
Error: rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.mft
File: E1A53866B17155A22981C4339035291ED9858A35.mft (raw, json)
Hash identifier: KYbND68P+KIosQi6XQuIMW10Q7rtDEvNzkvCLT1nQAw=
Subject key identifier: 97:2F:89:B0:D7:E3:64:3D:BF:C3:15:21:83:A3:BD:CD:49:55:BC:4B
Authority key identifier: E1:A5:38:66:B1:71:55:A2:29:81:C4:33:90:35:29:1E:D9:85:8A:35
Certificate issuer: /CN=E1A53866B17155A22981C4339035291ED9858A35
Certificate serial: 2F95A52C7194D75C6C5E37021A5155EB996C31E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.mft
Manifest number: 0488
Signing time: Mon 24 Aug 2026 06:03:57 +0000
Manifest this update: Mon 24 Aug 2026 05:58:57 +0000
Manifest next update: Tue 25 Aug 2026 07:38:57 +0000
Files and hashes: 1: 323830343a366664633a3a2f33322d3438203d3e20323730363839.roa (hash: u8EMkLtKwquz5yPX20AWPhiGvatEoR1dvT18DgMTeAg=)
2: 3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa (hash: 4SRrTy2qPzq1SJOOhq6xGHkL38df4EKZIibrKS6l4fM=)
3: E1A53866B17155A22981C4339035291ED9858A35.crl (hash: MfHkxRJO2eRDXk6/2nTqV7Db4lGkgqMJ/6Na7T1ls2Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.crl
rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:95:a5:2c:71:94:d7:5c:6c:5e:37:02:1a:51:55:eb:99:6c:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A53866B17155A22981C4339035291ED9858A35
Validity
Not Before: Aug 24 05:58:57 2026 GMT
Not After : Aug 25 07:38:57 2026 GMT
Subject: CN=972F89B0D7E3643DBFC3152183A3BDCD4955BC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:65:7f:fc:14:1e:6f:8f:f2:fb:01:d5:10:
ed:96:3b:ff:89:a0:48:21:8d:c9:d1:d6:b3:fb:b8:
01:1e:9f:72:55:30:49:6a:30:e8:59:79:0e:13:ad:
d1:c0:e3:4c:0f:93:f4:40:03:96:b3:66:ad:f4:9a:
39:22:1b:41:48:de:66:72:7b:78:9d:08:c4:cb:6a:
f5:26:a5:4b:c8:22:d8:20:eb:88:34:80:7b:65:29:
67:ce:0c:73:1b:e1:46:e6:8a:b4:9a:2e:d6:6a:64:
fc:47:b8:08:33:3e:3d:5c:87:60:e9:ca:0a:72:42:
90:0f:e0:d3:e9:16:f1:40:f9:ba:25:30:92:9a:aa:
21:8f:f2:dc:4e:3d:8d:8e:bc:f5:5c:db:94:9b:96:
ee:78:b0:ae:99:6a:75:f4:9a:dd:cf:74:0a:5c:a1:
fa:aa:c7:14:e7:18:84:33:89:17:78:a8:a2:93:31:
4a:fe:be:79:d5:09:2f:18:60:2c:90:bd:96:88:ec:
4e:1d:f4:1f:e1:6f:ce:c4:07:0f:28:2a:21:12:98:
46:64:17:71:c4:d5:5b:f9:30:ba:c8:60:19:a9:54:
0b:5c:58:47:71:7e:74:2c:15:c6:7f:b0:71:0a:10:
07:3a:f0:57:95:f9:f2:c2:f1:94:9f:ca:90:95:95:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2F:89:B0:D7:E3:64:3D:BF:C3:15:21:83:A3:BD:CD:49:55:BC:4B
X509v3 Authority Key Identifier:
keyid:E1:A5:38:66:B1:71:55:A2:29:81:C4:33:90:35:29:1E:D9:85:8A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:df:82:73:df:3a:05:bc:6e:0a:80:6c:92:1b:f8:a6:35:
41:bb:28:4d:83:41:7d:51:de:25:58:10:82:a4:79:b4:78:98:
07:2e:ea:f9:78:fb:38:d5:86:ba:00:be:8c:b9:42:82:4b:27:
ff:1e:76:57:d7:41:80:15:6e:6a:26:8a:57:d9:61:40:b2:a9:
a7:e8:3d:e9:4e:28:5d:c0:d3:cc:80:34:7b:03:d0:38:1d:7f:
aa:f9:6c:74:c6:7b:3e:91:a9:dd:52:cc:9b:b1:d7:c9:52:9c:
7b:69:88:80:08:c2:99:55:6e:f3:3c:03:72:88:7d:bc:87:41:
5f:66:ef:0a:ec:ab:6a:89:7d:61:9f:16:df:f4:ef:d0:d3:64:
16:1d:1d:6d:10:26:16:c0:53:0b:bf:e6:80:81:52:ad:9d:1d:
b1:42:16:c6:40:49:0c:07:7c:7d:18:04:dd:c4:70:39:dc:f0:
b0:c9:f6:cb:7d:22:a7:88:95:e0:cf:66:aa:51:58:6a:0e:29:
bf:21:b4:bc:22:7d:a8:e8:19:bf:c5:61:1b:f7:b5:29:cb:9a:
fd:ff:48:7a:05:b4:0a:70:c8:15:50:bd:60:c7:53:72:7d:12:
53:86:2d:88:c2:30:93:ec:a1:d5:b9:5b:4f:a3:0e:df:88:64:
14:b9:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:48:53 2026 by rpki-client