
Error: rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
File: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft (raw, json)
Hash identifier: aErhuFYSpryALFMDg3B1PYaQ+4sgQupf4rd0hDrBhlE=
Subject key identifier: C5:B8:5A:38:64:2F:8B:A4:7A:CC:37:92:12:79:C9:79:4E:9A:BE:55
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Certificate issuer: /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial: 79EA3DACAFEAE239544041A8FF50F0FCB0951A96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
Manifest number: 051E
Signing time: Sun 23 Aug 2026 03:00:00 +0000
Manifest this update: Sun 23 Aug 2026 02:55:00 +0000
Manifest next update: Mon 24 Aug 2026 03:00:00 +0000
Files and hashes: 1: 323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (hash: 0MMOAs1MWxCvekbrZ3YR/igWWET3IbGvNy0LegCBu28=)
2: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (hash: ghF1TGhBZZyNg9ABkTWFCoeZHaXw906fT76yMOCnUfc=)
3: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl (hash: a3UrYarSvrZRxzJDbllj9FbtiGMyvT2sHVObvrrip0A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ea:3d:ac:af:ea:e2:39:54:40:41:a8:ff:50:f0:fc:b0:95:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Validity
Not Before: Aug 23 02:55:00 2026 GMT
Not After : Aug 24 03:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:aa:5e:f6:9f:08:7f:46:35:27:b8:fe:7e:36:
d8:6f:f6:78:d5:d9:17:83:7e:7c:35:6c:c7:1d:e8:
65:97:11:fa:aa:99:85:b2:d8:f2:88:2a:ed:ba:dc:
28:c4:a9:ba:f8:b7:1d:b1:98:91:b7:ab:15:c8:13:
e2:62:db:19:33:2c:41:a4:36:aa:d7:b3:74:5d:7b:
5f:33:c4:d1:d9:6b:9a:41:59:75:bd:26:74:05:30:
a9:8e:1d:cf:14:a7:72:0c:f6:1c:be:b6:5f:c8:a6:
94:1f:91:15:e0:3b:0f:63:17:d1:af:5d:1f:76:0a:
eb:06:a2:d6:1f:c3:aa:e1:ab:03:a7:c9:f9:c2:eb:
e9:77:a4:8b:be:8f:48:76:b8:04:63:28:6e:61:e8:
51:ab:0e:14:da:d1:e7:c8:a6:96:75:cd:58:66:17:
73:e5:5e:bf:d9:b2:9c:ee:dc:cd:07:8d:60:ea:6a:
9f:72:43:ba:d3:2b:81:03:cd:b1:3f:3a:14:8b:17:
ff:c8:8f:07:97:59:91:98:93:e5:b4:21:fb:88:ed:
31:02:72:04:a4:e3:42:96:ee:91:70:fb:35:82:ca:
bb:17:66:16:5e:3c:a8:c7:c4:2c:ec:b4:f1:81:fe:
2e:9e:3b:3b:89:e2:b4:2e:d7:37:24:cf:aa:62:ea:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B8:5A:38:64:2F:8B:A4:7A:CC:37:92:12:79:C9:79:4E:9A:BE:55
X509v3 Authority Key Identifier:
keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dc:0a:4f:a5:56:03:95:96:ca:32:13:f1:fd:a6:c0:20:cf:
6b:c8:cb:42:8d:fb:9f:24:d3:2a:83:b4:9c:40:4a:50:95:46:
b2:74:da:d1:fc:f3:46:c3:61:8e:21:d9:cc:8a:76:ae:e0:1b:
19:6b:5a:d2:b9:3f:bd:db:c5:58:44:56:8c:28:27:cf:c1:c0:
1c:90:13:31:42:32:98:cf:53:db:bc:14:ad:3c:0d:b4:f4:dd:
2b:25:f2:c2:f4:81:c4:ea:7d:3a:7f:c4:ba:a8:85:c9:09:cd:
71:fb:1b:ce:fb:5c:f6:4c:24:32:90:0e:a5:d1:02:08:5c:bc:
7a:7f:1f:e1:dd:31:68:89:00:54:31:b1:8f:9e:00:63:ca:5f:
08:25:94:57:43:dc:57:2c:82:ed:3d:35:7e:c6:05:56:b9:4b:
6c:4d:0d:9c:c1:a0:5c:80:d1:b2:9b:8a:c7:01:1a:5a:aa:89:
ab:c1:3c:c5:99:6b:2c:86:3c:a0:9d:9d:ab:65:ef:84:19:e8:
88:2e:eb:f5:3f:fc:4e:bd:e9:88:01:25:25:56:b5:da:cb:7a:
1b:76:69:89:64:74:91:1f:07:65:5c:26:6e:f5:e6:00:8f:cb:
f2:55:72:b8:39:e5:39:03:17:e7:7e:a9:2f:4a:1b:32:27:70:
c3:86:69:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:22:38 2026 by rpki-client