
Error: rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
File: BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft (raw, json)
Hash identifier: WBuMaJJ1XudwgIL+0ev4FzoAFpnWK0jk7/DR9OzCN/4=
Subject key identifier: B2:0C:6C:1E:0D:AE:98:FA:D8:A2:3C:B3:E1:C2:A9:16:51:0A:24:78
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Certificate issuer: /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial: 31D5294D6E127B2E1F127AFD1D000C3BE7D2FEC4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
Manifest number: 02F0
Signing time: Sun 23 Aug 2026 11:37:56 +0000
Manifest this update: Sun 23 Aug 2026 11:32:56 +0000
Manifest next update: Mon 24 Aug 2026 13:44:56 +0000
Files and hashes: 1: BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl (hash: sB4DuQmFkB8h8k5H5XDVGyneCqK8Hd75+CLYJUyJhd8=)
2: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (hash: 2IZ3ydIv1kmjMrdfxVV1ooWjVHtwJteit1TfiLCQyBs=)
3: 3136342e3136332e32362e302f32342d3234203d3e20323635393336.roa (hash: PJrszwL06gJXoEEGKYzrBj1hJMnv8uVrLF+St6XmlpA=)
4: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (hash: s6ol0rD2mKxuW23tNpj/XhXqtq0c7rUoyap48tJKL44=)
5: 3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (hash: YfWFBEOeJXXOLIHO6WNr7Ij0EyHyX5Udg4NU7VZtAcM=)
6: 3136342e3136332e32342e302f32322d3232203d3e20323635393336.roa (hash: J40z/WNUzh6NLrmNccEuMKuiYMwNciNV1IPKU1BBa/I=)
7: 3136342e3136332e32342e302f32332d3233203d3e20323635393336.roa (hash: +gsP+Lr3IaF1U743PXORMLvPmAAZY0iznBd+U3lyhIs=)
8: 3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (hash: kdFvMOUtrBiMhEyS1uCvpaD3VXeg4oEwVlJ9EgSzc1g=)
9: 3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (hash: IMX9UdwBxXRPLc0X0/j7feimiNAg9z6Y0pLv402RuXs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:29:4d:6e:12:7b:2e:1f:12:7a:fd:1d:00:0c:3b:e7:d2:fe:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Validity
Not Before: Aug 23 11:32:56 2026 GMT
Not After : Aug 24 13:44:56 2026 GMT
Subject: CN=B20C6C1E0DAE98FAD8A23CB3E1C2A916510A2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:7a:0e:c0:83:7c:7a:e0:8a:0b:6b:21:8d:
07:47:19:f8:3b:e6:8a:c9:5a:5b:9e:e8:9c:d4:b5:
86:f9:22:d4:61:65:64:1b:2f:3b:43:a9:72:1e:1f:
27:43:fc:06:12:00:f2:34:46:c5:00:27:ca:75:30:
90:61:62:33:bc:33:e5:60:5a:47:97:1e:5b:e1:17:
10:b5:b6:8c:0d:b8:6d:ca:a3:fd:fe:eb:60:f1:d0:
99:11:f1:ed:bf:6f:db:e7:aa:5b:61:f7:75:aa:22:
d9:ea:80:92:9c:af:82:54:a4:e8:b4:a6:96:40:e7:
56:03:4a:16:97:c6:00:33:25:68:00:c7:6d:95:0e:
93:7b:53:b8:45:81:52:34:75:b5:b4:14:20:05:a6:
f4:8b:f4:45:35:7a:50:1b:84:d1:f4:fa:f5:c5:01:
e8:b4:af:02:87:25:51:e5:95:63:d1:13:fe:13:30:
83:80:9d:8c:72:aa:e7:6c:28:ca:9c:5a:b7:66:2a:
a3:64:aa:59:78:0c:e5:3f:ad:40:7b:8e:fb:04:89:
5b:c6:22:fc:fc:6c:5d:39:a8:36:7d:a4:45:ce:79:
09:d9:3f:d2:b5:b7:a6:f2:aa:33:9a:d9:52:a3:24:
0f:11:44:6b:b0:da:6d:b6:f2:bd:1e:69:38:bb:40:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0C:6C:1E:0D:AE:98:FA:D8:A2:3C:B3:E1:C2:A9:16:51:0A:24:78
X509v3 Authority Key Identifier:
keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:a8:e7:9b:63:e7:c7:26:00:83:22:07:09:f3:e3:ee:4d:
97:dd:a0:b0:8a:2b:37:20:d5:84:24:2f:37:b5:e4:19:9c:a0:
77:3b:83:a8:81:dc:2d:29:d3:39:ae:35:12:92:ca:65:b6:48:
08:7f:fc:b7:59:ef:1c:32:91:09:12:aa:e3:c9:9c:a7:01:da:
0d:57:8a:73:32:31:8b:2f:83:36:08:05:4b:d6:ec:20:57:74:
0c:b2:c5:13:8d:0a:ea:48:88:d2:38:75:01:0a:ec:a5:cb:1e:
22:e6:bc:1f:3f:09:d7:2e:fd:21:96:ea:9e:fd:bb:ff:6d:c5:
31:87:91:42:29:20:8c:b5:9e:53:1e:6a:06:cb:4e:1f:f7:ce:
cb:c8:30:f2:0e:15:51:63:6a:54:09:05:c9:3a:85:3a:2d:1e:
60:aa:be:aa:a8:a5:d0:2d:1a:58:e4:dc:14:e7:5c:45:38:51:
52:9a:da:82:b0:7d:8f:67:2d:1f:29:bd:49:f5:53:cf:d2:77:
56:f6:15:49:22:25:5a:4d:ab:b7:71:46:27:c1:6d:1d:45:52:
a7:c3:63:b2:37:3c:f4:62:e8:9e:51:2a:b9:68:4e:60:2d:e0:
17:8b:3f:24:82:ae:c8:b4:7b:37:1c:53:45:26:b6:a9:cb:12:
7e:04:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:28:16 2026 by rpki-client