
Error: rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier: NT5zZOz6NueVl/lG8EEDuMBj5Hem+Xm4AD1ZOPw5zpw=
Subject key identifier: 3C:4C:72:C4:59:EC:54:81:60:76:AA:C2:21:01:E2:D0:62:41:AF:5C
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer: /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial: 5730E7089AFE1627648D9AA90DE5794CB9A2B975
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number: 01EB
Signing time: Mon 24 Aug 2026 02:40:00 +0000
Manifest this update: Mon 24 Aug 2026 02:35:00 +0000
Manifest next update: Tue 25 Aug 2026 03:29:00 +0000
Files and hashes: 1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 82DEv67kvsZGE4sbpUu76A1q4x5oe1Hzn4rxllhVcaM=)
2: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: bLrgvblKc9sDuWX7/E9oFr9HTVYHYe8oUIWR7sKt02o=)
3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: yanM56rhq/TuP/1YgwDXxnfseKip197QY667ahQBZ1c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 03:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:30:e7:08:9a:fe:16:27:64:8d:9a:a9:0d:e5:79:4c:b9:a2:b9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Validity
Not Before: Aug 24 02:35:00 2026 GMT
Not After : Aug 25 03:29:00 2026 GMT
Subject: CN=3C4C72C459EC54816076AAC22101E2D06241AF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:a6:3d:bf:a9:4b:e4:73:3d:b5:c3:ce:c9:
a0:da:48:25:ef:a9:77:dc:8a:93:00:a7:d8:6d:60:
37:72:2d:95:29:33:d4:d3:07:41:1e:17:e9:e4:bc:
8b:22:a5:e4:c1:9f:4a:52:37:fa:02:10:1f:6b:3e:
45:b7:4f:e4:af:78:a2:29:c6:64:c9:59:8d:d4:94:
cc:a4:aa:a6:ad:8b:32:b1:d6:f9:1a:c6:3e:f9:f0:
6a:07:1d:c3:74:7a:fa:60:01:3f:07:b8:ed:57:e8:
09:64:4a:1e:33:b5:43:e7:17:ba:ff:c0:17:1e:5c:
c5:a6:44:5d:d9:e9:7e:1f:ca:7e:d3:13:4c:ac:a7:
fe:1b:c5:31:84:71:69:31:bd:6d:8a:6e:cc:a0:00:
63:ce:fd:18:31:47:11:87:2b:0e:75:04:e7:3b:9e:
b6:e3:b8:89:32:f9:e2:75:59:37:1a:46:04:16:7e:
bc:46:3f:ab:7a:66:88:f8:48:03:e8:e4:47:34:d0:
9a:71:80:84:97:5e:56:cd:3c:7d:b4:75:33:c7:99:
10:6d:40:77:6d:3e:15:71:89:94:67:ad:a1:39:f8:
f5:1f:ca:8a:8b:d8:54:8f:22:00:54:8c:b2:48:a9:
c4:0e:ed:b3:bb:3b:9d:b1:b8:aa:8c:d2:28:5b:c0:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:72:C4:59:EC:54:81:60:76:AA:C2:21:01:E2:D0:62:41:AF:5C
X509v3 Authority Key Identifier:
keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2b:d8:24:62:41:50:7f:70:2c:79:89:ea:43:6b:24:15:62:
05:b2:73:16:02:ba:e2:21:f5:e2:24:19:97:00:c0:99:14:b7:
c3:ca:b8:06:29:6a:d4:85:95:ba:a0:a7:6e:b7:c4:87:a8:87:
b7:88:8d:44:0d:01:b4:55:13:2f:dc:74:f9:b9:bf:0e:58:87:
5d:6e:de:83:93:de:10:7e:3d:88:b6:bf:0b:09:b8:53:c3:f3:
f8:d7:43:ea:5f:fb:a3:67:2a:09:76:58:87:00:a7:2a:1e:db:
95:11:14:c7:0d:64:5d:bc:5b:d8:c6:fd:0c:31:eb:cc:6b:de:
43:c2:c0:84:40:5c:28:a4:c6:6a:16:df:0c:7b:8f:95:2b:eb:
68:5a:12:89:95:80:20:58:48:0e:e1:06:b4:35:a3:16:3b:f8:
89:14:7d:18:fb:d4:33:f7:41:f5:b3:64:8c:6e:0c:8f:76:2d:
30:51:50:0c:ea:9b:53:71:c3:f9:9b:38:aa:35:2e:80:ca:27:
69:1a:44:00:5e:25:c9:14:59:c3:6e:00:4e:4b:53:aa:e1:4f:
5b:b8:32:e1:dc:32:83:82:ce:b8:e5:26:4e:d7:d9:83:ec:4a:
37:c7:a2:7b:8e:2e:00:5b:c6:d8:a1:ba:b5:ae:77:ea:3b:a0:
5a:bc:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:50:54 2026 by rpki-client