
Error: rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
File: D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft (raw, json)
Hash identifier: 5LTh2Kbb1jlSg2za9UFNJ6CpQjz2/dCQVb1tjRhTt3Y=
Subject key identifier: 08:56:C0:3C:20:66:E3:48:85:45:70:C2:C1:3F:BF:41:C2:6E:FC:09
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Certificate issuer: /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial: 47DB47467B620F3FF12776818A41374E76F6477F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
Manifest number: 0283
Signing time: Tue 25 Aug 2026 15:36:16 +0000
Manifest this update: Tue 25 Aug 2026 15:31:16 +0000
Manifest next update: Wed 26 Aug 2026 16:53:16 +0000
Files and hashes: 1: D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl (hash: UZwbBYd4P/EHFBwvAKdrmAv8KYFJfXS76zaNa6rsdcI=)
2: 34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (hash: YBxVklOy4bOBnPGo9xSCiuxY8oyUbOxOvFtj9aAzxPY=)
3: 323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (hash: keo9J4R9iNm3V4lPSRcm5TdSy3E9BdUm0xsUE3EwI0U=)
4: 3133322e3235352e3130302e302f32322d3234203d3e20323634343630.roa (hash: f3E5Z75xI3UrBmvNs7mdofHnGwhRcnCwOP3bNH79bkU=)
5: 323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (hash: EwmYDcz8vvc5QYnF7PTHsrD+mM7rzzFK8Y5hDbw1NUk=)
6: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (hash: NxcILdcUoJg0dJ/C9n0t7epBZKs1Ud80vg7YtICURM0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 16:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:db:47:46:7b:62:0f:3f:f1:27:76:81:8a:41:37:4e:76:f6:47:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Validity
Not Before: Aug 25 15:31:16 2026 GMT
Not After : Aug 26 16:53:16 2026 GMT
Subject: CN=0856C03C2066E348854570C2C13FBF41C26EFC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:01:49:70:e0:2a:94:4e:4e:71:6d:a0:4f:
9b:04:f0:3f:8c:a4:c0:20:48:99:26:1c:df:c8:c1:
9b:c2:9e:a0:f6:d7:ac:32:3e:1a:3c:bf:63:56:14:
95:bf:93:e0:44:9c:2a:78:12:3f:e1:73:a7:3d:9a:
f4:bb:3b:11:dd:f0:05:9c:db:0e:9c:bd:cd:77:fc:
35:a7:2f:50:04:b9:7e:30:37:81:e5:da:48:87:97:
98:00:c8:ed:fe:ae:3d:e6:f0:09:8d:41:89:57:d7:
a3:ff:8b:28:ed:dc:a1:d4:5b:3b:fa:45:03:29:30:
25:60:c3:46:99:69:34:99:af:55:68:18:ca:02:9c:
1b:e6:90:03:5c:62:22:87:85:8e:45:81:21:19:b0:
ea:9c:5e:f6:89:47:e7:cb:96:98:c5:fa:b6:4e:a4:
2f:35:12:bc:a4:90:f7:0d:88:c6:bf:d0:85:fe:75:
15:78:42:bf:5b:c9:45:75:95:3c:10:9e:a6:b8:0d:
7d:72:51:7b:00:1b:ae:b0:db:92:5f:07:5f:5d:50:
01:36:9e:7e:58:5e:ff:71:9e:30:e3:bf:1c:20:fa:
f9:e0:89:ce:a9:51:57:36:23:26:0b:10:81:e6:77:
6b:31:d6:e3:84:4f:ed:be:65:db:43:8e:6c:a8:e3:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:C0:3C:20:66:E3:48:85:45:70:C2:C1:3F:BF:41:C2:6E:FC:09
X509v3 Authority Key Identifier:
keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:35:dc:df:d2:34:81:96:1e:9b:24:49:03:89:28:6f:b9:99:
3c:79:ed:bf:df:09:9c:58:5a:24:bc:af:2d:b5:7a:36:5e:6b:
f3:cd:b1:0f:14:49:b2:95:df:85:e4:14:e3:03:83:0f:f4:4a:
1f:92:01:27:e7:65:24:91:e0:bb:32:c3:88:b3:3f:8b:c0:11:
41:98:99:c1:d9:c0:17:74:cf:f5:a2:37:82:28:e7:29:49:25:
42:4b:e3:95:3d:60:de:b9:e5:47:70:b1:76:84:70:06:f3:48:
b8:ee:a0:95:2b:87:a3:67:06:c8:09:d0:2d:16:00:a5:d1:2e:
c8:8c:45:a6:db:b9:9b:d8:23:dd:f8:6a:98:11:24:95:cd:f8:
f4:19:f1:00:0b:b4:aa:23:08:ed:a1:28:ba:a4:e5:e9:1e:5a:
4e:85:03:4a:50:0b:0e:fa:bb:25:93:76:e4:42:2e:4f:4c:e4:
e4:9f:89:d5:42:80:b2:d4:19:6a:3f:ea:b9:f7:79:a7:e7:2b:
09:6c:12:10:b3:be:4d:02:37:d9:63:86:5c:e1:f5:51:f6:47:
ad:1c:f5:89:83:13:b5:9c:1f:91:58:6a:69:f0:f9:a5:24:db:
f8:01:aa:18:7d:a6:37:0f:b6:c0:16:60:cf:cc:39:ba:6b:d6:
aa:a9:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:38:46 2026 by rpki-client