
Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier: YQAFbo9v2tQV3jfnuuvWArCGLCObpKBUAdRzY3mMIio=
Subject key identifier: A4:A4:9F:0A:6C:18:14:85:80:9C:15:A2:67:22:A5:D6:11:1B:06:9E
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial: 4830C0481D27CA4F8C234B8C661C2FAAE92D7266
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number: 0482
Signing time: Sun 23 Aug 2026 09:51:59 +0000
Manifest this update: Sun 23 Aug 2026 09:46:59 +0000
Manifest next update: Mon 24 Aug 2026 13:26:59 +0000
Files and hashes: 1: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
2: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
3: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
4: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
5: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: el5NR2cq9xj+25ZiNzXZBloUCgFcD4LAa/24jU8Ef1A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:30:c0:48:1d:27:ca:4f:8c:23:4b:8c:66:1c:2f:aa:e9:2d:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Validity
Not Before: Aug 23 09:46:59 2026 GMT
Not After : Aug 24 13:26:59 2026 GMT
Subject: CN=A4A49F0A6C181485809C15A26722A5D6111B069E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:92:2d:aa:df:c1:12:ef:f3:d8:59:52:4f:15:
b6:f6:76:97:fd:1f:99:3a:16:af:ab:46:5a:56:23:
69:8f:58:36:5b:d0:63:6f:5c:c7:37:15:d2:c0:96:
3e:58:e2:3d:87:c5:93:c4:f3:41:18:36:d4:02:68:
e6:f7:8a:f5:63:15:8a:8f:38:18:8f:ee:03:f3:f9:
54:20:9a:0f:d5:f6:ff:2d:d8:b9:e9:b7:fe:78:0a:
2e:ea:f4:f3:02:a6:42:ff:59:35:dd:4f:6f:0c:ab:
06:d9:26:b5:97:56:dc:cc:cc:58:91:73:1b:79:9d:
f4:45:30:10:e3:d9:b6:86:4e:68:51:36:42:08:0d:
80:b1:f7:d8:98:cb:ca:b8:fc:02:ab:d6:ef:60:d6:
d5:13:91:08:99:74:d0:58:fb:3e:e7:64:a5:77:30:
08:2d:da:69:f6:fb:02:92:84:dd:c2:0b:88:2a:99:
c4:5c:f4:c3:02:5a:70:30:89:01:c5:13:d1:3f:28:
65:6d:43:50:71:b6:50:cc:89:70:6b:30:e8:92:ce:
6e:f1:bd:d6:ca:72:ad:89:55:56:8d:1a:6d:fa:a3:
98:57:52:56:68:16:ed:a7:2a:c2:f5:1c:87:4b:fc:
fd:2f:80:2a:e8:73:b4:b6:d1:ca:90:3e:25:13:6e:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:9F:0A:6C:18:14:85:80:9C:15:A2:67:22:A5:D6:11:1B:06:9E
X509v3 Authority Key Identifier:
keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:c5:b9:d7:c4:86:42:49:0a:0b:b4:63:77:10:8d:e3:36:
9e:66:9f:49:6a:ab:be:cf:ba:1d:2e:ec:83:1a:09:39:7f:b7:
92:b9:e4:8b:fe:59:0c:94:b6:98:a2:62:4c:9f:50:da:50:29:
b3:f1:63:19:55:98:8d:80:92:80:5c:b6:c0:d7:d8:93:72:3f:
9b:84:62:6a:09:47:39:03:3b:fa:36:f2:9d:de:97:28:66:2c:
ca:12:67:aa:c0:e5:2e:00:41:30:e8:9f:f2:74:58:dc:1d:34:
7b:2e:e5:63:5c:5d:f4:f1:73:35:1b:7b:c4:11:5f:40:0b:bb:
26:d0:60:56:f8:9e:b3:fd:46:ea:24:ba:fb:57:56:19:31:f4:
8a:5c:07:8a:1f:02:37:26:d3:1c:10:a4:47:e5:8a:f4:8a:3d:
e5:b1:0f:ed:04:65:d3:14:e6:c0:3a:e8:ce:65:70:ea:a1:55:
58:4b:25:f4:94:60:31:21:b1:1d:dc:d2:a9:32:02:09:42:99:
d2:73:68:d0:f4:0c:11:ed:d3:fd:d0:c2:cc:81:98:18:54:0b:
d5:73:39:b4:d7:e0:2e:f8:f8:b1:59:3e:49:54:d3:f5:2e:f1:
64:41:52:dc:05:f9:e4:20:39:ad:42:99:c0:e6:8a:ae:ad:fe:
82:56:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:59 2026 by rpki-client