
Error: rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
File: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json)
Hash identifier: kKLC9nqEYSMVC6NzWEH4YDCFk54MyZEDHAZgYZRxCf0=
Subject key identifier: D7:BE:39:71:7D:53:2E:07:62:4C:FC:56:90:7B:10:CE:52:F2:00:53
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Certificate issuer: /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial: 3F0A76C6EC95472AC9117B68C6B8FB94D062B9FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
Manifest number: 0481
Signing time: Mon 24 Aug 2026 15:05:40 +0000
Manifest this update: Mon 24 Aug 2026 15:00:40 +0000
Manifest next update: Tue 25 Aug 2026 16:42:40 +0000
Files and hashes: 1: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: 9LTfZFns3jeih0aN65diFD82BiERnL1u1u+2ptlPW2M=)
2: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: SPpdLSNtEv9usVoSgjPUyf6e0e4wAl8RG3A7fsobArY=)
3: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: H9KNxRSpawSThsNwGW8gvnKiyL5Y5taahCHvijRF64o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 16:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0a:76:c6:ec:95:47:2a:c9:11:7b:68:c6:b8:fb:94:d0:62:b9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Validity
Not Before: Aug 24 15:00:40 2026 GMT
Not After : Aug 25 16:42:40 2026 GMT
Subject: CN=D7BE39717D532E07624CFC56907B10CE52F20053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:eb:01:a8:a5:bd:61:07:59:da:03:79:87:
db:fc:d0:55:80:14:a9:5b:de:23:74:f4:0c:50:08:
6e:db:2d:d0:2e:f6:a4:4a:95:7f:7e:f8:22:a1:fb:
3a:78:88:53:65:c4:f5:30:e8:a2:d5:75:e0:de:20:
e2:db:c0:87:5b:bd:d2:89:07:b5:29:4d:86:26:e4:
3d:59:92:c5:79:82:6f:62:40:8c:18:81:6f:fd:49:
fa:0b:9e:2f:4f:d4:ec:3e:7c:aa:c1:be:34:4d:25:
cb:58:a2:6f:79:f2:fd:7f:d6:6c:5a:91:9d:df:4f:
66:e5:e9:85:f6:0f:e8:d6:95:57:04:a2:6b:5c:a3:
a2:d5:90:c0:af:80:d0:ff:4c:3b:11:47:72:71:4d:
ef:0f:6f:7b:b9:9c:44:35:ff:df:a9:6a:89:34:04:
dd:6c:56:59:93:2c:c3:62:7e:bf:0f:ec:4c:50:83:
e8:be:20:1b:c2:0b:68:c0:28:c8:3a:73:8b:6a:ca:
15:b2:68:05:dd:b2:c8:5f:96:85:4f:96:8b:78:9b:
9a:a7:6c:65:eb:b2:dd:33:65:39:34:c3:ae:b5:d5:
dc:d3:17:48:fb:0f:f9:e8:90:b4:80:51:f1:a0:ba:
8f:00:6b:4c:22:95:07:97:7b:0f:7a:8a:83:32:72:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:39:71:7D:53:2E:07:62:4C:FC:56:90:7B:10:CE:52:F2:00:53
X509v3 Authority Key Identifier:
keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fa:0d:b2:39:02:bc:61:0f:a2:63:18:60:56:d0:04:42:c6:
3d:0b:12:dd:eb:02:18:2b:fb:eb:03:af:aa:ca:d4:23:d2:18:
33:de:e5:7c:51:fe:b8:2f:0a:12:33:3c:b6:1e:11:d4:9f:05:
82:95:d2:29:1a:db:fe:f4:af:26:b1:7e:65:0b:1f:cc:da:af:
4c:40:97:65:2e:d1:90:ed:2d:75:54:ae:55:10:aa:67:8b:8a:
06:ed:03:ba:a9:8a:4d:2c:8a:7b:a4:5e:40:f3:74:7c:20:b1:
a7:92:1e:a3:c5:93:b1:3b:09:1d:2e:ac:3e:d7:4a:03:40:6c:
51:c8:2d:00:fe:ab:4d:97:2e:ae:64:0e:e3:47:aa:b2:f7:e9:
41:10:a8:fe:a4:53:40:04:bc:e0:e4:a6:c8:f5:22:d0:12:77:
35:6d:0b:87:f9:b1:da:49:16:64:0b:b2:e0:f8:b4:e8:4e:6d:
37:99:5d:27:d4:90:42:c0:f0:17:2e:09:7d:d6:d1:c0:02:ff:
53:9b:0a:10:b3:a3:d1:5e:18:bf:44:c6:75:88:9e:1f:cd:79:
b6:a7:b6:b0:bf:7a:64:3e:51:3a:d3:a5:d6:5c:18:37:89:ad:
35:6c:2f:7b:da:bb:4e:f7:4a:0a:48:59:fb:3e:c6:fe:20:04:
b1:61:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:45:48 2026 by rpki-client