
Error: rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier: zycLSuas0cq01RyBDCE40NqQ9fw29b+1mVN3ZKoMLTg=
Subject key identifier: 93:B2:FC:84:BA:BE:5F:7A:48:02:AA:BC:BE:F8:80:D0:CC:16:3E:14
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer: /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial: 202C623EA52601ACF2BEA0B00086B60656835F65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number: 0479
Signing time: Wed 26 Aug 2026 02:06:11 +0000
Manifest this update: Wed 26 Aug 2026 02:01:11 +0000
Manifest next update: Thu 27 Aug 2026 05:21:11 +0000
Files and hashes: 1: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: lJcFKWsPgwGzvx2EWYMBKk/P8ls9fbPWHfgJAbojuCk=)
2: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: z4/MzAdQOYmWeNRJnvuERmw2hfJru6wpeS85nk5yUBw=)
3: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: PaL5PuzRVfUDEYyVqNiuWp1mTRshQPvGeZsx+SntzJ0=)
4: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: sVkWMTSLFioieTFlhkF9iFbkwUXuTcAibeLsKdPaEcc=)
5: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: AWjFSDhkfiIWogzRbr+gbtD8EfijO7W+AMOW52qB92Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 05:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2c:62:3e:a5:26:01:ac:f2:be:a0:b0:00:86:b6:06:56:83:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Validity
Not Before: Aug 26 02:01:11 2026 GMT
Not After : Aug 27 05:21:11 2026 GMT
Subject: CN=93B2FC84BABE5F7A4802AABCBEF880D0CC163E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:13:d7:1d:dd:fd:da:a4:10:04:1c:9b:dd:a4:
9f:76:eb:f8:6f:43:26:6d:ea:4a:e8:5b:ec:24:4e:
b1:0d:58:3b:96:f3:78:49:3c:ca:df:dc:b9:4b:df:
78:b7:2b:03:46:9e:cb:b8:36:a0:81:7a:b2:e2:7a:
7c:b4:74:75:06:81:c7:06:e9:34:05:6f:93:f8:01:
3b:28:f4:55:65:3b:c0:42:7b:35:53:ce:7d:73:4c:
1d:aa:73:ca:59:ab:dc:37:18:1c:3b:28:01:62:34:
d7:3d:bc:90:49:c6:bb:2d:45:6f:21:1f:e4:db:99:
a2:99:dc:71:45:d0:a9:2f:ee:32:e8:67:31:68:79:
df:7b:b6:30:db:7f:4f:20:5b:0b:c8:b0:2f:13:e4:
90:07:a6:09:b0:a0:d3:32:b0:d5:93:2a:f6:09:f1:
f6:ed:02:6b:2b:cb:e4:41:a8:76:c2:c3:dc:59:d4:
5d:40:7e:7b:21:d0:73:6f:f5:64:dc:a2:22:36:57:
f5:34:90:eb:3a:e5:9c:b9:01:0c:e8:f2:ad:04:cb:
c9:a6:2d:0f:9b:7e:79:42:34:bf:6e:2c:7a:a7:ec:
c8:57:d3:a8:7f:ea:c1:cd:8b:7c:c1:79:3f:77:3b:
04:7d:19:c9:a0:f2:11:50:3d:77:32:27:b9:fc:bb:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:FC:84:BA:BE:5F:7A:48:02:AA:BC:BE:F8:80:D0:CC:16:3E:14
X509v3 Authority Key Identifier:
keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:75:dc:a2:14:35:36:88:da:a0:1e:62:38:83:da:c7:36:
1c:25:4d:d7:28:b7:88:d2:bf:5a:bf:80:87:21:74:7d:00:11:
82:09:21:4b:b5:85:2b:c4:34:48:3c:0d:4e:9b:cf:b3:fd:09:
62:d7:72:cb:95:3d:21:4f:95:3c:70:7f:26:40:b3:21:cd:1b:
e3:f1:c0:e4:09:01:bd:30:be:d6:08:fc:0e:c4:5f:75:5f:f1:
4e:0b:12:97:52:6b:89:78:de:98:72:89:a6:f0:86:49:fa:19:
13:fd:c9:39:98:67:85:96:0b:91:42:1e:c7:6f:2b:c6:85:37:
e2:9b:32:86:3f:b6:f7:0e:d0:2e:ec:a0:d0:f3:ba:df:03:0c:
cc:bb:8a:51:1d:ff:8c:95:d7:07:da:e0:fe:63:88:ea:f0:0f:
99:49:6d:75:bd:44:0d:46:35:9c:bb:70:2e:83:90:78:e5:2a:
3d:06:de:44:ad:d0:81:e7:50:fb:ac:a6:5a:11:2f:4f:83:2f:
76:dc:f2:e7:a1:71:7a:2e:13:ca:c2:42:99:14:4e:3c:57:29:
a5:e8:f9:a9:11:0a:2a:d2:f5:a3:dd:4d:dd:db:46:13:48:56:
9c:ef:2b:c6:6f:fa:0a:69:0f:42:2d:bd:41:e1:ea:cc:38:e4:
fa:2b:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:33 2026 by rpki-client