
Error: rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
File: B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft (raw, json)
Hash identifier: bduO9dJjhFRRyWgxt92TfGaQ6zXgvZM1Dgfmizg7OvY=
Subject key identifier: 34:46:58:EC:FC:10:9D:FB:97:94:30:43:18:59:A6:77:C4:F4:F3:38
Authority key identifier: B3:C7:5D:6F:EE:33:35:62:5F:5B:C4:BA:98:E3:56:53:09:B6:60:AC
Certificate issuer: /CN=B3C75D6FEE3335625F5BC4BA98E3565309B660AC
Certificate serial: 164120E0D4C1265DE20E598686E1B8C692ECA0D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
Manifest number: A7
Signing time: Sat 22 Aug 2026 12:50:00 +0000
Manifest this update: Sat 22 Aug 2026 12:45:00 +0000
Manifest next update: Sun 23 Aug 2026 12:50:00 +0000
Files and hashes: 1: 323830343a383630303a3a2f33322d3332203d3e20323732363133.roa (hash: J84F4ma9BSm45vsSW4lXGeW/oqlc6BLCftipzcrG8dE=)
2: B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl (hash: VolBJDNXZWiE2KtmA4G+fJVukYGHEojowiRq7OoST2E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl
rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 12:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:41:20:e0:d4:c1:26:5d:e2:0e:59:86:86:e1:b8:c6:92:ec:a0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3C75D6FEE3335625F5BC4BA98E3565309B660AC
Validity
Not Before: Aug 22 12:45:00 2026 GMT
Not After : Aug 23 12:50:00 2026 GMT
Subject: CN=3082010A0282010100C29DB027A45367581C4D7D25A0576840A11B5C20A6C75F938CCF84DCDCEFC7AD3C2D57443B0AB8B81800EAA43D7CC6C892FB736666A353CBAC093841BA01D831599BD53C10A7AEAAFCBD438C819A7D39E8790877BD168A88EA952163F046946F8479A5481DC7461EF3001EAACD45F36A559CC84B80D0E2DC752721C0AD02352EBEBE34425584E5DBA9FE567B9A6A93B174C8DFE4B73A33593F751CA9DB2D6EE523CC448873C9C355580C4808C702A509475A5755C2DDA8AA42F73262C8864732B3D50B8DBC8FA7ECAD483E5669BDBDDBE6CF9F02ACD9A1729290E613900D0E44061C2821F53F93CFF5B445CC03A746B72C7D4D0885D7691DEB557D55B0498F010203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:b0:27:a4:53:67:58:1c:4d:7d:25:a0:57:
68:40:a1:1b:5c:20:a6:c7:5f:93:8c:cf:84:dc:dc:
ef:c7:ad:3c:2d:57:44:3b:0a:b8:b8:18:00:ea:a4:
3d:7c:c6:c8:92:fb:73:66:66:a3:53:cb:ac:09:38:
41:ba:01:d8:31:59:9b:d5:3c:10:a7:ae:aa:fc:bd:
43:8c:81:9a:7d:39:e8:79:08:77:bd:16:8a:88:ea:
95:21:63:f0:46:94:6f:84:79:a5:48:1d:c7:46:1e:
f3:00:1e:aa:cd:45:f3:6a:55:9c:c8:4b:80:d0:e2:
dc:75:27:21:c0:ad:02:35:2e:be:be:34:42:55:84:
e5:db:a9:fe:56:7b:9a:6a:93:b1:74:c8:df:e4:b7:
3a:33:59:3f:75:1c:a9:db:2d:6e:e5:23:cc:44:88:
73:c9:c3:55:58:0c:48:08:c7:02:a5:09:47:5a:57:
55:c2:dd:a8:aa:42:f7:32:62:c8:86:47:32:b3:d5:
0b:8d:bc:8f:a7:ec:ad:48:3e:56:69:bd:bd:db:e6:
cf:9f:02:ac:d9:a1:72:92:90:e6:13:90:0d:0e:44:
06:1c:28:21:f5:3f:93:cf:f5:b4:45:cc:03:a7:46:
b7:2c:7d:4d:08:85:d7:69:1d:eb:55:7d:55:b0:49:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:46:58:EC:FC:10:9D:FB:97:94:30:43:18:59:A6:77:C4:F4:F3:38
X509v3 Authority Key Identifier:
keyid:B3:C7:5D:6F:EE:33:35:62:5F:5B:C4:BA:98:E3:56:53:09:B6:60:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/29iCKGLUTdfswwUDZMzp5bkB8172h611QTGiennrhcvE/0/B3C75D6FEE3335625F5BC4BA98E3565309B660AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:7d:59:79:86:4f:85:92:ff:69:19:99:e3:25:65:0f:e2:
47:e9:5b:4c:00:a7:e9:ed:1e:31:ab:0b:d8:a0:1a:cb:83:2c:
57:28:93:1b:0f:7f:0c:47:61:73:37:90:ba:b6:1c:12:f5:e4:
43:45:ba:16:bb:4d:27:43:f7:42:8c:81:cd:8f:12:ed:74:3c:
19:a7:ae:16:92:7a:b3:d1:9a:11:f1:a8:66:73:45:68:dd:4d:
79:b7:f2:a5:77:51:55:94:e8:45:25:2d:10:09:f0:de:4f:ee:
24:b7:b0:ab:d1:4d:3a:04:1d:7a:25:ed:50:0e:20:33:77:93:
33:da:d9:e3:d1:f8:f6:42:8b:22:ad:6b:fa:c9:e2:67:c6:39:
d5:06:93:d6:88:bb:0b:d0:02:dc:98:f5:25:3d:be:7a:90:b5:
09:6e:1e:aa:4c:01:21:f1:f3:9d:75:e1:09:17:80:35:2d:a2:
8a:61:27:f8:18:6f:bd:5b:05:77:16:be:c0:f0:20:bf:8b:0b:
0f:73:64:4d:ee:b0:2d:2a:a0:6f:d9:8c:26:de:19:34:4a:eb:
06:19:7a:5e:32:8e:20:3f:80:a4:d2:c7:7d:42:88:32:e9:e5:
8a:f6:2e:f2:b3:76:f1:b8:07:c6:49:20:71:21:86:08:68:38:
f8:c1:df:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 03:51:07 2026 by rpki-client