
Error: rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
File: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft (raw, json)
Hash identifier: X9cotk6p+b1Vosy9vcaisYlHx5eGAUDvRTZwNClW7mA=
Subject key identifier: FA:22:AD:F7:AA:50:E6:BD:48:57:85:FF:E3:95:40:91:CF:EF:48:4B
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Certificate issuer: /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial: 5C5EEC3033405A3D54F4B6DFE11C7DFE558ED8A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
Manifest number: 048D
Signing time: Sun 23 Aug 2026 20:00:00 +0000
Manifest this update: Sun 23 Aug 2026 19:55:00 +0000
Manifest next update: Mon 24 Aug 2026 20:23:00 +0000
Files and hashes: 1: 0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl (hash: 4b+6yLkvPU6gr5jQ4d0jbPfvi33a59JH7DXfTEww87E=)
2: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: BruxwqJWfKyRFTI2SJm4s0MgvOksI2wYdPZH+Pr1uqM=)
3: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: cGe1000RguWJhhNSvl7VRAxDphOffrqJS/r6DyiD+pY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl
rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 20:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5e:ec:30:33:40:5a:3d:54:f4:b6:df:e1:1c:7d:fe:55:8e:d8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Validity
Not Before: Aug 23 19:55:00 2026 GMT
Not After : Aug 24 20:23:00 2026 GMT
Subject: CN=FA22ADF7AA50E6BD485785FFE3954091CFEF484B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:4b:b0:09:b0:ad:28:e3:9b:17:a8:2c:c8:
df:ef:3f:c9:e5:05:cd:ca:c5:40:ba:33:25:75:b1:
a6:d5:97:56:22:ff:85:26:f8:8e:ca:6f:ec:d5:2e:
11:60:9d:c5:49:53:20:9c:79:d5:cb:48:da:82:a5:
19:16:e2:99:4f:f7:9f:ac:06:89:78:07:15:50:b1:
97:e8:6b:12:ac:92:97:6e:54:bc:ca:4e:28:38:d5:
48:ed:ed:1e:8a:40:a5:fa:ed:7b:6f:31:28:83:a2:
a7:4f:fc:21:5c:34:31:04:2b:7e:23:b1:b9:7b:52:
ca:89:63:60:4a:73:16:e9:cb:df:54:fd:80:05:63:
4a:a5:2f:12:f7:91:6f:de:6d:a9:2a:6f:73:4b:60:
66:3d:ac:e6:58:e5:df:2c:22:58:07:47:bf:18:75:
9b:53:2b:6f:d0:7f:78:ef:67:5a:a1:b0:06:63:c5:
80:5a:f9:0c:b0:05:78:4c:a5:92:fa:30:a8:52:a4:
df:9a:b0:9c:3b:6e:28:63:9a:6c:25:fb:8f:f9:72:
36:c8:79:6b:78:fa:de:04:f5:a0:5d:b2:fc:ce:ee:
cb:72:13:59:c2:96:d5:75:c5:a0:57:6b:5d:f2:b2:
d7:4c:e0:d9:48:37:4f:39:81:94:fc:a8:4a:4a:a4:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:AD:F7:AA:50:E6:BD:48:57:85:FF:E3:95:40:91:CF:EF:48:4B
X509v3 Authority Key Identifier:
keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:e1:fb:0d:1b:9b:a9:0a:7b:a1:58:20:d1:9a:5c:9a:e3:
bd:4b:61:20:25:a4:4f:04:bc:e9:82:c2:0f:65:3d:6f:12:76:
de:af:30:a3:0d:32:6e:29:5d:31:ba:b8:64:06:9a:08:4b:ef:
2d:d6:a2:bb:30:ae:84:a2:21:a7:b5:b7:e1:79:34:9b:d4:22:
e9:9e:b7:6b:22:5e:4a:1c:36:aa:e5:1f:88:a9:52:85:dd:4e:
c2:20:d6:6a:ad:a0:ad:67:a3:43:5e:c2:ce:8d:ca:f0:0c:d6:
d8:ab:7a:f3:6b:bd:8d:51:d5:d9:cf:42:2e:82:fc:38:5a:fc:
66:10:92:c3:02:60:b3:40:57:73:95:47:ad:52:28:24:8e:6a:
0b:c6:55:53:d8:c5:b4:8e:4a:f5:fa:13:0c:2d:8e:90:a5:30:
36:ff:f9:99:01:ae:0a:77:59:85:4c:80:5d:f8:15:3c:04:1e:
27:c7:97:98:97:29:8a:34:f9:0b:90:ed:6c:a7:dd:d6:46:0f:
99:e6:05:c0:04:12:41:f4:7e:3e:51:c8:76:a2:53:09:a7:5f:
81:9d:0d:84:41:2e:07:bc:7a:6f:b7:04:39:b1:39:3a:fd:00:
52:91:c6:13:6f:cb:1f:5d:3b:9d:f0:cd:1f:1f:1d:b9:76:93:
24:65:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:39:52 2026 by rpki-client