
Error: rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
File: 28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft (raw, json)
Hash identifier: fUhe8fJ6D4XwQKFjFrqtPGwg3WTACAzcNNSJ1+T4xEQ=
Subject key identifier: 81:53:7B:8D:E8:86:09:D4:0A:01:4B:9E:4D:9E:C0:E5:7C:6F:68:9F
Authority key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
Certificate issuer: /CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Certificate serial: 052219D1FF525F4A899B2783EDE0D29769B4C721
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
Manifest number: AD
Signing time: Sun 23 Aug 2026 14:49:17 +0000
Manifest this update: Sun 23 Aug 2026 14:44:17 +0000
Manifest next update: Mon 24 Aug 2026 15:35:17 +0000
Files and hashes: 1: 3137302e38322e38342e302f32342d3234203d3e20323632363432.roa (hash: dBoowVasVHqTyW972sXoXTIoIIfOecZNYPVQ7C2A+MY=)
2: 3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (hash: /UHZuWhKtLl3K44duCrs3KfczOvBHjAF626LpD7Z42M=)
3: 3137302e38322e38362e302f32342d3234203d3e20323632363432.roa (hash: yAHcgfdAfGooHUMxOsD+Ccz5mqVra4zX2Jmv1vxdrFg=)
4: 3137372e38372e302e302f32342d3234203d3e20323632363432.roa (hash: 3R29aDlIju0AIqJ/N7CorzTZ6ZcV+qetxXFgMV+F1fo=)
5: 3137302e38322e38342e302f32322d3232203d3e20323632363432.roa (hash: fy0lzGd+0WYGdEK04UIq0lf51KT2RfzgxaNMn+YxGmE=)
6: 3137302e38322e38362e302f32332d3233203d3e20323632363432.roa (hash: VhgnOHlUaFFHWmkCkGj98vte8+DM2mbYczFXhVXXJCo=)
7: 323830343a326561383a633030303a3a2f34302d3430203d3e20323632363432.roa (hash: eHDY7CvjVwWsp2IOn+rh/RTFSDSkMO3pv8c2IYSoo50=)
8: 323830343a326561383a383130303a3a2f34302d3430203d3e20323632363432.roa (hash: 4EZClxQkyKvsF6IUDiLMcf9OZL7lwA6GPUkuKLZT5uU=)
9: 323830343a326561383a383030303a3a2f34302d3430203d3e20323632363432.roa (hash: fbPqUkr5l2avW7k5QZ9ls3KAr2n1zyqjc/NJD2Pr8T4=)
10: 3137302e38322e38342e302f32332d3233203d3e20323632363432.roa (hash: 4pSwwcQRgmnvf2bNpCIjzsZPPJyeB/A3Ey7E+199aSw=)
11: 3137372e38372e302e302f32312d3231203d3e20323632363432.roa (hash: O3OiX0ANdU6FvJE2//3NrygLWyRR1+h1fhQHKedDujg=)
12: 28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl (hash: n9dDal8V0TERix7LnX/ycBQnXQizObbzXuTHAjHQK7c=)
13: 3137372e38372e342e302f32332d3233203d3e20323632363432.roa (hash: 7+OiEjcG2JA+hog1Bv+ToYEzxyfWX4Lwv9Nl5Ut2v9E=)
14: 323830343a326561383a633130303a3a2f34302d3430203d3e20323632363432.roa (hash: 2MAFFGEsJRYxj/VDbAj4i9MAuzkDsiEOiAwxuGSYdmk=)
15: 323830343a326561383a3a2f33322d3332203d3e20323632363432.roa (hash: u8XlchphTdYQkIXeIyezZm3pW+yLB9w1yZ3pg3A1jsg=)
16: 3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa (hash: EluuaUFSfBSp5hHQ5PuZvZsUnpCldSjc6PPwZTVfimk=)
