
Error: rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier: h8hgqHkCK38WR1giOj4d11rtFUsTgUmOAVZP/UkBWpU=
Subject key identifier: 47:B9:38:57:AF:CC:72:15:30:C5:D4:EF:12:3A:48:A6:0E:E6:83:86
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer: /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial: 64ACB5EA56CD5C0F16E1E18225362B24EC486EF2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number: 0482
Signing time: Sun 23 Aug 2026 08:47:44 +0000
Manifest this update: Sun 23 Aug 2026 08:42:44 +0000
Manifest next update: Mon 24 Aug 2026 10:19:44 +0000
Files and hashes: 1: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: r+PrVSCUCFylstvjpr29UULeAgdJ6ANpRCCyzuGtYK0=)
2: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: hORhhEUZHV6EWha9xU6cjOFONpcXr+/pqPHfPPZKfm4=)
3: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: JQ5SVQoYS1TJdeiD3c7cXwL9TNeI4YdTtRuu8ewxifc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ac:b5:ea:56:cd:5c:0f:16:e1:e1:82:25:36:2b:24:ec:48:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Validity
Not Before: Aug 23 08:42:44 2026 GMT
Not After : Aug 24 10:19:44 2026 GMT
Subject: CN=47B93857AFCC721530C5D4EF123A48A60EE68386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:2e:eb:6a:3d:15:33:a8:5e:17:ff:30:e1:
8b:23:66:80:f9:e7:b3:ae:d9:f2:d1:a4:74:31:b8:
d3:04:95:2e:23:49:98:ca:34:58:e5:ea:52:19:c9:
a3:87:b7:ba:5b:4a:8b:f1:ea:26:59:99:db:2c:9a:
1e:14:bf:4b:c8:2d:70:92:fc:3c:90:50:1d:6e:40:
39:4c:e3:b5:45:75:61:9b:f5:5b:a5:3d:df:8b:4a:
67:c9:68:85:e3:9f:c3:06:8a:70:08:d3:6f:52:5f:
82:1f:16:9f:17:35:80:99:0f:9b:65:12:56:8a:91:
cc:dc:32:5d:46:13:e0:dc:2f:a3:32:d7:94:15:d3:
da:8c:b3:ac:b1:78:15:03:6f:64:59:91:9f:6d:ba:
1a:1a:b8:ac:a1:49:30:cd:68:69:54:5c:cf:63:ea:
fe:66:4a:79:dc:f7:78:47:83:c5:0e:6f:cb:60:01:
0d:95:b2:96:29:5c:20:d9:a6:1a:d5:ba:96:eb:6f:
7c:26:eb:3a:1d:fc:2c:6d:03:f4:1b:6a:73:22:b5:
d7:46:46:6b:3f:55:9d:b8:d4:b0:a4:87:40:78:04:
99:57:87:b5:e4:3c:0c:23:e5:47:9c:9a:25:d2:10:
fb:56:a2:6e:72:60:46:52:08:68:cc:73:10:da:8d:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:38:57:AF:CC:72:15:30:C5:D4:EF:12:3A:48:A6:0E:E6:83:86
X509v3 Authority Key Identifier:
keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:b1:9e:26:24:32:dc:2e:8f:51:80:a7:e1:72:73:6d:15:
f7:04:90:71:c9:2b:40:01:3f:ad:36:d0:8f:ae:3a:a5:6b:71:
2e:f9:3e:6b:84:f1:a9:44:9a:5f:fb:30:7b:25:22:42:ea:a3:
f8:ed:71:64:f3:38:1b:59:dc:6f:fb:24:f8:b5:bb:0a:72:1b:
47:31:97:b9:a7:55:81:47:55:19:b7:93:e4:38:61:27:99:49:
30:c9:8e:20:ea:ea:de:94:4b:b9:7f:6a:72:ae:9f:f3:eb:e2:
82:0c:11:da:7c:8a:be:b0:70:7a:64:60:d4:47:92:bc:57:76:
c1:d5:c0:66:12:8b:4e:54:c4:6b:7f:fa:b9:e0:1a:f0:dc:32:
45:a5:6f:71:a7:9b:bb:f9:69:86:e1:62:40:ae:0f:0b:b2:49:
d1:1a:f6:c0:1f:17:b4:e4:ce:dd:36:ce:a2:a0:e2:ac:52:cb:
73:18:55:8f:a2:b9:55:f7:d0:2a:83:ba:94:4d:83:51:10:c6:
9a:c8:4f:2c:52:e9:3d:df:25:a4:ca:0a:a0:a6:2e:f2:3c:19:
2a:b1:3a:76:2f:59:50:ea:4c:e6:8c:65:75:91:b7:0e:df:e9:
ef:ca:5a:57:8d:7e:cf:39:c3:ff:a4:d7:d8:da:9f:50:69:1c:
20:86:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:57:33 2026 by rpki-client