
Error: rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier: OXrV+b/j4vxmwfvwVbAP7lPFmgpxqQQ6jdz2VJgGbXs=
Subject key identifier: 7F:6E:9E:C2:E9:61:36:28:5B:27:27:99:B4:4B:2D:6B:B8:CA:72:87
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer: /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial: 1B78820ED5ADA47489F43B1E812B5BBA1DEE7FFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number: 0486
Signing time: Sat 22 Aug 2026 20:03:37 +0000
Manifest this update: Sat 22 Aug 2026 19:58:37 +0000
Manifest next update: Sun 23 Aug 2026 22:12:37 +0000
Files and hashes: 1: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: VX0pG7aKEoUuJr7yjj+du3g5xKnNrV6eJTfG4vNWdlQ=)
2: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: FMXM6tkwCOpPm//GFr0xpZdKXbvnih6mt1OxHLNbiTc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:78:82:0e:d5:ad:a4:74:89:f4:3b:1e:81:2b:5b:ba:1d:ee:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Validity
Not Before: Aug 22 19:58:37 2026 GMT
Not After : Aug 23 22:12:37 2026 GMT
Subject: CN=7F6E9EC2E96136285B272799B44B2D6BB8CA7287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:52:e4:f1:1b:a9:14:52:32:d4:72:19:3d:
7f:a3:05:68:66:9d:11:71:2a:8f:01:2a:e0:fd:d7:
2e:41:2f:ab:c6:ab:03:95:c6:13:c6:93:b1:7a:b7:
a9:1d:0d:67:68:20:ed:4f:b8:76:63:de:0a:76:ad:
d8:51:89:3f:b7:fe:e8:aa:2f:a5:5a:ba:35:3f:04:
fe:43:b1:3a:26:0e:0f:e7:e8:2e:a6:31:c5:42:4c:
67:44:3e:c0:a7:20:56:32:53:e4:4f:dd:1d:82:e0:
a7:06:74:cb:28:9d:60:f0:05:5e:28:c3:19:90:cc:
dc:a9:1f:4e:eb:9c:9c:5c:5b:95:96:7e:a6:c9:a1:
7b:de:f3:da:ed:5a:7c:4b:66:71:5f:d4:4a:be:b6:
6d:40:e8:39:59:7b:cf:f3:7f:ec:18:48:89:2a:f6:
43:5f:60:c6:0c:7b:b8:52:52:39:b4:79:10:c8:f0:
b1:78:a7:d5:19:61:59:61:5c:67:0d:77:b9:74:38:
53:2c:33:44:c7:88:82:5a:d2:c3:53:5c:a8:cf:75:
6f:09:d8:44:ec:9d:03:9c:10:00:fe:0f:71:a0:87:
2d:8d:fa:6e:12:a5:2c:72:25:5f:54:09:03:59:88:
69:67:a1:6d:19:cc:21:27:63:a6:d8:51:20:2a:9e:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:9E:C2:E9:61:36:28:5B:27:27:99:B4:4B:2D:6B:B8:CA:72:87
X509v3 Authority Key Identifier:
keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ce:f5:df:73:2d:b3:14:02:66:25:97:f2:dc:0e:e8:52:09:
b4:04:b9:34:01:8e:80:7a:c3:c0:89:de:71:42:97:a6:5c:ff:
70:c4:61:77:cc:8a:d8:5f:a3:df:7a:14:c1:07:09:62:8f:01:
de:22:3f:e1:cd:38:8a:45:44:2f:cf:d6:fc:ed:36:2d:96:c4:
f1:24:c3:89:47:fd:85:24:85:67:37:15:dc:6a:36:41:98:fa:
16:0c:0d:44:71:87:58:64:8d:72:de:11:c9:c2:3e:f9:e1:35:
b2:12:eb:50:d3:34:09:18:ba:63:68:19:a4:35:5a:4d:95:fd:
83:59:53:64:34:ea:2b:ef:3d:71:2b:f3:3b:47:18:6c:9e:66:
4f:ed:98:c7:af:94:e9:8f:56:db:71:91:ce:1d:16:92:a4:b5:
54:f1:90:15:3b:15:48:ce:3c:e1:fe:a1:2d:28:54:12:bf:fe:
dd:7b:10:48:df:41:4c:ea:1f:bc:7d:fb:4d:ed:2d:b2:9a:8b:
12:56:db:df:56:21:f8:7f:a8:38:7d:53:fb:a6:31:b4:d3:c5:
12:ec:1b:22:99:20:ce:db:9a:d4:f3:b0:9f:a8:dc:11:6d:16:
f0:e3:02:ea:96:5b:6d:eb:ce:01:83:42:03:b6:c8:a2:0b:78:
ba:d7:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:17:07 2026 by rpki-client