
Error: rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier: 6Ift2ggniAYqmUcoM2yqPP0e3SYAULyDoGjQ5aSqgLA=
Subject key identifier: E8:38:1D:6E:1D:79:FB:BC:19:63:BA:7F:8A:C4:4C:09:16:BA:95:58
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer: /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial: 10ED01AA9FBEC6BB3FBE1E3377E7248F71BD0DA2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number: 037E
Signing time: Sat 22 Aug 2026 08:24:18 +0000
Manifest this update: Sat 22 Aug 2026 08:19:18 +0000
Manifest next update: Sun 23 Aug 2026 11:19:18 +0000
Files and hashes: 1: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: 1pTCIOevx4+GBb/1dDf+1g8UakVD5vhidbrKlgedvyk=)
2: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: LXnDhEAm38knoBhfUtoYHhw+OcwWWgzQHI9vR99q1R8=)
3: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: IMbAQjtKNKCBxCPVMOT2Ftgk2dkbemX5qfuR0h3xEhI=)
4: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: oH0zhdTzdOCeBZCkbJRb+h1ytVO1ihmSo9HnvMwSx9c=)
5: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: OOf095CLKM7SyV2IJGlU27bKqAZvsPZ1DQfWXk+UKZI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 11:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:01:aa:9f:be:c6:bb:3f:be:1e:33:77:e7:24:8f:71:bd:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Validity
Not Before: Aug 22 08:19:18 2026 GMT
Not After : Aug 23 11:19:18 2026 GMT
Subject: CN=E8381D6E1D79FBBC1963BA7F8AC44C0916BA9558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:98:d9:01:c9:20:b0:97:0b:5e:90:d2:60:
01:ba:20:cf:18:4d:1f:98:2d:a5:00:85:db:9c:a5:
f0:b0:e0:08:74:e0:23:67:93:95:84:4d:6f:4f:ba:
d4:83:6e:30:2e:19:3e:e5:00:b3:46:c7:8a:3f:87:
49:6c:2c:83:17:7c:a2:b2:27:bd:c5:a8:47:81:3f:
a0:97:68:91:ab:e8:4e:37:af:2a:61:b7:0c:f2:db:
28:b8:b2:ba:c9:fb:7d:6e:a2:85:94:a8:14:c1:54:
15:a4:03:b8:f6:ea:2b:75:c0:01:d6:0c:b6:2d:b8:
37:5d:9a:e4:01:e0:70:db:9f:5b:f4:83:f6:28:b2:
44:05:d0:20:91:82:c4:ad:dc:f6:54:7e:9f:8e:23:
4b:7a:c3:af:1d:a1:4e:8f:e4:49:a7:ca:9f:3e:19:
cf:95:50:b9:13:8e:06:17:d7:c7:25:2f:18:96:c3:
7c:2a:48:39:9e:cf:3f:99:f8:ca:cf:33:72:08:4b:
c4:b9:82:70:05:48:cf:7d:bf:ba:c0:ae:f0:a9:27:
fc:81:b4:95:63:e8:31:84:dc:9a:fe:a3:aa:25:c1:
bf:85:18:b0:4b:8b:85:9c:15:65:44:12:ae:1a:76:
77:ac:a4:1e:5c:1e:77:a0:28:1f:44:75:4a:d3:18:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:1D:6E:1D:79:FB:BC:19:63:BA:7F:8A:C4:4C:09:16:BA:95:58
X509v3 Authority Key Identifier:
keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:57:ab:c0:ed:e5:17:5a:75:0c:21:b9:90:79:b4:60:1a:f4:
21:d9:4b:c6:5e:92:b2:81:fe:c5:3c:93:93:b3:59:ef:d9:3d:
ff:56:02:91:a6:e9:fe:34:06:23:05:02:b0:83:a0:72:9c:f6:
c5:7e:b1:70:72:68:b7:b3:58:57:a4:10:b0:09:0d:04:45:ed:
13:db:f8:80:ec:59:5e:d9:09:3a:64:19:51:96:78:ee:e8:9d:
96:cb:8e:b5:0f:24:6e:96:de:ec:fc:fc:17:44:82:cc:8a:d2:
90:ab:65:12:85:de:ea:b6:9c:ee:f8:ee:1f:26:81:8f:62:e6:
a7:83:ad:ce:7d:64:01:d3:e2:b1:20:58:3d:bf:d3:66:27:ab:
19:26:2d:f3:08:7f:49:aa:3a:2e:c1:35:a3:c4:38:39:c5:8c:
c0:87:ec:ba:cb:34:7b:59:01:ab:7f:6b:73:ee:aa:ae:d3:53:
ab:da:8b:1a:9f:b2:c7:7c:58:40:8a:ee:42:f1:72:34:10:43:
23:fb:77:2a:d4:71:2e:12:36:74:c8:c9:90:8f:33:94:94:25:
3a:c2:b5:6b:46:f1:ce:a8:16:b5:04:0c:ab:51:eb:a2:f5:d7:
8f:28:73:4a:b0:d0:af:d5:62:a0:48:3a:9f:22:99:14:0a:16:
8a:2c:66:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:53:35 2026 by rpki-client