 32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl (hash: 1MvbfH9ywcLiIBh9CN/LoSXbCsbZJayY7t1BlzBmFkE=)
3: 323830343a343466633a3a2f33322d3438203d3e20323637363635.roa (hash: HXqd8TujuEgdE+VN3n8PE9VQniCZ6ZImgflI+tfpHrI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl
rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3b:cc:fa:a4:93:97:da:0c:26:6d:eb:43:20:fb:52:10:2a:d9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
Validity
Not Before: Aug 22 22:23:18 2026 GMT
Not After : Aug 23 22:48:18 2026 GMT
Subject: CN=CF712A050B79F5B5CC5B538F5C0810D78BF08A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:fa:d7:20:73:27:8d:d9:e7:e5:d6:b7:69:
74:e5:5a:34:06:70:c4:ac:bb:80:e9:da:61:73:f2:
d2:14:24:a6:10:50:cb:c9:8a:c1:b6:41:98:e3:6a:
b7:9f:85:fc:15:85:7f:02:53:2e:e3:db:f9:e2:0b:
9d:31:85:2b:17:e0:55:d4:94:76:f2:4d:d7:dd:fa:
0b:78:c2:e6:78:40:e0:3a:6d:22:99:2e:f8:7d:ed:
05:27:09:af:bb:ed:e5:84:28:09:a6:6c:ba:7f:c3:
1d:d9:13:97:6f:ec:4b:3c:d1:50:95:f0:1a:56:6a:
f2:51:da:94:73:a2:14:10:ff:48:00:2a:a9:cf:39:
90:6b:97:a3:7e:6f:eb:e1:f1:7b:d0:ab:1a:86:b2:
e7:b1:31:8c:f2:26:bf:f9:a8:32:e8:04:40:59:31:
b4:70:7a:64:f8:53:dd:11:0d:1c:4f:90:e6:b2:b2:
28:46:a5:82:12:5e:fb:6b:a2:dc:f4:aa:21:bd:08:
2d:e4:9d:71:dc:14:f1:75:d8:87:46:af:54:83:27:
af:65:e6:d6:dd:6b:3b:89:95:10:d7:5d:53:c5:bc:
33:80:c6:da:04:1f:77:47:cb:13:c3:5d:d0:b0:93:
01:90:ac:d9:af:b0:80:e4:16:9b:5a:f0:57:5b:72:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:2A:05:0B:79:F5:B5:CC:5B:53:8F:5C:08:10:D7:8B:F0:8A:65
X509v3 Authority Key Identifier:
keyid:32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f6:13:9a:f9:48:39:8c:cf:41:b7:f0:6e:74:16:6b:2d:87:
31:e4:b2:ae:72:bd:85:b0:46:00:9c:1d:4b:31:ee:00:26:ad:
4e:0d:59:65:6c:66:ba:19:f8:f3:ae:04:00:14:55:65:fd:22:
38:3e:aa:49:ba:f6:0a:78:95:12:9a:fc:f8:77:fa:30:0a:6b:
ee:d7:82:f0:2a:21:ee:af:e2:d4:78:c0:6e:d3:14:a1:b7:f2:
7a:68:c3:44:35:54:37:99:28:0e:80:48:c8:2d:44:b3:08:09:
73:94:33:16:51:b2:4b:e5:79:03:c3:61:b5:64:74:63:21:81:
3e:b4:3a:33:5c:8f:cf:83:50:bf:92:c1:39:28:bf:ce:a1:f8:
8f:5f:d6:98:40:0e:96:e5:ba:04:54:0c:d4:b4:58:d7:32:71:
f5:a7:a6:97:a7:af:73:f3:83:55:aa:1d:31:af:aa:48:75:60:
a2:d9:51:93:5e:fa:c5:fc:e2:ae:38:4a:17:cc:d7:c9:50:d7:
05:af:d6:4f:28:29:55:96:5d:aa:16:fd:ed:c6:29:5b:42:d4:
f1:7e:92:01:46:f2:27:23:e6:e2:9d:11:87:c1:c2:1e:2d:d7:
29:22:18:2f:1f:4d:d1:be:c9:30:5e:fc:3b:c7:20:c6:af:31:
c8:52:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:06:06 2026 by rpki-client