
Error: rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File: 03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier: dSWKnH716x9J2m4HUeTiG0dnERNXhxefT6R67ZNKUdY=
Subject key identifier: 8D:1D:9D:A2:47:7F:DF:0B:97:23:75:EC:2A:D0:CF:AF:74:05:FE:18
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer: /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial: 53485CBC3529B7040DDCB3CA1EF4A0BD8D280351
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number: 0485
Signing time: Sat 22 Aug 2026 21:13:54 +0000
Manifest this update: Sat 22 Aug 2026 21:08:54 +0000
Manifest next update: Sun 23 Aug 2026 22:17:54 +0000
Files and hashes: 1: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: fKWd8WgiDa5Ht7tMgQGvC3xQxvgcY8MSZHBzd2JuTbI=)
2: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: lHCb7MLvsZzkLo7AFow8jOR0btEMj/9k4F94YrdX6fo=)
3: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: UbyQMrHUKwbLKtTgseFNC4d0CqNtWevhcDvEeIFUG3I=)
4: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: Fmo1lRJNHUfGTyasn32GwoOYVRilCNBAF1aLdF0hFUo=)
5: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: EyMabbVYF1bzjaG1ZBT7tRW1hKqTrTOL5NdD9Xetxg4=)
6: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: YarjLwp74GvKEpvklDqG1T64wh6amwHEuMmWpqvvJq8=)
7: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: GY0Bf7ArPtlQCU8Tv5LuGbvbjvTLddtcfk/sbRMlEXo=)
8: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: OACuBlgvFeqrBl97DicWFUeheJzjkdOGiOjtroPLZ5I=)
9: 323830343a3137303a373330303a3a2f34302d3430203d3e203238313331.roa (hash: 50WUIjJD62uBTFKdvO8JYXX0xVMF6TQAnzCm3fj1Sx8=)
10: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: Laz4YLFFtezeErlvJGMgRFBNQ7RKM38W+k6IxZ/xDtM=)
11: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: kKqwDCUTpgJeSqQ4PZVZHVIC0pnPUWAEDt5PFTxRhn0=)
12: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: dwF2FE0Vl3l8gNCaYi1/Ukn+N0wvFAJnEu/faprf2Ww=)
13: 323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa (hash: uwLHAHP6eVKIN9LSKU3TNLOMyTdKyxGBMYJqGnjOPts=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:48:5c:bc:35:29:b7:04:0d:dc:b3:ca:1e:f4:a0:bd:8d:28:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
Validity
Not Before: Aug 22 21:08:54 2026 GMT
Not After : Aug 23 22:17:54 2026 GMT
Subject: CN=8D1D9DA2477FDF0B972375EC2AD0CFAF7405FE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:58:ef:55:c5:cf:d4:7d:45:74:c3:54:cd:
09:26:c3:d8:a4:e9:5c:b5:ce:c3:d5:5c:6c:7d:e6:
d4:48:3e:7f:12:2f:76:f1:95:c1:ec:7c:6c:2a:49:
f7:04:20:3c:7b:ac:4e:17:fe:3c:8d:d1:80:72:3e:
7e:26:4b:37:94:46:e0:cf:01:ae:a5:2b:42:42:f1:
c3:73:7d:fb:07:aa:ee:df:43:13:ee:0f:23:b4:99:
43:15:ab:68:04:95:e7:52:ff:03:63:be:d4:ba:f5:
4e:76:3b:a9:05:85:07:28:d4:d8:66:b7:cb:a3:bc:
73:39:57:24:37:3f:cb:45:f9:13:51:36:30:09:7f:
57:a8:21:3e:c3:c7:1c:2a:bd:aa:be:49:17:16:07:
b5:57:d7:e1:30:50:be:7d:f4:6b:fd:10:fa:3a:20:
65:b1:53:3f:cf:c0:13:4a:e0:5b:de:25:6d:37:17:
37:74:06:32:53:ad:67:52:af:f5:27:78:80:72:a9:
2f:e1:1e:1d:62:1b:14:5f:d7:e5:b1:d8:ef:37:60:
c9:67:7d:cb:aa:be:ab:8f:14:f4:07:f8:17:c0:52:
18:30:53:2a:8f:05:fb:e0:4f:ff:7b:60:0e:24:0a:
9a:d6:fc:35:2d:5c:f9:00:4d:d5:59:e2:1f:6b:ae:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:9D:A2:47:7F:DF:0B:97:23:75:EC:2A:D0:CF:AF:74:05:FE:18
X509v3 Authority Key Identifier:
keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:0f:20:7c:64:ed:c9:34:90:71:e8:55:62:59:18:63:14:
74:15:7b:e9:f4:91:89:49:06:4f:7c:60:0d:b2:b0:68:8a:2b:
3f:6c:d5:ac:fc:00:db:8b:41:e6:30:5d:4a:d5:0e:57:46:e3:
62:90:a3:f4:9c:6d:78:ae:33:86:29:4a:4f:bb:f9:5d:12:33:
96:7d:db:d6:4a:bd:f0:0e:69:aa:a1:d0:73:5b:2f:38:01:18:
e8:aa:a7:f3:91:90:8b:b8:47:e0:51:dc:1e:ab:4b:50:04:a7:
ad:0d:ba:3f:29:f6:ae:8a:ad:4d:1a:a6:6f:e9:81:91:d7:84:
fc:94:f2:27:c8:93:35:f9:81:c0:2d:8d:da:94:eb:d1:fb:00:
2a:90:d5:46:af:47:e5:0b:81:39:c5:d0:a7:e0:1d:f7:1e:b6:
ef:96:c3:4e:e3:e1:2e:a6:15:70:ad:ed:af:2b:69:1d:f2:ff:
65:28:d6:20:18:a8:87:76:be:64:54:92:af:b6:28:15:89:33:
57:df:35:10:b7:1c:3f:c5:f5:ca:8a:1e:f8:ed:5f:2a:5d:ff:
51:e7:61:cc:8a:ba:24:32:09:54:45:ec:a0:c7:00:31:9e:8a:
7e:a2:b4:f2:ec:d1:12:d9:24:9a:ec:7e:62:3e:7c:a4:2a:86:
31:0d:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:19:25 2026 by rpki-client