
Error: rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
File: FF2D630E978417F06D6A73D00219A91B07536236.mft (raw, json)
Hash identifier: nlRl5w84WqhzTa1P8GtbG3Zc9U3H1OiOrzLmj8GlJvg=
Subject key identifier: 41:EF:55:06:8C:8E:D6:B2:59:57:60:7F:9F:AB:00:68:B9:B2:4A:54
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Certificate issuer: /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial: 1E00C3DF9E1188C301FD31DAB811023AC31E10B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
Manifest number: 0484
Signing time: Sun 23 Aug 2026 12:30:00 +0000
Manifest this update: Sun 23 Aug 2026 12:25:00 +0000
Manifest next update: Mon 24 Aug 2026 16:19:00 +0000
Files and hashes: 1: 323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (hash: 7bKq2ImSu9HDgOmEe0l4CF6dj5HQWrW83cLCgx9PXcA=)
2: FF2D630E978417F06D6A73D00219A91B07536236.crl (hash: rxWeStKDCPU/A55aWJloZpLVg7OpAM0TuR23tKt4XFM=)
3: 34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (hash: tlMkqHSQTNEifoLRoyyP4xM6jhVB7QcDI9pX1vY4cDY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 16:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:00:c3:df:9e:11:88:c3:01:fd:31:da:b8:11:02:3a:c3:1e:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
Validity
Not Before: Aug 23 12:25:00 2026 GMT
Not After : Aug 24 16:19:00 2026 GMT
Subject: CN=41EF55068C8ED6B25957607F9FAB0068B9B24A54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:a0:cc:7f:16:d9:8f:d6:e3:8b:ae:62:e0:
7e:74:d3:88:c0:24:46:e9:4b:6f:15:3e:e8:d8:d8:
4d:c5:cf:a3:9f:1c:9d:13:22:ad:2d:c0:96:c5:44:
e3:75:de:9c:50:1f:05:51:ae:d2:fd:b2:a1:fe:2d:
86:23:62:ab:8a:9d:33:85:a2:85:2e:2b:0e:ce:2b:
cf:35:25:69:49:82:9e:52:4f:00:c2:9f:8e:3a:e0:
91:a1:58:9b:4e:1f:07:c3:61:1f:e8:c0:fd:1e:dd:
51:09:1d:d0:31:c8:a9:cd:60:4f:51:a3:ec:fd:e6:
e8:01:6b:8f:90:e4:d4:ff:48:7e:c7:c0:11:31:47:
b1:a2:b1:7a:1b:e6:dc:f1:52:33:79:26:7c:bd:b0:
0c:aa:34:37:f9:74:87:03:c8:1f:2c:86:23:d4:bc:
05:a7:40:a1:be:e5:f0:9b:f0:f9:88:ff:d4:22:65:
ee:92:a8:6f:dc:f4:5b:1b:5f:ef:54:df:c3:02:c3:
46:4b:96:96:eb:d6:8e:bf:80:d5:c2:14:1e:77:be:
8d:7e:11:01:27:ea:95:61:49:e5:13:72:93:22:56:
ad:c6:ef:b4:85:81:6a:ba:ce:3b:bf:cd:a0:61:90:
2c:1a:45:9e:b7:2d:64:1b:26:cd:0a:b8:8a:6a:2a:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:55:06:8C:8E:D6:B2:59:57:60:7F:9F:AB:00:68:B9:B2:4A:54
X509v3 Authority Key Identifier:
keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:62:aa:23:f3:45:44:dd:f3:6c:2a:67:f1:78:b1:b3:1a:8c:
f9:9b:19:ee:44:ca:f0:59:2f:7b:7a:ad:3a:46:36:6c:85:7a:
ba:1e:a7:dc:d2:f0:69:17:74:91:fc:25:2e:86:7d:37:69:d7:
65:94:b3:48:ed:83:a8:41:c7:fc:20:54:ef:aa:94:87:ae:62:
6b:1e:ff:00:33:1f:4c:ec:5d:b1:f9:51:cf:00:c0:d8:2d:de:
d2:3e:db:b4:a0:f7:a1:21:ec:8d:8e:f2:d6:9c:61:0e:76:af:
3a:67:79:e6:fe:ef:40:f6:1b:26:45:a7:a4:95:cd:4e:52:25:
a2:42:89:d3:a1:26:de:95:12:db:7f:09:4a:14:51:da:34:fb:
05:39:89:39:ae:6f:43:c9:f4:88:d0:7c:a8:c3:8b:f4:79:f9:
80:0a:75:46:4e:55:fc:02:61:a1:e4:0e:75:5e:27:73:a2:27:
b9:f1:36:d1:d6:3c:32:53:df:6c:09:aa:8e:15:c0:8e:13:1f:
68:8e:23:9a:21:e0:a0:94:35:97:de:34:2f:02:c2:79:18:83:
83:f9:4d:91:da:a4:2e:0c:c4:87:53:e9:7f:a5:f8:15:ac:ec:
46:b6:ae:45:a1:e9:32:dd:61:5d:81:ce:5e:db:41:a4:9f:b2:
a6:04:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:39:22 2026 by rpki-client