
Error: rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json)
Hash identifier: 7njWScvat4UFexwe27GngyCKJKFCu/oGZ8ntcDQ3vvk=
Subject key identifier: D2:B5:64:48:13:AB:35:F8:74:E8:2D:7E:10:4E:DC:45:92:C9:7D:A8
Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Certificate serial: 5C5EB9953D4179FFE7992A77DFA697AB1E99A7C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
Manifest number: 0184
Signing time: Sat 10 Oct 2026 03:40:40 +0000
Manifest this update: Sat 10 Oct 2026 03:35:40 +0000
Manifest next update: Sun 11 Oct 2026 04:42:40 +0000
Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=)
2: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=)
3: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: Cb6um3juW+a++TSqQEkSnVldHOjyHW8d8A9Q0+JB8iA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 04:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5e:b9:95:3d:41:79:ff:e7:99:2a:77:df:a6:97:ab:1e:99:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Validity
Not Before: Oct 10 03:35:40 2026 GMT
Not After : Oct 11 04:42:40 2026 GMT
Subject: CN=D2B5644813AB35F874E82D7E104EDC4592C97DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:ba:c5:41:aa:9e:34:d3:ca:8c:0b:a1:2e:
e9:87:b6:30:1a:21:7c:cc:74:49:95:79:11:2c:77:
e6:a2:5b:68:97:12:db:75:19:b0:a1:0e:23:bb:d4:
24:65:48:ae:c2:33:61:3f:c8:99:d6:91:f9:90:a7:
4f:85:5d:a7:7f:5a:7a:63:e8:1d:46:73:68:ce:78:
ea:55:fc:ce:5c:bf:91:de:8a:58:ee:75:4c:93:1d:
ee:8c:b9:8e:92:cc:95:3b:cc:f9:aa:0b:f4:d3:af:
14:c5:05:01:70:bb:f6:5f:fd:eb:71:c8:05:42:a9:
83:b6:ed:c2:c7:39:27:77:a9:b6:db:e9:14:90:5a:
aa:9f:4a:62:b6:ac:5f:88:29:b1:bb:26:b4:f2:96:
2a:ad:16:43:9b:8f:57:8b:bc:0e:c9:2c:3e:6e:32:
6f:93:80:1f:0b:9b:49:81:9c:6f:53:86:41:07:f7:
b4:e4:88:c5:33:42:43:55:87:c6:13:37:9c:6a:12:
34:a1:5c:af:98:ac:d9:c2:37:e1:e5:8e:be:a4:fd:
ea:9b:94:a5:5a:f6:2e:bb:ce:d2:92:53:78:46:9e:
f6:c3:23:0b:99:a8:35:1a:f3:7a:f1:08:c2:3d:09:
7a:c2:10:76:4c:dc:44:9c:c7:f3:7c:8b:71:5f:50:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:64:48:13:AB:35:F8:74:E8:2D:7E:10:4E:DC:45:92:C9:7D:A8
X509v3 Authority Key Identifier:
keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:f7:25:de:fa:47:a1:9e:0b:fb:4f:4a:e8:b0:2d:f7:2c:
bb:ef:73:3c:d7:af:7a:97:c3:a2:46:15:fb:ff:21:27:42:ca:
9d:21:f5:a7:9b:0e:cf:21:88:d4:60:5f:19:cb:77:46:36:8d:
11:73:c5:88:f0:c8:a2:94:4e:32:a8:d4:d4:76:fa:9c:7a:a3:
bc:9c:76:a0:ed:a8:76:b9:1b:8d:ee:d4:9c:4d:11:a4:af:69:
c0:82:a7:d3:3d:08:1e:67:74:82:03:c0:35:85:ac:92:44:d4:
cd:08:67:bc:72:04:eb:11:2d:dc:06:d0:61:ee:9b:b8:a7:8a:
46:e1:b8:f5:c3:4c:03:94:6a:17:cd:fb:59:93:01:e9:72:c7:
c9:3d:cc:81:78:83:88:dc:4a:92:2f:a6:97:90:94:2e:c6:2b:
17:ff:7e:46:77:07:bf:b5:5f:e4:5a:2c:e2:5f:db:f0:e6:f5:
63:aa:70:9a:5b:bf:a0:fc:c5:fc:be:3e:17:b7:54:44:54:e4:
db:44:98:83:87:bd:6e:64:d4:76:c9:78:64:90:6c:60:f3:80:
81:a2:15:3c:04:20:11:8d:06:96:f2:29:e3:1b:7a:bb:a8:d4:
54:2f:2f:76:79:b5:8b:46:b7:d7:0b:8d:55:18:37:7f:72:02:
88:7c:95:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXF65lT1Bef/nmSp336aXqx6Zp8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF
QjkxQTA3QTAeFw0yNjEwMTAwMzM1NDBaFw0yNjEwMTEwNDQyNDBaMDMxMTAvBgNV
BAMTKEQyQjU2NDQ4MTNBQjM1Rjg3NEU4MkQ3RTEwNEVEQzQ1OTJDOTdEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiLrFQaqeNNPKjAuhLumHtjAa
IXzMdEmVeREsd+aiW2iXEtt1GbChDiO71CRlSK7CM2E/yJnWkfmQp0+FXad/Wnpj
6B1Gc2jOeOpV/M5cv5HeiljudUyTHe6MuY6SzJU7zPmqC/TTrxTFBQFwu/Zf/etx
yAVCqYO27cLHOSd3qbbb6RSQWqqfSmK2rF+IKbG7JrTyliqtFkObj1eLvA7JLD5u
Mm+TgB8Lm0mBnG9ThkEH97TkiMUzQkNVh8YTN5xqEjShXK+YrNnCN+Hljr6k/eqb
lKVa9i67ztKSU3hGnvbDIwuZqDUa83rxCMI9CXrCEHZM3EScx/N8i3FfUOzFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0rVkSBOrNfh06C1+EE7cRZLJfagwHwYDVR0j
BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF
MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC9B
RkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYWn3Jd76R6GeC/tPSuiwLfcsu+9zPNevepfDokYV+/8hJ0LKnSH1p5sOzyGI
1GBfGct3RjaNEXPFiPDIopROMqjU1Hb6nHqjvJx2oO2odrkbje7UnE0RpK9pwIKn
0z0IHmd0ggPANYWskkTUzQhnvHIE6xEt3AbQYe6buKeKRuG49cNMA5RqF837WZMB
6XLHyT3MgXiDiNxKki+ml5CULsYrF/9+RncHv7Vf5Fos4l/b8Ob1Y6pwmlu/oPzF
/L4+F7dURFTk20SYg4e9bmTUdsl4ZJBsYPOAgaIVPAQgEY0GlvIp4xt6u6jUVC8v
dnm1i0a31wuNVRg3f3ICiHyVYg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:24:05 2026 by rpki-client