
Error: rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json)
Hash identifier: QNSvNvJfPS0dYpJ8ZhyhpH09dRkEY4a7OdHtxn+sSkY=
Subject key identifier: 88:A2:28:78:7F:E4:14:1D:CA:AF:7F:1D:EF:C8:78:3E:0C:5A:DF:30
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial: 1CE2E18BE990730237348426839354B2CF7DF467
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
Manifest number: 04E6
Signing time: Sun 01 Nov 2026 07:52:35 +0000
Manifest this update: Sun 01 Nov 2026 07:47:35 +0000
Manifest next update: Mon 02 Nov 2026 11:09:35 +0000
Files and hashes: 1: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: +m9YWZk3TMhLiqol4NpnwKiR2A38eOMIKyxmbrjEwwU=)
2: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: infniEWP3j17myDo6uSPhVMIMf9cY06lNVvSV//w480=)
3: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: cVbIm0l7N83w8sLxLXtPSdg7Wq2LRCNUPkl0ZJCdwiM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 11:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e2:e1:8b:e9:90:73:02:37:34:84:26:83:93:54:b2:cf:7d:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Validity
Not Before: Nov 1 07:47:35 2026 GMT
Not After : Nov 2 11:09:35 2026 GMT
Subject: CN=88A228787FE4141DCAAF7F1DEFC8783E0C5ADF30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:2f:79:fe:96:f4:d7:61:6e:9c:d1:de:6f:
96:1f:40:c5:d7:0a:1c:24:a9:62:05:35:9e:2c:6a:
8d:57:95:1d:3e:3b:05:84:e8:a0:e0:d9:d0:dd:f9:
b8:74:9e:eb:65:36:12:1f:ec:fe:3f:7d:ec:aa:3e:
69:83:ae:36:9d:d4:2b:18:3e:ea:22:b4:1f:a9:e1:
4a:57:da:e8:66:c7:aa:ff:ff:b0:6c:54:c5:0c:bc:
e2:c6:44:73:82:70:cd:48:c6:91:f8:13:2a:49:06:
07:15:c4:b5:02:82:76:13:a0:42:e5:8e:d6:68:87:
86:d9:7a:74:d6:d0:7d:b0:c6:e5:42:92:2a:02:d5:
1b:5d:5e:55:8a:70:49:43:bc:e3:d7:66:e8:e1:75:
62:55:5c:d3:4d:cd:77:5d:e6:c6:e7:5c:fd:c7:28:
26:04:04:fe:33:db:f6:f6:75:86:44:52:2d:e4:a0:
4f:93:0a:5f:43:15:8d:3f:8d:ed:6b:10:ab:b3:c7:
88:4d:a0:31:aa:bf:70:d8:60:fb:60:88:d7:28:bc:
09:fe:b8:78:57:27:5b:b3:d4:08:11:b5:5a:3f:e8:
24:41:b2:bf:44:00:2d:fa:ab:f3:56:30:e3:98:2d:
f6:85:15:1c:64:e9:c0:e3:7d:27:11:b1:93:76:f8:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:28:78:7F:E4:14:1D:CA:AF:7F:1D:EF:C8:78:3E:0C:5A:DF:30
X509v3 Authority Key Identifier:
keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9e:83:33:eb:a7:31:a8:7d:18:c0:69:eb:5b:b3:27:2f:fd:
58:f7:a2:36:20:6b:ee:1b:26:ec:44:21:97:9c:1f:48:4b:8e:
31:2d:f0:a0:31:c8:bd:5a:2a:1d:25:83:fe:0f:93:b9:a1:f0:
0b:03:89:64:0d:ef:59:57:9e:c2:0a:12:54:6b:39:8a:c6:1f:
f9:2e:57:3c:fa:91:4f:76:ab:df:da:d8:c1:eb:d7:a9:60:dd:
13:ef:16:e5:e2:4a:6a:7e:52:7b:f8:d6:47:9f:61:85:5e:7a:
95:9f:0b:ce:71:03:61:33:67:da:cc:20:ca:8a:b4:06:d1:ec:
ca:93:37:44:43:d9:d6:93:c4:49:d0:5f:c7:19:80:b9:35:48:
bd:1c:55:9d:3d:80:e7:2b:4c:21:e9:ab:15:26:94:f5:75:4a:
8b:10:67:c1:4e:9d:56:ce:6e:0b:60:2e:ff:3e:51:7f:68:c6:
23:e8:20:51:1c:1b:bd:b6:b6:64:5d:a7:c6:ca:34:aa:8f:5f:
2b:05:1b:e3:4c:a6:ad:2c:f1:8a:e5:ad:b1:b7:6e:ae:50:56:
4a:91:73:66:ad:2b:d1:1b:0f:8f:b9:b6:0b:f0:90:0a:42:1c:
3a:6d:10:a6:f1:64:5b:b6:28:5d:8c:af:b2:2d:1a:6d:22:4f:
c8:63:a3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHOLhi+mQcwI3NIQmg5NUss999GcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0
QkFGQ0I0MTAeFw0yNjExMDEwNzQ3MzVaFw0yNjExMDIxMTA5MzVaMDMxMTAvBgNV
BAMTKDg4QTIyODc4N0ZFNDE0MURDQUFGN0YxREVGQzg3ODNFMEM1QURGMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvi95/pb012FunNHeb5YfQMXX
ChwkqWIFNZ4sao1XlR0+OwWE6KDg2dDd+bh0nutlNhIf7P4/feyqPmmDrjad1CsY
PuoitB+p4UpX2uhmx6r//7BsVMUMvOLGRHOCcM1IxpH4EypJBgcVxLUCgnYToELl
jtZoh4bZenTW0H2wxuVCkioC1RtdXlWKcElDvOPXZujhdWJVXNNNzXdd5sbnXP3H
KCYEBP4z2/b2dYZEUi3koE+TCl9DFY0/je1rEKuzx4hNoDGqv3DYYPtgiNcovAn+
uHhXJ1uz1AgRtVo/6CRBsr9EAC36q/NWMOOYLfaFFRxk6cDjfScRsZN2+BobAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiKIoeH/kFB3Kr38d78h4Pgxa3zAwHwYDVR0j
BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB
ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz
MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y
MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbZ6DM+unMah9GMBp61uzJy/9WPeiNiBr7hsm7EQhl5wfSEuOMS3woDHIvVoq
HSWD/g+TuaHwCwOJZA3vWVeewgoSVGs5isYf+S5XPPqRT3ar39rYwevXqWDdE+8W
5eJKan5Se/jWR59hhV56lZ8LznEDYTNn2swgyoq0BtHsypM3REPZ1pPESdBfxxmA
uTVIvRxVnT2A5ytMIemrFSaU9XVKixBnwU6dVs5uC2Au/z5Rf2jGI+ggURwbvba2
ZF2nxso0qo9fKwUb40ymrSzxiuWtsbdurlBWSpFzZq0r0RsPj7m2C/CQCkIcOm0Q
pvFkW7YoXYyvsi0abSJPyGOjEQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:25:06 2026 by rpki-client