
Error: rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
File: D293EBE899975158DDB35D74133FF1297A6D6E38.mft (raw, json)
Hash identifier: lMyY56eitPd7i2fhfIQrkY+FpeKW7c/VUEp1yY6HJdo=
Subject key identifier: AA:5E:79:97:86:73:03:E6:26:C5:1F:64:32:66:36:E7:37:3F:35:E2
Authority key identifier: D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
Certificate issuer: /CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Certificate serial: 070715583106E9506CAAAB8FB4FFC037E822CDDF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
Manifest number: 048A
Signing time: Sun 23 Aug 2026 09:41:22 +0000
Manifest this update: Sun 23 Aug 2026 09:36:22 +0000
Manifest next update: Mon 24 Aug 2026 11:28:22 +0000
Files and hashes: 1: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: 69q5eUgYcgbKj8L1yEZm6+/xpeuQNBN1Y7+wxmnMl6E=)
2: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: zwqlDjTaTOLsRjCC1dEZpfr0TWjjEvQbxj8lbG19/4w=)
3: D293EBE899975158DDB35D74133FF1297A6D6E38.crl (hash: y687tmRP7+EjAUPThF4+NAU1+RlTH2QAHLFv+dtSrWc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl
rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 11:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:07:15:58:31:06:e9:50:6c:aa:ab:8f:b4:ff:c0:37:e8:22:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Validity
Not Before: Aug 23 09:36:22 2026 GMT
Not After : Aug 24 11:28:22 2026 GMT
Subject: CN=AA5E7997867303E626C51F64326636E7373F35E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:4b:53:2b:d0:5b:81:38:21:15:2c:bc:74:
db:38:62:8d:5b:98:f4:e7:51:de:5c:76:d6:b5:da:
f7:4b:65:b8:f0:f6:91:9d:2d:7d:dd:d2:7c:4e:5e:
c8:dc:35:3d:b7:04:5b:bd:fc:44:0e:52:b0:6c:d0:
6b:0e:5d:7d:a2:63:db:45:bb:e6:c2:60:46:a2:dc:
e5:39:c0:92:cf:51:f3:a7:ba:84:14:cf:62:3e:ff:
de:27:82:f0:a1:dd:42:9b:f8:98:81:92:e3:3a:d8:
d6:a4:f5:f0:f2:41:e1:f5:34:ab:7f:df:40:5a:f1:
2c:bc:01:3f:59:01:e2:d5:79:8f:11:ba:be:86:4c:
8e:1f:8e:5e:97:0d:75:24:a0:cb:4f:b4:d6:85:8c:
e5:2c:06:1c:d6:b7:c1:ae:1b:90:16:16:5b:0c:32:
f0:f8:ea:2d:20:c1:16:a5:f7:62:33:47:01:7e:0a:
33:9b:c8:f9:1c:73:96:0f:6b:6b:6d:a9:fd:76:d7:
5e:bd:f0:d8:21:83:ba:f3:6d:b4:71:f8:aa:13:2f:
8e:e5:c0:d1:d6:f6:47:e5:51:9a:cf:35:31:81:9b:
dd:91:d2:c9:bb:e3:75:af:fa:f0:4f:01:6f:97:50:
6b:8d:13:5a:05:84:9d:40:6a:48:97:c5:50:4e:e5:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:79:97:86:73:03:E6:26:C5:1F:64:32:66:36:E7:37:3F:35:E2
X509v3 Authority Key Identifier:
keyid:D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:8d:e8:69:90:c5:f8:d3:79:57:fb:66:bc:b4:ed:3a:ac:
e1:80:a3:e2:cd:19:5e:5b:e7:c8:42:4d:00:0c:c1:23:39:88:
b5:41:a1:f1:3e:31:42:3b:b9:65:f8:fc:a8:8e:4d:bf:ce:02:
e6:a8:fd:4e:31:d3:6b:a7:23:d8:15:47:1b:ef:d7:45:2d:71:
b5:ba:39:89:bd:85:03:34:fa:0a:42:8a:5c:33:18:b2:68:9e:
b5:e9:18:22:b5:aa:2e:49:d3:69:a1:61:2e:6e:01:34:7f:f9:
93:39:81:cb:61:e2:8f:cc:45:c4:10:f6:8b:38:22:ce:f7:44:
8c:c4:81:99:2b:a0:22:d5:c8:11:c2:65:cc:1a:d7:23:e2:26:
ce:99:c3:4c:46:14:27:86:d6:b1:94:2d:7d:8c:06:e0:7b:b6:
d1:c6:47:04:80:54:16:a1:23:ee:43:c3:9e:6d:04:2e:d0:fd:
bb:4b:f9:f6:57:00:50:7f:7d:4c:77:18:d3:e0:da:05:06:05:
71:37:8a:bf:3a:b7:b9:8f:9c:6b:86:8f:86:82:72:ba:e4:5e:
b5:e8:26:81:0e:b0:2b:a6:6f:d9:c8:26:9c:68:05:71:5a:e4:
8f:47:1f:d5:a5:05:7e:1b:80:4f:73:85:bb:2d:d9:cd:50:a9:
6c:9e:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:22:18 2026 by rpki-client