17: 3137302e38322e38372e302f32342d3234203d3e20323632363432.roa (hash: G/siCPFQ+0iagXv5i2myIGjgV+tB1gQ4wkJXaj9dQBc=)
18: 3137372e38372e322e302f32342d3234203d3e20323632363432.roa (hash: 2xSVerb8Ae9m4jXXWEQhnMVyasC87UOTHCJ0xjQF4H4=)
19: 3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa (hash: PEhzDb5wwNjH/f1oM0vcUdkbpyRldQsjes7brSoj2Sg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:22:19:d1:ff:52:5f:4a:89:9b:27:83:ed:e0:d2:97:69:b4:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Validity
Not Before: Aug 23 14:44:17 2026 GMT
Not After : Aug 24 15:35:17 2026 GMT
Subject: CN=81537B8DE88609D40A014B9E4D9EC0E57C6F689F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:81:1d:29:c4:32:0e:4f:50:3f:e6:e2:41:
15:68:38:5d:98:64:73:0c:0c:e0:42:97:5c:4b:9e:
24:69:81:f9:1b:55:cd:d4:ed:42:b6:30:e2:be:1a:
28:11:8e:0f:b8:48:c4:79:fc:c3:41:f7:73:84:cb:
7a:f1:ce:1c:d8:09:d5:a2:2b:90:65:22:23:63:3c:
fe:af:32:a8:45:01:f1:b8:db:b0:c9:e6:1d:9d:57:
66:a1:d1:d2:60:6b:b4:a2:66:d2:59:54:fc:cc:8a:
14:cc:24:4e:34:85:49:c7:9c:e3:fd:76:f2:b7:51:
0f:25:4a:59:ef:0a:3a:8f:90:f2:2b:40:e3:48:88:
4d:88:8e:9b:a0:21:cd:d3:4f:cb:d4:72:e5:72:81:
d2:c7:70:da:d4:a2:30:f4:e4:88:f2:60:eb:85:08:
c6:e8:fb:21:82:51:97:9e:6f:12:49:e7:e8:51:0c:
16:a5:c3:1f:da:af:8a:77:46:dd:61:ff:37:6d:dc:
7c:18:ee:92:c0:18:5b:4f:cc:a8:e8:7e:a9:c7:60:
ae:be:aa:b8:9d:c3:0e:a5:fc:e6:b7:32:6a:27:f0:
7d:95:09:2b:2a:76:85:db:36:bc:41:b8:96:5c:a3:
07:56:64:32:87:6e:0f:5d:5f:f4:66:6c:f0:20:15:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:53:7B:8D:E8:86:09:D4:0A:01:4B:9E:4D:9E:C0:E5:7C:6F:68:9F
X509v3 Authority Key Identifier:
keyid:28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a3:2a:c8:54:7a:61:ee:45:a2:e2:78:a5:4d:13:80:67:aa:
eb:eb:bd:44:10:0e:5a:d5:98:d6:11:0e:83:e4:f7:18:30:89:
41:2c:8e:d4:0c:f5:d9:04:be:06:2b:9b:20:37:1b:63:15:e0:
a2:95:9a:14:43:a8:fc:7d:15:1c:6f:a9:f2:d0:7f:e5:7b:d2:
bb:f6:73:3a:1d:70:84:3e:b7:72:54:2a:7b:f2:0d:a3:37:cd:
2b:83:28:61:93:be:33:a1:58:e1:ae:d8:2b:dd:d2:93:a1:f2:
06:2e:a8:55:04:27:91:c6:ae:62:32:a8:43:4f:85:50:d8:05:
06:18:d8:f1:3d:b4:7a:a5:22:4d:29:ec:64:c8:ff:e5:d9:10:
91:cb:aa:fd:ad:f4:81:c4:d3:b3:94:28:29:4e:3f:fd:b7:aa:
1f:1f:44:c9:71:97:ff:20:1b:15:d5:61:3d:84:65:47:44:82:
ed:d3:09:44:5f:ac:65:98:ee:c3:70:a6:d7:b8:07:24:b7:19:
2f:7d:81:47:7c:61:8b:65:39:d5:01:82:f6:97:34:16:ba:6b:
ec:28:7a:dc:f5:73:48:ba:6f:d7:be:ab:54:e7:cb:27:2c:58:
26:b0:24:d5:84:a5:f8:66:c0:93:cf:1f:6d:41:27:31:c2:fa:
e2:d0:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:34:51 2026 by rpki-client