
Error: rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier: ilWrNvm/fgkHDeEgv8IzeQvxLVfNfuo/NiIkr1N48WQ=
Subject key identifier: 69:89:FC:93:32:13:5A:5A:77:5B:FB:72:41:8E:4E:E8:0B:19:02:E1
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial: 55CA05B91EC49B80460C757766D5DB39CB57F277
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number: 04C2
Signing time: Sat 17 Oct 2026 13:25:51 +0000
Manifest this update: Sat 17 Oct 2026 13:20:51 +0000
Manifest next update: Sun 18 Oct 2026 15:33:51 +0000
Files and hashes: 1: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: s/6BsoFV6DlEj43A1uUgBuwsEY01eiulnkS4P6GXEro=)
2: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: VXQ9AQJU19Xi7UsIiDfRpKoLfuTVYN53+SreCsRHsGU=)
3: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: 0CLnFOABznFCgpqED1YRRgWwVd9EY7KFJPcomWKy2Xw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 15:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ca:05:b9:1e:c4:9b:80:46:0c:75:77:66:d5:db:39:cb:57:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Validity
Not Before: Oct 17 13:20:51 2026 GMT
Not After : Oct 18 15:33:51 2026 GMT
Subject: CN=6989FC9332135A5A775BFB72418E4EE80B1902E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:5f:0a:4f:de:82:0c:1b:61:5f:bb:bb:f9:
46:a2:65:30:7a:0c:ac:48:7c:5c:21:9a:03:18:6c:
be:15:0d:c1:f3:e1:a1:5d:39:e5:a9:7c:1b:00:3d:
73:51:45:bd:31:40:b8:7d:1a:e0:71:1b:04:13:e6:
79:dc:46:a0:55:db:ce:07:b0:bb:a0:aa:86:2a:b5:
bf:e5:de:96:aa:a1:47:0f:58:89:01:7e:1b:6a:5f:
16:dd:38:12:ea:55:50:b2:42:64:3d:5f:a0:c0:41:
93:98:89:29:ee:8e:0e:ee:ec:40:46:b7:d3:6a:0f:
1c:59:55:d8:aa:af:b0:cb:17:d2:69:d8:a3:ff:c1:
d8:37:c1:c6:2d:9a:ba:15:19:32:b6:3c:a0:18:df:
4e:af:74:1f:ef:14:23:c2:60:60:79:0b:ce:dc:4a:
8f:19:9a:01:1d:5b:77:11:21:d3:1c:07:1c:be:cd:
58:35:9f:ae:7d:9f:60:a4:8a:03:e8:c4:3c:10:89:
e9:3b:a7:bc:e7:a8:77:71:a7:f1:31:76:c2:c7:ab:
3f:68:4b:b5:a9:c0:3c:44:c3:0c:17:af:5f:93:80:
5f:6f:4d:0e:9f:7d:ea:5a:39:9c:d0:b0:e4:d0:7d:
ea:b7:53:52:9d:45:1c:55:21:37:aa:f6:d8:86:ab:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:FC:93:32:13:5A:5A:77:5B:FB:72:41:8E:4E:E8:0B:19:02:E1
X509v3 Authority Key Identifier:
keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:22:13:1c:cb:84:68:e7:c5:1f:f4:30:6e:dc:2e:e2:c5:
39:40:93:62:70:9d:bc:0a:18:04:3a:ed:6d:fb:8b:4e:2e:96:
ff:62:ac:6e:ac:a9:88:fc:25:b2:b8:87:87:7a:4b:df:29:82:
b0:77:4a:95:01:c8:c3:2b:ee:14:5a:b4:71:c3:46:e3:d6:01:
0a:37:00:19:5e:57:a2:83:8e:e4:d1:75:02:53:90:4e:65:85:
02:c4:ce:61:cf:52:7d:d4:90:c0:c9:6a:fd:5c:82:99:d2:49:
d5:95:e2:46:40:65:02:2c:14:1f:a5:96:5b:16:5e:69:07:ed:
bb:99:06:76:91:1b:9e:3d:35:92:0b:b0:3b:0c:19:3d:b0:ab:
d3:11:96:5a:e6:21:4b:81:fc:18:0e:93:4d:d2:b9:85:c7:cf:
24:d6:01:46:aa:9b:76:db:a0:d7:44:81:9b:a5:50:dd:10:ad:
96:72:b9:0c:52:d2:de:70:e1:ca:31:77:82:e5:a9:7b:49:7e:
6d:13:17:51:7c:a0:b1:2c:f8:1d:96:e6:e0:51:9a:3e:f4:9d:
b1:f0:22:a0:16:e2:2b:47:ae:f6:10:39:ed:82:17:c8:d0:bd:
d1:05:69:ee:97:23:8e:e8:d3:61:35:00:f6:e6:c7:37:d4:9b:
4b:a3:49:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVcoFuR7Em4BGDHV3ZtXbOctX8ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBMkU5NzQyQkFGQjAzRkZGOEI0ODA3QUI5MDc1RkZD
QzMxMDM3MDAeFw0yNjEwMTcxMzIwNTFaFw0yNjEwMTgxNTMzNTFaMDMxMTAvBgNV
BAMTKDY5ODlGQzkzMzIxMzVBNUE3NzVCRkI3MjQxOEU0RUU4MEIxOTAyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgl8KT96CDBthX7u7+UaiZTB6
DKxIfFwhmgMYbL4VDcHz4aFdOeWpfBsAPXNRRb0xQLh9GuBxGwQT5nncRqBV284H
sLugqoYqtb/l3paqoUcPWIkBfhtqXxbdOBLqVVCyQmQ9X6DAQZOYiSnujg7u7EBG
t9NqDxxZVdiqr7DLF9Jp2KP/wdg3wcYtmroVGTK2PKAY306vdB/vFCPCYGB5C87c
So8ZmgEdW3cRIdMcBxy+zVg1n659n2CkigPoxDwQiek7p7znqHdxp/ExdsLHqz9o
S7WpwDxEwwwXr1+TgF9vTQ6ffepaOZzQsOTQfeq3U1KdRRxVITeq9tiGq5WzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaYn8kzITWlp3W/tyQY5O6AsZAuEwHwYDVR0j
BBgwFoAULKLpdCuvsD//i0gHq5B1/8wxA3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFD
QU0vMS8yQ0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQTJFOTc0MkJBRkIwM0ZG
RjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8y
Q0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZKEiExzLhGjnxR/0MG7cLuLFOUCTYnCdvAoYBDrtbfuLTi6W/2KsbqypiPwl
sriHh3pL3ymCsHdKlQHIwyvuFFq0ccNG49YBCjcAGV5XooOO5NF1AlOQTmWFAsTO
Yc9SfdSQwMlq/VyCmdJJ1ZXiRkBlAiwUH6WWWxZeaQftu5kGdpEbnj01kguwOwwZ
PbCr0xGWWuYhS4H8GA6TTdK5hcfPJNYBRqqbdtug10SBm6VQ3RCtlnK5DFLS3nDh
yjF3guWpe0l+bRMXUXygsSz4HZbm4FGaPvSdsfAioBbiK0eu9hA57YIXyNC90QVp
7pcjjujTYTUA9ubHN9SbS6NJWA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 05:39:00 2026 by rpki-client