
Error: rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File: F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier: Qu7o8KY9Eh/qj3ea/+NuUcZRwY+fOET8P/QGdC6ltGA=
Subject key identifier: 9E:41:F4:9D:D2:0B:0F:9B:19:E2:E4:B9:A8:D9:1F:28:DC:A8:AC:CF
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer: /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial: 04A763151D5C346EE494ACDC2BF5038E1836FC54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number: 04DE
Signing time: Sat 31 Oct 2026 17:26:50 +0000
Manifest this update: Sat 31 Oct 2026 17:21:50 +0000
Manifest next update: Sun 01 Nov 2026 18:48:50 +0000
Files and hashes: 1: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: oQBAXPZji36RfnVMVJVINpqYcweI93PKAZNd2d5Fqk0=)
2: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: 7dHPuOJKuplhTXbFAzr/aA6hdank/hEJRdp73pWB7SM=)
3: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: diFMCdAXbYPtAa9ysDKcQbCwvQajQlLg1fgD38qWc1A=)
4: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: SIqOp4C7cyQZnE8lRZeUR8CavFJ39Zvz6esDq7CWol8=)
5: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: 67NOM4bbT34r60p8Pdul0dsIk/9gxLuYlexifRJExYc=)
6: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: v9aVQKjWBmc1N7a1UU9dmc0E/VcpWvcLhRTVa05Gt7c=)
7: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: pyCdUGZA/KCjV2vuJfmjdtjHYaDSd98SlnH0/zdU7AU=)
8: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: A87ATHnOfq+iPA/HmwNUzY0wG/yof3krOeM5w1KT9tc=)
9: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: 1fgKO80FB4ABL5+b2C+NPG36fsWYtxanVGjxKe312KQ=)
10: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: TddILuuim6wsiPeHbiytUjZF+ec63qkswvVMnYreFdA=)
11: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: +7fdmHrVXXTuZCTniFykVc2VsYq63R69rYZzhIGxaUY=)
12: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: 8iVmccCObAe8NicDmn1CKO+ITDAM6KsmBd6esHYUw5A=)
13: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: CmPxrqFXNBYAuiTeOwbtYeVu27GG1fvYntO4o7Wna5g=)
14: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: tOyYqXtTx2ap/Bz/m2tLjpFnUbZ6+UZRAdXmlbI4HP8=)
15: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: Ny9Fvky013bp8WK5sYukQjlLTzc5ByEuXAzzHBLFDvM=)
16: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: IUn9Ibzt5h8hvPxl4OpQ9/sJG+I32FM0kwk3S6Jyd+I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 18:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a7:63:15:1d:5c:34:6e:e4:94:ac:dc:2b:f5:03:8e:18:36:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Validity
Not Before: Oct 31 17:21:50 2026 GMT
Not After : Nov 1 18:48:50 2026 GMT
Subject: CN=9E41F49DD20B0F9B19E2E4B9A8D91F28DCA8ACCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ee:c2:f9:a4:b3:a7:d6:23:81:d1:c6:fc:ee:
d8:fc:dc:fc:5f:78:83:08:d5:7f:c5:18:04:3b:a0:
f2:2c:87:88:dc:4e:39:88:fd:45:b9:55:19:2e:32:
a5:9d:c6:0d:ff:01:7a:a0:ee:5d:4c:1f:e3:dd:90:
8f:09:e0:d0:ce:2f:16:22:bd:68:3c:77:44:be:f8:
47:8c:6b:25:37:37:86:55:d0:11:a4:7d:82:80:f5:
1a:95:8f:04:8e:c8:9e:31:3b:4a:09:28:61:90:d7:
f1:6e:77:63:70:e9:28:f6:d0:88:a6:26:9f:fd:79:
a0:93:1d:d6:b2:53:8e:19:43:85:2e:c1:d0:41:29:
8d:6b:01:b4:c6:d3:fc:03:3e:61:0e:f1:73:a5:23:
92:c5:5e:fe:98:f8:f8:33:09:bd:6b:f1:fb:6a:53:
d2:3a:aa:95:83:d0:dc:9a:0a:2f:a2:80:76:7f:9b:
fd:0b:13:a3:b7:de:19:0a:d4:7e:07:37:ba:f9:5d:
12:67:b5:ec:90:5f:9f:62:f3:c8:9c:27:0f:51:63:
7c:aa:86:1b:ba:80:af:34:9d:d1:68:7b:20:f0:2a:
fc:f2:54:b6:5d:0a:4f:06:3f:c0:24:54:0c:6f:c5:
df:36:de:2a:ad:ba:a3:05:ad:0d:bf:9f:3f:64:a8:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:F4:9D:D2:0B:0F:9B:19:E2:E4:B9:A8:D9:1F:28:DC:A8:AC:CF
X509v3 Authority Key Identifier:
keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:df:83:64:9b:9b:b0:7a:e3:2a:fd:cb:1e:ce:89:99:8f:84:
91:ec:cf:ad:68:8e:e4:83:e8:34:e6:ba:2f:42:fa:a5:1d:9e:
d1:fd:37:19:97:83:76:55:39:1b:d5:a7:b2:c3:cf:f9:2d:81:
8d:76:65:68:3e:f5:c2:5a:de:6a:70:5d:49:f8:25:d0:f5:7c:
45:63:a9:03:44:a5:07:56:49:28:40:72:56:b9:d5:8c:d8:c4:
62:f7:42:8f:aa:cd:5d:b6:d6:bb:a6:6b:ed:95:e7:0c:a3:ef:
53:1b:75:fb:8b:53:82:29:55:c7:05:3a:1c:01:31:6b:ba:2b:
e9:9b:70:2b:23:ee:89:93:9d:44:a0:09:cc:d3:34:a9:56:37:
5a:4d:58:cc:11:51:9b:bb:3b:53:4d:11:83:fa:1b:9d:fb:0f:
2e:92:96:ce:00:58:5f:80:bb:88:2a:46:f4:b9:8d:be:3e:46:
bb:77:ce:ea:51:a6:80:57:6a:07:5d:ae:30:5a:1d:e8:f7:bd:
53:ea:9b:3e:27:c3:e0:2a:a8:3d:b1:97:f6:cd:7e:08:a3:d7:
ae:b3:f7:e8:b8:4e:13:31:30:98:a6:0b:43:98:5a:93:fa:ef:
3e:9a:71:b6:fa:5c:ac:46:2f:63:49:0b:33:78:e3:73:58:42:
ea:4f:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:38:20 2026 by rpki-client