
Error: rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json)
Hash identifier: F4z5JoN6VnAkcG9Drn8Y8ceKtGU9RMMBGAFOma6YoPU=
Subject key identifier: F1:50:8F:43:A3:5E:1B:C8:6F:56:DC:EE:45:D5:0D:65:37:E7:43:42
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial: 51B5A2AEA0DEC8882A5A6DBFC4AA83676A7BD968
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
Manifest number: 0481
Signing time: Tue 25 Aug 2026 12:57:44 +0000
Manifest this update: Tue 25 Aug 2026 12:52:44 +0000
Manifest next update: Wed 26 Aug 2026 16:28:44 +0000
Files and hashes: 1: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=)
2: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: QymnaSDu1ODQfT5ybG3gM6X4xk9jNNtTQ+zkNvj0XzM=)
3: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: 4m98tzoFK06YCo5lHKJ1ChuppjtRNFrcqlWapi71ssI=)
4: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=)
5: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: RZ00+qXW/BPYoY+V3LazcZSeSl7+kD6hzoXFr0qzr8Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 16:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b5:a2:ae:a0:de:c8:88:2a:5a:6d:bf:c4:aa:83:67:6a:7b:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Validity
Not Before: Aug 25 12:52:44 2026 GMT
Not After : Aug 26 16:28:44 2026 GMT
Subject: CN=F1508F43A35E1BC86F56DCEE45D50D6537E74342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b6:c9:12:6d:e3:6b:bc:b5:8a:29:2f:6c:08:
8e:61:1a:4e:98:6e:21:de:c3:6d:17:b1:e7:87:ca:
a0:dd:e9:9f:99:90:4e:27:f0:08:0a:33:df:20:2d:
84:8d:27:7c:08:bf:30:02:6d:db:d7:0e:45:19:a9:
44:e6:de:2b:5f:d7:85:a3:f9:df:d3:22:46:22:ff:
4e:57:86:1e:ba:fb:40:d6:82:92:a8:0f:8c:e9:d1:
df:ed:3f:fd:ca:bc:50:85:e0:9e:a5:b4:24:20:1a:
69:c7:f1:30:e9:91:7f:6d:e6:f7:28:6e:c1:e5:06:
e0:a7:1e:c5:ee:6f:f0:49:c8:68:e9:82:48:02:d9:
ca:96:5f:d4:43:33:7d:11:19:7a:4b:f8:52:79:e0:
95:ed:e4:a1:aa:fa:f9:75:27:46:65:90:dc:e5:28:
a1:6f:6d:79:46:9d:f8:20:ba:90:4b:cf:79:01:15:
d0:5d:fb:5c:72:05:a9:26:04:ac:97:80:d3:30:3f:
2a:2b:8f:89:98:64:cb:35:3c:7d:c4:58:af:1b:59:
06:7a:c7:a3:b7:f8:97:36:34:ee:40:14:ed:21:f4:
bd:6f:31:a2:65:d4:f3:83:7a:76:37:80:cf:8b:8f:
21:5e:3e:a4:41:30:bb:86:9b:81:d6:e0:d1:43:55:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:8F:43:A3:5E:1B:C8:6F:56:DC:EE:45:D5:0D:65:37:E7:43:42
X509v3 Authority Key Identifier:
keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3f:a7:6f:a9:3d:c5:77:38:0e:88:e8:2d:b2:28:5e:47:8b:
b9:6d:9d:7d:f2:ab:ab:70:7c:e6:57:c0:b4:16:3e:57:83:a7:
af:29:a3:9b:57:f2:b9:10:4f:52:58:75:80:e2:3e:0b:0b:53:
62:76:a4:5e:99:3a:d2:bf:93:73:9c:43:89:55:4a:32:cf:f2:
42:20:69:9d:e0:4c:88:4f:13:08:06:87:78:92:9b:c1:2f:b4:
38:38:6a:d2:35:51:db:2b:c1:55:8c:ea:ef:2f:78:9c:e8:c6:
9a:cd:1e:fc:b9:b7:d9:0d:1c:55:da:98:09:3c:3a:ee:1e:d1:
2b:78:d6:26:05:5c:e0:1c:91:78:fc:05:d5:0a:d3:d0:e7:d6:
90:3f:d8:a6:28:70:03:f0:d6:32:18:9e:58:27:75:bb:ca:78:
e8:1b:55:7b:b7:6c:b5:22:90:98:ff:22:70:2c:b7:f8:96:46:
20:75:f6:d2:5c:4b:4d:39:5e:3e:39:0b:f1:85:9c:fd:4b:cc:
42:9d:cd:a6:b8:01:95:7e:02:fe:f8:c1:8c:26:34:33:62:64:
38:27:03:62:94:8b:2b:c6:17:14:59:56:50:34:e3:a5:11:f5:
02:91:1f:a6:5a:44:a7:bb:b2:37:11:12:70:1d:82:ce:fa:ab:
44:42:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:52:56 2026 by rpki-client