
Error: rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File: 3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier: PSfrPN/MCLxQSfRxE7cutVPwMd136OpaKcrdEvUE7SU=
Subject key identifier: D1:7E:57:EA:8C:AA:13:10:AC:52:2B:37:35:F5:A6:E1:5F:6F:6E:36
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer: /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial: 54C7489B918E57C9A56BF560A3CA15965D3631FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number: 049A
Signing time: Sun 23 Aug 2026 15:19:49 +0000
Manifest this update: Sun 23 Aug 2026 15:14:49 +0000
Manifest next update: Mon 24 Aug 2026 19:08:49 +0000
Files and hashes: 1: 3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (hash: xrip3GzGbts0+j9svHEHgvaLzEPCHkGzlBehBPrzTI4=)
2: 3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (hash: H1CAtPqoi98qfBZ8Qhf+bclD0A+AK0qBuAwXopZ4ngQ=)
3: 3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (hash: 0gxXrsYO0kG1HUofDdqZqu7vJpCVNf+JdhAc98JtEOI=)
4: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: aileQOF6NUcc6KCZh4c8i26993a4QfJHih7ZtgzFbps=)
5: 3133382e3138362e34362e302f32342d3234203d3e203532373731.roa (hash: NAjciGpSQCgCEpu/aLRYC9IYZFZ6qupWYDQ6bCtw3og=)
6: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: SFO7lV9AhoR9qtC/YEdbEOF6wBFZayMls9S9/Rnfx24=)
7: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: wQuUvyrBnHz/Bwoy7HSx0HSwHqPOlSVbPsDzbRx2QVE=)
8: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: /f3q3WJtTf8n5Tt/4ow8M9X3bI0kbUnjEWsb+N6VSQ4=)
9: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: n06A7aMK9KWyvaj6TunFFzOW1nkzjRc2YjajEjkLNUQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 19:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c7:48:9b:91:8e:57:c9:a5:6b:f5:60:a3:ca:15:96:5d:36:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Validity
Not Before: Aug 23 15:14:49 2026 GMT
Not After : Aug 24 19:08:49 2026 GMT
Subject: CN=D17E57EA8CAA1310AC522B3735F5A6E15F6F6E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:c2:84:04:51:85:7e:1a:18:b0:1c:21:61:
9a:10:3c:48:60:c3:fd:01:87:04:2f:9d:1f:a8:31:
b8:98:b8:24:4f:44:9f:f4:b7:30:35:65:fe:17:a8:
cf:c4:f0:c7:3b:b7:bd:ef:09:4b:6a:e6:e1:5a:9f:
72:12:87:f2:fe:4e:b3:91:7b:df:df:a3:32:df:a0:
fd:f5:22:5f:9a:3a:01:6a:9a:14:c2:94:91:ea:a2:
25:03:ea:84:1b:43:c8:77:3e:c2:0e:9d:bf:cf:42:
f0:a3:72:e9:24:94:3b:a3:fe:78:4e:3d:77:3f:42:
68:bb:b0:ed:fb:59:26:78:26:ce:77:2c:2e:49:b1:
0d:d8:cc:0c:3d:7e:81:e0:63:96:b0:57:7d:ae:cf:
d0:cf:5a:0b:d9:03:56:6a:85:dd:1f:b0:d0:86:d3:
f0:eb:fd:7b:27:8f:b6:a2:04:27:a9:42:74:e4:a4:
97:69:b9:74:e8:ee:d3:fc:55:f6:98:77:24:40:76:
d0:db:6d:80:02:a4:b8:f3:49:ae:2c:40:e5:57:86:
b4:00:b3:17:44:98:7b:40:4e:ec:fe:46:7a:97:96:
dc:bb:fb:a9:37:7b:a3:83:eb:b8:c3:2a:e4:0c:33:
d5:84:79:fe:c1:67:bc:30:49:8d:66:4b:ce:80:17:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:57:EA:8C:AA:13:10:AC:52:2B:37:35:F5:A6:E1:5F:6F:6E:36
X509v3 Authority Key Identifier:
keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:cf:9e:a5:77:e8:07:26:4c:63:86:24:69:b4:91:8d:bf:
78:03:6b:98:8c:10:42:12:66:4a:fc:b6:c2:96:e8:1b:42:52:
e3:dd:f3:94:c2:5b:b4:2c:fa:47:80:a4:3b:0a:4f:3d:1b:b4:
a8:b0:a4:55:1f:0c:56:fe:d4:cd:13:14:5c:26:69:04:8a:f3:
37:08:66:c7:fc:8b:4c:86:7b:92:bc:a6:0c:bf:f0:a5:eb:b1:
8e:09:77:5f:c6:29:c5:db:65:da:52:63:f9:2f:37:56:cb:e5:
40:52:61:e0:66:ac:51:fb:62:b7:54:d6:92:55:7b:46:a5:d0:
5d:54:bf:a2:82:04:7b:b4:f3:12:71:2e:3e:8c:8b:8a:93:04:
77:45:54:4c:b6:94:e5:50:bc:56:5f:25:e3:00:3c:59:e4:87:
86:db:b3:1d:69:44:f1:27:31:85:be:f6:c1:27:9a:5d:9d:5c:
a0:fc:89:0e:4a:7a:f8:45:dc:77:8a:19:70:85:c1:00:8d:2c:
d1:6a:8d:47:c1:11:35:d0:25:60:e4:6a:a7:55:00:1e:0d:54:
8c:02:23:e4:1e:a8:09:8d:7a:e5:4e:a9:b7:ca:4d:af:07:b2:
3e:00:0a:af:11:bd:5c:b9:5f:d1:d4:bb:a8:c9:5b:86:90:cd:
64:05:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:11:34 2026 by rpki-client