
Error: rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File: 03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier: TeZ/uX0l5GhtvkKncNXYDhmnP8D0nqZ1t7MiJlMCAKw=
Subject key identifier: B5:A5:C7:E8:BD:73:8E:99:AF:D3:26:B2:AA:41:4F:FC:32:28:47:A9
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer: /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial: 3923C0B12648B8F3321EC69A9EF79B791DCBB3C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number: 04E4
Signing time: Mon 02 Nov 2026 12:30:36 +0000
Manifest this update: Mon 02 Nov 2026 12:25:36 +0000
Manifest next update: Tue 03 Nov 2026 13:09:36 +0000
Files and hashes: 1: 323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa (hash: uwLHAHP6eVKIN9LSKU3TNLOMyTdKyxGBMYJqGnjOPts=)
2: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: OACuBlgvFeqrBl97DicWFUeheJzjkdOGiOjtroPLZ5I=)
3: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: GY0Bf7ArPtlQCU8Tv5LuGbvbjvTLddtcfk/sbRMlEXo=)
4: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: kKqwDCUTpgJeSqQ4PZVZHVIC0pnPUWAEDt5PFTxRhn0=)
5: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: UbyQMrHUKwbLKtTgseFNC4d0CqNtWevhcDvEeIFUG3I=)
6: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: wXg6/Ff6htQ6i1bKlaBXtANxPpd7vAwUIxnh5BbXEdk=)
7: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: dwF2FE0Vl3l8gNCaYi1/Ukn+N0wvFAJnEu/faprf2Ww=)
8: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: fKWd8WgiDa5Ht7tMgQGvC3xQxvgcY8MSZHBzd2JuTbI=)
9: 323830343a3137303a373330303a3a2f34302d3430203d3e203238313331.roa (hash: 50WUIjJD62uBTFKdvO8JYXX0xVMF6TQAnzCm3fj1Sx8=)
10: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: Fmo1lRJNHUfGTyasn32GwoOYVRilCNBAF1aLdF0hFUo=)
11: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: Laz4YLFFtezeErlvJGMgRFBNQ7RKM38W+k6IxZ/xDtM=)
12: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: EyMabbVYF1bzjaG1ZBT7tRW1hKqTrTOL5NdD9Xetxg4=)
13: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: YarjLwp74GvKEpvklDqG1T64wh6amwHEuMmWpqvvJq8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 13:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:c0:b1:26:48:b8:f3:32:1e:c6:9a:9e:f7:9b:79:1d:cb:b3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
Validity
Not Before: Nov 2 12:25:36 2026 GMT
Not After : Nov 3 13:09:36 2026 GMT
Subject: CN=B5A5C7E8BD738E99AFD326B2AA414FFC322847A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:0f:de:7d:be:3d:c7:6f:9f:ad:3f:a5:93:
3f:a4:56:19:69:c8:f3:af:54:bc:30:fe:33:14:df:
c6:dc:1f:74:7d:ad:4b:48:7e:1b:c8:65:6c:3b:34:
58:f8:dd:bf:16:b1:58:67:f1:d9:29:02:91:2e:b7:
88:1a:8d:40:21:e0:30:21:9e:2a:37:7b:dd:a9:64:
9d:7a:cf:77:7a:b9:18:87:5f:34:88:a2:06:a0:03:
86:d1:41:02:5d:ff:32:67:c2:a8:79:9e:c7:5c:3b:
5e:b6:0f:8e:a6:9c:d9:ea:c2:06:cc:ca:78:6c:62:
8d:28:51:68:73:69:2d:c8:6d:56:56:73:54:b4:e5:
fa:80:3f:3a:f3:dd:86:54:35:9f:66:23:eb:39:71:
8a:4c:cd:5b:3d:86:5a:e3:f1:f8:a7:46:64:f8:20:
37:f2:d0:5c:e7:d0:52:be:ec:ec:93:4f:2d:6a:65:
28:f2:75:0c:8c:16:62:3d:1f:a7:3f:c2:c4:a8:1b:
10:39:fa:77:fc:68:07:f0:06:ad:8a:49:75:3f:25:
c4:73:ef:9d:f3:5c:4b:c2:a8:b9:d8:0a:7e:0a:79:
42:18:e7:9d:da:d5:ee:0d:e9:d9:58:a9:dd:15:e3:
4a:de:bf:35:33:55:d3:80:36:8d:e6:dc:8d:98:e7:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:C7:E8:BD:73:8E:99:AF:D3:26:B2:AA:41:4F:FC:32:28:47:A9
X509v3 Authority Key Identifier:
keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:83:91:da:d9:ba:22:c7:9f:f3:d8:c1:89:c9:95:04:50:
64:83:ff:27:62:3c:b5:4e:26:b0:45:77:a5:f1:51:a6:05:ff:
cc:4c:02:47:b3:2a:bb:31:f6:8f:8e:8b:a5:22:23:c3:a0:0d:
c8:ae:3b:1e:e6:5c:31:d7:c0:07:7d:5b:66:39:78:f6:01:62:
e3:61:44:f0:53:23:45:09:40:12:b1:af:3e:d5:92:ae:4d:c3:
94:c3:9b:3c:5a:ee:f1:2d:cf:f9:08:64:de:db:ee:88:2b:89:
a3:13:d2:21:ff:3a:13:57:14:17:09:e7:cd:39:be:72:02:6d:
c6:f8:49:08:0b:58:89:6e:17:e5:21:ca:83:12:00:f3:cc:e7:
b8:20:78:af:c3:95:75:48:f3:5d:32:29:39:48:69:32:ac:a6:
26:9a:a5:e0:d7:76:da:de:e8:c2:d0:71:af:9f:e2:34:c4:2e:
00:c4:6f:ef:5b:25:f6:c5:ed:ee:50:f0:eb:c3:d8:33:ac:13:
88:63:f1:17:d9:d9:4d:22:df:a5:a2:da:22:07:e5:b0:4b:26:
61:e9:d3:33:01:86:35:b8:c6:1e:10:16:6d:de:5a:62:15:f4:
f4:78:69:1c:6a:5b:73:51:01:3b:44:48:d9:52:45:c9:38:95:
77:3c:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:32:15 2026 by rpki-client