
Error: rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
File: 390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft (raw, json)
Hash identifier: EzHPXSl+umlOHTp10eglC9ep00oytJ0vqgzKHPK9Rf4=
Subject key identifier: 17:94:48:15:96:89:89:89:9C:3B:74:4A:40:2A:69:78:E5:2B:35:DD
Authority key identifier: 39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08
Certificate issuer: /CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
Certificate serial: 11B2181BE0F82849F0F744218B388FDA9DEFD494
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
Manifest number: 0489
Signing time: Mon 24 Aug 2026 01:50:00 +0000
Manifest this update: Mon 24 Aug 2026 01:45:00 +0000
Manifest next update: Tue 25 Aug 2026 05:31:00 +0000
Files and hashes: 1: 3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (hash: aNKvfRNcgiaoO/tKotKxOeF7nmUFQK8gxhueuyjWPiE=)
2: 390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl (hash: F6KeH/qbdOiRPw5oy3g3gSLL/9P7+bdWlQ1tYBVjiiU=)
3: 323830343a313734633a3a2f33322d3430203d3e20323633313335.roa (hash: toWv0sMxywGUfBOXruYyBdWvYjSLsXMNwVep5P61EM4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl
rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 05:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b2:18:1b:e0:f8:28:49:f0:f7:44:21:8b:38:8f:da:9d:ef:d4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390010F3F1326B8B7E553DD78E62D9DBA2FA7408
Validity
Not Before: Aug 24 01:45:00 2026 GMT
Not After : Aug 25 05:31:00 2026 GMT
Subject: CN=17944815968989899C3B744A402A6978E52B35DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:84:e4:18:fa:3f:a8:12:5a:25:dc:78:a2:
88:c8:63:bc:81:de:3d:55:13:8b:a3:ef:e2:60:81:
cb:dd:64:4a:b7:ee:50:15:c3:e3:13:de:76:96:57:
e7:c8:5e:fe:f5:fc:b0:7f:e8:07:74:02:aa:e5:e5:
be:02:db:c2:1d:6e:2a:23:bc:d1:cc:d8:2b:50:a6:
51:db:de:33:b5:fd:ae:75:75:91:a8:65:48:62:47:
5e:70:ee:6f:29:12:3b:d9:98:8f:37:45:bf:01:b9:
f1:08:be:9c:94:83:89:18:dd:d8:6a:41:dd:d3:7c:
f3:b5:d2:f7:f6:f0:0a:9a:ca:a7:8c:ba:0b:41:49:
ca:db:0b:c9:d7:e3:8d:68:b9:f1:21:d0:a7:c1:ed:
cc:9d:76:db:b0:26:dc:27:a4:9c:0a:31:36:3a:96:
fb:f4:9b:3a:02:10:89:0b:d8:56:8d:fa:ce:04:21:
73:92:d9:24:83:dd:b7:34:5e:f2:65:46:88:03:af:
81:c8:fa:eb:0e:e6:fe:8c:d3:61:db:37:fc:9b:a0:
dc:a8:c9:b8:5b:af:1e:c1:9d:96:a6:3c:dc:93:80:
cd:f3:ab:b0:aa:a3:42:f4:d9:87:5d:aa:56:e5:a2:
9e:0a:9c:d3:93:a6:44:28:e8:ed:a7:50:f3:03:5a:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:48:15:96:89:89:89:9C:3B:74:4A:40:2A:69:78:E5:2B:35:DD
X509v3 Authority Key Identifier:
keyid:39:00:10:F3:F1:32:6B:8B:7E:55:3D:D7:8E:62:D9:DB:A2:FA:74:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/1/390010F3F1326B8B7E553DD78E62D9DBA2FA7408.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:da:06:64:c4:e1:2c:96:ad:af:6e:d6:d1:39:ab:62:67:23:
61:b1:8c:74:4a:d7:82:24:2e:8f:e8:e5:e3:77:fb:74:19:c1:
ad:e8:5d:60:62:06:55:c0:94:41:b9:d7:8c:0a:b1:55:35:60:
20:bf:ed:2d:6e:85:09:45:c7:54:21:74:62:53:99:f5:eb:d5:
80:18:99:e9:d7:12:99:22:54:52:00:fb:62:8d:29:4c:36:ef:
fa:7e:85:de:cb:3d:83:b3:ae:46:9d:17:a2:19:b6:ce:ab:3b:
19:0b:a2:33:e9:98:2b:36:8a:d8:e7:75:6a:c6:dd:e1:79:f0:
29:b3:b5:82:52:0c:71:6e:90:9f:66:c7:36:57:34:d4:6d:88:
97:e9:d7:68:d0:c4:67:3f:5b:af:5f:06:1c:af:ae:94:9f:17:
6e:a3:0a:fa:cc:cc:1f:dc:d3:9d:84:b0:b5:e0:3f:71:0a:0b:
83:44:b5:2e:54:74:d7:f9:e3:d1:4f:4a:fc:4f:56:c5:5d:57:
55:13:7d:b4:77:25:27:1b:b7:ce:04:8a:66:96:14:11:aa:ef:
85:f8:b8:06:6c:fb:70:14:3e:71:28:d8:c1:32:bb:20:7d:45:
67:c0:45:d5:8a:38:eb:b0:60:71:4b:3f:fa:a5:c9:59:3d:a7:
c8:5b:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:08:51 2026 by rpki-client