
Error: rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier: E5IGGsppRzxgSp57m3LD+JptXT5TPHcjrryYCtOnB5w=
Subject key identifier: AB:61:60:EA:60:61:7E:83:E4:84:B7:CD:58:74:58:E3:24:0E:81:BD
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer: /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial: 45ACAFDD023D79F5B0A720A090AE4D08DA8E9231
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number: 02F0
Signing time: Sun 01 Nov 2026 09:54:48 +0000
Manifest this update: Sun 01 Nov 2026 09:49:48 +0000
Manifest next update: Mon 02 Nov 2026 11:41:48 +0000
Files and hashes: 1: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: b9QIUgJtUhc1DnIcA/Gdx2o7O0dNKcyCNg/LY9BZbiU=)
2: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: dig3xRrHhM4M8UKI/4BtOWiD1x9xi/FcK98aLvq0eA0=)
3: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: tljc+I0lzZxmfXT/GTTIbeFDEF0AbDPvxxOtTLrWDAo=)
4: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: rwsjpt3v/cKN6ybsz3/VWV2Cp5xllHQ1w4JsPmiji1A=)
5: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: kpXbj/VFh2puGbD2VjTYD77oB6crDJaCbIFxZqmqgFA=)
6: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: OHplnxEn1Q8av1i7KzASGnSRjMkuWoaErYgOHY19O+c=)
7: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: Qajh9SgmhOLwen8Do03xNwlcQDXX+9U0uvI6DViyQAE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 11:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ac:af:dd:02:3d:79:f5:b0:a7:20:a0:90:ae:4d:08:da:8e:92:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Validity
Not Before: Nov 1 09:49:48 2026 GMT
Not After : Nov 2 11:41:48 2026 GMT
Subject: CN=AB6160EA60617E83E484B7CD587458E3240E81BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:a5:cb:c4:59:3b:6c:f3:c4:08:34:7b:b5:
d7:a6:46:e6:7f:51:41:4a:dc:59:55:7f:2a:42:18:
dc:3f:69:ca:a5:a3:8d:d3:73:59:74:93:3c:1e:69:
43:02:f3:18:04:12:63:b6:b0:7f:b0:80:6b:fe:0e:
90:07:d9:08:ae:c3:82:b8:82:e4:50:53:b2:ac:fe:
17:b1:e8:fd:cd:3e:3e:52:a4:ae:28:f6:a9:d1:54:
a9:4e:ae:c9:9f:88:a7:68:34:fa:a7:e0:94:e8:0e:
5e:75:d7:e0:75:39:c8:9f:be:b6:61:28:ad:30:fc:
cf:4e:7a:a6:b5:ad:0e:10:14:38:78:98:0d:ce:ee:
05:5a:7a:2b:6c:04:e0:3a:6c:9a:4c:c1:fc:4d:12:
76:f7:60:7b:8e:97:2a:41:78:07:50:86:c7:d8:c2:
c9:9a:1d:01:bf:6a:39:9e:7e:a0:cf:a5:1b:33:55:
04:56:8a:18:07:0a:7e:cc:4f:36:f1:6b:2a:b4:7a:
fe:21:c0:f7:16:f0:3e:4e:c9:69:22:8b:ce:15:8f:
6c:92:88:e5:66:15:83:35:ea:bd:a1:84:8a:36:9a:
1d:43:10:54:ba:74:00:e6:33:57:a8:0a:11:c5:1a:
7e:7b:90:b1:92:ab:03:9f:9e:c8:67:cc:8d:70:bd:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:60:EA:60:61:7E:83:E4:84:B7:CD:58:74:58:E3:24:0E:81:BD
X509v3 Authority Key Identifier:
keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:99:6a:72:ff:a2:c5:4d:66:80:b3:62:bd:b6:db:6b:07:
3f:fc:58:1e:84:14:72:c1:75:d0:b2:dc:70:d2:e6:b2:0c:b5:
2f:c7:3d:d9:c3:ab:13:59:ea:82:6f:fe:42:16:f0:b9:4f:5f:
13:ff:20:35:ac:ad:e8:59:be:dc:f0:3b:b1:5d:9a:79:a5:ac:
13:8d:a8:0c:7f:b1:29:dd:a4:73:68:44:76:a4:fd:c5:89:80:
5b:5a:1a:59:72:c9:21:8b:77:2b:5c:46:b7:b1:50:1b:48:92:
64:5f:30:7d:7e:38:4a:35:01:d8:28:f3:54:f4:0f:3e:f1:00:
dd:b1:72:58:ec:18:38:82:40:8e:91:62:1f:53:25:0c:6d:4a:
e6:15:5c:ab:f7:9d:8f:ff:84:3b:06:ea:08:0b:71:1f:c6:a8:
7d:3a:87:95:57:d9:d1:2a:0a:23:18:7f:85:06:c6:48:1a:3b:
05:ac:c4:72:7d:70:1b:da:da:9f:43:31:39:51:68:9d:93:25:
54:2e:ff:bd:08:2e:85:09:83:f8:f3:2b:1f:e1:e5:00:ef:17:
32:a5:8b:f5:37:9e:d0:72:25:2d:b4:8f:19:e2:1e:37:38:45:
ea:79:82:e9:54:e9:92:1e:a0:52:6a:18:3a:7b:6c:78:ee:c8:
97:99:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:32:19 2026 by rpki-client