
Error: rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
File: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft (raw, json)
Hash identifier: Oz5AFDqSYC+DSeJalicJmkHYA357sIR9RgyJls/GUKQ=
Subject key identifier: C0:EF:BE:74:B2:17:E2:B4:FE:75:71:EB:55:F0:7F:D4:8B:0F:F9:6F
Authority key identifier: 95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
Certificate issuer: /CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Certificate serial: 176CE8CDD6FDAB035592515A12A473A56C908F7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
Manifest number: 04C9
Signing time: Thu 15 Oct 2026 09:18:38 +0000
Manifest this update: Thu 15 Oct 2026 09:13:38 +0000
Manifest next update: Fri 16 Oct 2026 11:31:38 +0000
Files and hashes: 1: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: JQ5SVQoYS1TJdeiD3c7cXwL9TNeI4YdTtRuu8ewxifc=)
2: 95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl (hash: LbhH+Z1SgDJMsgrJ+8wGh/7eK9yHV3OjBF8d5UxmA3s=)
3: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: hORhhEUZHV6EWha9xU6cjOFONpcXr+/pqPHfPPZKfm4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 11:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6c:e8:cd:d6:fd:ab:03:55:92:51:5a:12:a4:73:a5:6c:90:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B2CF7C5635CD912BBD7A8DED184CC398CBE307
Validity
Not Before: Oct 15 09:13:38 2026 GMT
Not After : Oct 16 11:31:38 2026 GMT
Subject: CN=C0EFBE74B217E2B4FE7571EB55F07FD48B0FF96F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:d4:18:f0:9f:d9:d6:ea:d9:38:d5:50:16:
c4:1b:c9:e8:a1:23:b4:84:42:0e:92:0e:5d:83:87:
92:9d:5a:0a:82:34:81:29:62:cc:06:47:08:f6:30:
1c:12:fa:cb:75:45:04:4e:e5:e7:3a:8e:76:67:cf:
11:2b:72:7f:d6:37:76:fe:77:89:d0:3c:e5:58:2f:
1b:d6:17:67:70:16:60:fb:3a:ff:14:a8:e7:41:73:
50:dc:e7:78:34:a1:c6:17:8a:9c:9b:e8:62:f3:32:
ae:39:27:38:f6:08:82:1e:ee:70:50:69:a1:a3:00:
fb:99:be:e0:ee:cd:6c:26:80:31:a3:cd:71:07:96:
11:d1:01:e0:76:37:fd:f8:24:b4:bd:f9:f4:c9:97:
2e:f1:99:2b:ad:5d:9e:3f:81:99:4d:7d:b0:40:01:
6c:04:88:1a:59:1a:cc:09:70:da:fd:61:d7:4f:f3:
2d:af:00:b6:a1:4a:54:e3:44:b2:80:3e:57:05:7f:
cf:88:62:7f:6e:80:74:95:64:7d:c1:21:59:f0:6d:
7b:56:73:4a:12:f8:49:d2:30:d8:09:20:19:17:95:
3c:b8:22:3a:20:12:df:1d:13:d9:ca:f8:0a:12:3e:
b1:73:4f:64:5a:9b:92:60:0d:0c:68:25:51:3e:a5:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:BE:74:B2:17:E2:B4:FE:75:71:EB:55:F0:7F:D4:8B:0F:F9:6F
X509v3 Authority Key Identifier:
keyid:95:B2:CF:7C:56:35:CD:91:2B:BD:7A:8D:ED:18:4C:C3:98:CB:E3:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/1/95B2CF7C5635CD912BBD7A8DED184CC398CBE307.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:70:f1:3b:98:3b:83:aa:6a:04:b9:98:43:51:bc:26:46:
49:d3:6a:1b:52:4b:b1:57:d1:87:d7:45:cd:3b:88:4d:f8:72:
d7:6f:40:e9:51:00:55:ba:f3:a7:44:9e:93:a2:4c:cd:f5:bd:
09:6c:4c:8f:c7:7f:6a:86:69:12:59:3a:8f:30:08:ee:9b:5a:
37:d3:c4:bb:a3:ff:56:29:05:bb:ef:21:84:65:7a:db:d9:73:
fc:4b:cf:e8:25:0b:07:d0:c8:3a:4f:57:15:cf:2d:6b:3b:09:
e5:97:b7:ae:bb:cf:a3:3e:f2:8d:0f:24:0a:a3:2f:74:93:42:
3c:38:87:5f:aa:a1:2b:9a:fd:14:a3:8a:64:78:81:3f:34:3a:
bd:93:05:f0:60:cb:a3:8c:8d:14:cf:fd:13:e4:28:a2:ac:95:
58:35:fc:21:60:15:78:d5:15:df:5d:9a:ff:c6:d6:1d:8e:12:
f4:cc:7f:41:87:63:bf:d8:63:a0:ec:30:b1:ed:a1:f5:fb:6b:
7a:70:74:24:a2:66:4d:7c:b5:14:2e:61:62:bc:71:40:0e:d4:
b4:4d:bd:fb:40:55:25:6a:eb:56:18:3a:5c:ba:21:ed:f0:7f:
6d:7a:3e:c9:f7:e4:6d:26:16:c3:20:0b:1e:45:be:92:22:dd:
b0:8a:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:43:06 2026 by rpki-client