
Error: rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
File: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft (raw, json)
Hash identifier: KJnd0EX+X7EfwhKGY0S4Amzl85zWU+QHd62fzAGnOPs=
Subject key identifier: 38:90:10:AE:F4:2B:4B:27:28:2A:2A:84:29:62:65:D8:F8:5D:0D:30
Authority key identifier: 9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0
Certificate issuer: /CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
Certificate serial: 3F5D9F6E2CBBC4984EF5191FE86CD88723F31F84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
Manifest number: 047B
Signing time: Sat 22 Aug 2026 17:53:37 +0000
Manifest this update: Sat 22 Aug 2026 17:48:36 +0000
Manifest next update: Sun 23 Aug 2026 21:46:36 +0000
Files and hashes: 1: 323830343a313334303a3a2f33322d3438203d3e20323633353234.roa (hash: dUeLoznzRyIC83MIcHHfdJV+cHR06wYV/UilJQkHWXY=)
2: 3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa (hash: ZZSxO1ITmI166O5+psgOiMmV3lXEBAvqKox8NAFyIw0=)
3: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl (hash: 7btXVcG+ixlccfYfK7qaJzV/Z3dEBQhqq9ZkRH32C7g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl
rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 21:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5d:9f:6e:2c:bb:c4:98:4e:f5:19:1f:e8:6c:d8:87:23:f3:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
Validity
Not Before: Aug 22 17:48:36 2026 GMT
Not After : Aug 23 21:46:36 2026 GMT
Subject: CN=389010AEF42B4B27282A2A84296265D8F85D0D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:e8:4f:ba:bf:b3:16:1d:6e:7f:39:06:5d:
a0:93:e5:e9:ee:95:cf:9c:3f:3f:54:41:b7:8d:1b:
e4:ce:db:61:4e:24:68:a9:e7:11:6f:16:3f:02:3c:
7d:56:7c:2b:ce:62:ce:50:a1:5b:97:4d:61:90:65:
a2:f0:75:34:07:f6:cf:35:c4:e1:0f:fb:fd:e4:c9:
e0:85:3c:46:fb:0b:96:be:82:b1:b9:34:01:a5:a1:
e7:e4:22:3b:11:f5:f8:78:aa:95:bc:14:e0:3f:48:
74:cf:40:6b:40:db:38:a6:79:b6:1c:f1:6a:02:8f:
7b:8e:6f:14:2a:fa:20:df:e2:bd:62:7d:eb:36:be:
dc:0b:b9:34:e9:74:c8:52:9a:af:cb:39:78:94:3a:
ea:4e:b3:de:05:4e:df:d1:42:0a:ae:d4:9e:36:05:
73:b3:e9:5e:ee:9e:11:b7:02:7d:96:4b:58:43:1b:
23:40:0f:f3:f3:72:75:ed:da:b5:b5:12:83:82:07:
e9:a2:24:c6:5a:d4:b8:19:1c:ec:89:a4:f6:83:57:
a1:7f:e7:5d:7c:d3:e9:7d:c3:cf:c2:0c:9d:78:ff:
b9:54:21:45:43:cd:35:de:e4:5b:bf:55:31:11:8f:
c2:cd:e3:68:2e:7e:72:94:00:67:c1:06:fb:f3:2e:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:10:AE:F4:2B:4B:27:28:2A:2A:84:29:62:65:D8:F8:5D:0D:30
X509v3 Authority Key Identifier:
keyid:9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:5d:14:e1:85:80:d0:29:7d:26:76:5b:43:31:2d:82:99:
f2:e6:52:77:e8:06:01:67:a6:48:4d:7d:13:8c:06:cb:2f:7b:
f9:ec:5a:4f:62:e9:bc:25:7e:4f:c1:9b:f4:fd:4c:34:74:f9:
4c:8a:f6:34:fc:3f:ef:c1:f3:e5:b2:c1:7a:b2:74:0b:5b:b7:
58:cf:0d:e3:68:e2:40:71:ab:33:af:ba:6e:c5:38:5b:1d:6f:
e7:2c:03:5d:3b:15:fb:f9:c3:e9:8d:aa:b5:60:bf:42:8d:45:
3b:29:f2:da:06:14:f8:50:39:7a:f6:28:dc:38:ed:e9:0f:bd:
98:5e:cf:47:ce:32:98:a6:15:4d:7b:d3:38:2e:08:8a:d0:40:
af:2e:95:b4:95:43:c1:07:22:ad:86:7b:b6:f1:cf:28:7c:51:
40:d8:b3:37:df:d6:1b:0c:b6:b8:56:e1:03:57:a5:33:a6:74:
5e:2c:3b:f3:8f:61:8f:d8:29:7c:45:b7:5c:8f:5d:08:53:75:
b6:3a:55:07:ec:71:e5:41:05:2b:99:25:25:8a:02:74:e5:85:
bf:15:a9:ca:81:2f:1b:1d:dc:f3:83:00:be:11:96:39:64:c1:
e5:dc:d9:ba:12:88:fc:c4:ba:db:dc:71:b2:9b:dd:b9:2f:a0:
69:e7:ad:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:23:57 2026 by rpki-client