
Error: rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
File: 921D37150119BEF5ED666BC87D8A3F87C69F1193.mft (raw, json)
Hash identifier: I48+JVXGaBQbYB5cqqmCJYVKIgmvD5Ukbh8Y8J2VM3Y=
Subject key identifier: 40:1C:C8:A0:E8:BA:C3:FD:E0:31:E4:24:91:09:66:96:B5:4B:A1:0E
Authority key identifier: 92:1D:37:15:01:19:BE:F5:ED:66:6B:C8:7D:8A:3F:87:C6:9F:11:93
Certificate issuer: /CN=921D37150119BEF5ED666BC87D8A3F87C69F1193
Certificate serial: 0593AA22994C2B3EF961154198BEF662540A5C59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
Manifest number: 051C
Signing time: Mon 24 Aug 2026 01:10:00 +0000
Manifest this update: Mon 24 Aug 2026 01:05:00 +0000
Manifest next update: Tue 25 Aug 2026 01:10:00 +0000
Files and hashes: 1: 921D37150119BEF5ED666BC87D8A3F87C69F1193.crl (hash: 4wYu6/+ZSS5ztC1UCwWSS4kNSmdAEOSAruRc44+37e4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl
rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 01:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:93:aa:22:99:4c:2b:3e:f9:61:15:41:98:be:f6:62:54:0a:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921D37150119BEF5ED666BC87D8A3F87C69F1193
Validity
Not Before: Aug 24 01:05:00 2026 GMT
Not After : Aug 31 01:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:ed:ab:c4:f2:73:8c:e6:20:1b:f3:d9:76:
55:4f:f0:5b:23:b3:1a:eb:ab:c4:24:45:0f:95:5d:
56:7f:0a:95:c4:6c:e7:23:15:f2:75:56:10:b5:4e:
11:e9:63:0a:a3:7a:af:56:bc:62:ac:8a:1a:0a:01:
9f:39:bb:6c:90:84:54:99:ae:80:3e:29:b8:eb:21:
25:4c:73:79:a4:c6:b6:11:09:38:1a:68:03:d2:05:
fd:0e:95:8f:42:f0:2d:ca:a1:1a:20:24:b4:cf:c5:
f7:23:bf:6f:69:6b:6c:63:5f:80:19:d3:5b:e9:ea:
0a:ea:9e:79:29:d1:40:9e:ec:6c:34:15:b7:46:5a:
57:53:c6:40:55:53:1d:2d:19:7d:f7:8c:9d:44:e8:
e3:4d:20:5b:f1:6f:db:cd:19:e6:7d:99:28:bb:b8:
a2:01:10:ac:37:8e:d2:ea:cb:26:8d:64:cb:a9:e5:
03:04:a3:70:91:dc:23:5b:38:7c:c4:ce:79:02:ea:
ef:f7:0c:2d:85:64:df:a0:2d:c8:40:98:95:67:31:
65:81:c2:37:b8:d6:53:24:ce:49:79:e5:46:ed:d0:
7a:a1:3a:d9:b6:e9:2e:f4:b5:29:dd:7f:81:2f:0c:
37:6a:6e:f3:19:ba:01:41:4a:20:a0:78:d6:0e:f7:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:C8:A0:E8:BA:C3:FD:E0:31:E4:24:91:09:66:96:B5:4B:A1:0E
X509v3 Authority Key Identifier:
keyid:92:1D:37:15:01:19:BE:F5:ED:66:6B:C8:7D:8A:3F:87:C6:9F:11:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/1/921D37150119BEF5ED666BC87D8A3F87C69F1193.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:58:4a:7a:9a:c7:69:aa:8f:0d:b0:42:36:94:01:12:00:
fa:b5:40:57:d2:f5:c0:f4:d1:b7:3c:ac:9f:fc:0d:ab:fb:cd:
99:d1:80:e6:eb:6c:78:5a:ea:5c:06:f6:23:4e:6a:00:41:03:
6d:9d:fd:84:7d:ac:f2:a4:8b:88:22:4a:03:b1:b3:f5:db:66:
85:2a:f5:a2:b8:d6:2b:aa:f6:92:fd:2e:2d:9a:6a:b7:1b:38:
e0:ec:11:a1:35:76:fa:7e:15:2e:ea:43:f1:d4:48:74:3f:cd:
7d:8f:7d:9b:73:e0:3d:82:63:0a:64:4b:9f:c3:f6:73:b6:26:
a1:a4:f8:91:48:41:fe:c0:2f:a1:89:32:d9:88:b9:fc:32:99:
9f:e2:8d:39:af:3f:fa:0f:0b:bd:aa:db:9d:96:6e:af:14:21:
f2:a0:37:22:e4:f8:65:83:a8:2c:ea:49:7f:8c:3b:69:d6:b2:
de:5e:f3:fa:8e:2f:b7:20:0e:6a:12:79:fa:b1:36:2a:27:cd:
fc:db:92:53:75:1e:99:44:42:90:52:1f:af:40:65:42:dc:83:
0c:11:0c:83:d9:cd:71:f9:ab:af:cf:15:66:a1:95:0d:49:46:
cc:b0:e1:a0:04:87:a7:ee:de:bc:8b:66:0e:e2:32:9f:a6:ab:
6d:2c:23:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:58:56 2026 by rpki-client