
Error: rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File: F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier: N5PouxEVkucIeHVzDBFrtZUuPfjngowEBz1vlXnSzO4=
Subject key identifier: 95:C4:F9:6D:CE:93:57:C4:A1:48:49:CF:06:65:05:EE:C7:CA:34:93
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer: /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial: 4AC7956158AC447B31D72373BC401FFE7FA49002
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number: 0482
Signing time: Sun 23 Aug 2026 07:54:22 +0000
Manifest this update: Sun 23 Aug 2026 07:49:22 +0000
Manifest next update: Mon 24 Aug 2026 10:26:22 +0000
Files and hashes: 1: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: 1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=)
2: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: 8iVmccCObAe8NicDmn1CKO+ITDAM6KsmBd6esHYUw5A=)
3: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: CmPxrqFXNBYAuiTeOwbtYeVu27GG1fvYntO4o7Wna5g=)
4: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: pyCdUGZA/KCjV2vuJfmjdtjHYaDSd98SlnH0/zdU7AU=)
5: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: SIqOp4C7cyQZnE8lRZeUR8CavFJ39Zvz6esDq7CWol8=)
6: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: 7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=)
7: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: 67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=)
8: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=)
9: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: oQBAXPZji36RfnVMVJVINpqYcweI93PKAZNd2d5Fqk0=)
10: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: IUn9Ibzt5h8hvPxl4OpQ9/sJG+I32FM0kwk3S6Jyd+I=)
11: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: /cRftArBCUj2WWQ8C1msKZTOuAUy5QdP5s35H3n0K7k=)
12: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=)
13: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=)
14: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: A87ATHnOfq+iPA/HmwNUzY0wG/yof3krOeM5w1KT9tc=)
15: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: Ny9Fvky013bp8WK5sYukQjlLTzc5ByEuXAzzHBLFDvM=)
16: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c7:95:61:58:ac:44:7b:31:d7:23:73:bc:40:1f:fe:7f:a4:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Validity
Not Before: Aug 23 07:49:22 2026 GMT
Not After : Aug 24 10:26:22 2026 GMT
Subject: CN=95C4F96DCE9357C4A14849CF066505EEC7CA3493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:90:76:9f:c3:b2:9c:3a:4a:4c:4b:b7:96:
1b:0b:af:b2:8e:a9:39:91:b1:e6:17:9d:e3:c7:a3:
c6:1f:c8:2f:d9:bb:e9:ca:9f:cd:6e:d2:df:70:3e:
de:99:70:44:80:10:bb:91:b8:8c:04:44:30:2d:49:
75:a4:77:1c:a1:d6:0f:f2:c6:46:7d:4a:ce:24:35:
0a:0c:f0:49:94:9e:29:42:69:09:94:c3:08:56:b6:
e9:2d:97:97:a3:c7:e1:03:3a:0e:39:8a:b4:dc:b1:
6d:6d:16:50:89:f9:73:0d:06:3c:73:89:70:19:d2:
4d:00:cc:a7:ff:5f:81:17:8f:da:fe:69:e7:46:94:
e3:1f:3c:ef:cc:f0:0f:ec:64:d1:78:b9:0a:d9:03:
bd:42:ed:cd:80:08:9d:c8:55:f1:4c:9a:b4:a0:1b:
d5:26:5b:e8:8d:52:85:8f:94:3f:52:c1:97:cb:eb:
13:44:9e:73:8d:d6:0d:3c:5e:57:57:99:b9:fa:d8:
92:6e:82:70:01:e8:ef:d2:b6:d9:c0:cb:ac:31:50:
a9:c6:1e:70:66:89:5c:f6:e2:64:f7:2d:37:b7:1f:
77:27:0d:b1:13:43:d9:b4:68:f7:01:20:68:5c:90:
27:7d:cf:d3:36:b3:22:80:23:27:6a:7c:7e:ad:26:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:F9:6D:CE:93:57:C4:A1:48:49:CF:06:65:05:EE:C7:CA:34:93
X509v3 Authority Key Identifier:
keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1d:8c:20:17:5a:e5:93:94:9c:e1:57:cb:29:14:84:ae:27:
ee:62:cb:99:e8:fe:3d:fa:c4:83:c5:20:26:36:f2:ca:20:f2:
e6:98:ff:69:18:2c:72:4b:57:88:31:4b:96:cf:e2:6f:0f:59:
ad:7e:5e:47:04:8a:72:48:b0:a5:64:f2:20:88:26:57:93:8c:
fa:5f:43:62:9f:45:08:4a:51:33:b2:7b:fa:94:07:ed:0f:08:
5d:41:88:08:1d:91:8d:4a:a6:c3:84:de:b9:fe:9d:d8:3e:60:
98:75:cd:fb:02:b2:2d:68:4c:93:db:cc:1d:2e:f1:c0:69:ec:
00:bb:81:0d:71:d0:b9:f6:0f:eb:44:32:1a:36:10:9a:f6:78:
42:f6:c4:92:b5:bc:78:59:62:19:bc:66:24:3a:b0:c8:6c:25:
46:9f:0d:43:38:e5:83:60:6a:27:d2:d7:af:7d:8a:04:a3:c7:
16:e9:06:c4:e0:b2:e2:33:85:8d:04:ee:9f:92:68:b5:a9:fc:
07:96:c9:d6:a5:ec:a0:32:d0:09:1b:df:64:65:9d:cc:3b:f3:
d6:59:59:8f:4a:7e:d6:fd:21:15:60:6f:b3:c9:da:9a:4b:d6:
24:4f:b3:f7:87:14:65:7f:40:d1:58:8e:42:e7:f1:55:b4:ad:
30:e1:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:25:51 2026 by rpki-client