
Error: rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
File: 5534C39A465F9E5D47762E20F30C75897285DDAF.mft (raw, json)
Hash identifier: LLHd5xXvqaDUQx4MAEoFBuuY9BL9V+JErml91GMHgF0=
Subject key identifier: 88:F4:4E:8E:BA:6C:E7:4C:88:68:A5:F3:91:CD:04:D1:82:9A:B4:45
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Certificate issuer: /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial: 4512CCE3B78C181FA6457E0E59251CF750E3CD4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
Manifest number: 0487
Signing time: Sun 23 Aug 2026 18:38:05 +0000
Manifest this update: Sun 23 Aug 2026 18:33:05 +0000
Manifest next update: Mon 24 Aug 2026 21:37:05 +0000
Files and hashes: 1: 5534C39A465F9E5D47762E20F30C75897285DDAF.crl (hash: lT5TXJTDQobr/95AsknwjumN2dttf4c8UtU1j/Af+Fw=)
2: 323830343a326637633a3a2f33322d3430203d3e20323634383934.roa (hash: 4TXSCUIUEO7Zw09/o5yxTywrm2ZViQqCQ4DatFwELkc=)
3: 3136382e3232382e302e302f32322d3234203d3e20323634383934.roa (hash: 4SanX7ojwpVsbvHpIzlg0UKYmQzt5QzddUpmykm33sk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 21:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:12:cc:e3:b7:8c:18:1f:a6:45:7e:0e:59:25:1c:f7:50:e3:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Validity
Not Before: Aug 23 18:33:05 2026 GMT
Not After : Aug 24 21:37:05 2026 GMT
Subject: CN=88F44E8EBA6CE74C8868A5F391CD04D1829AB445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:ca:d1:bf:57:75:23:47:37:3f:da:b6:ea:
99:ee:71:14:1e:85:3c:55:3c:ac:77:06:dd:28:cd:
19:ed:1b:2f:44:81:bc:e6:ed:3f:a3:f1:f4:66:d6:
a3:06:f9:01:f7:dd:77:ef:42:de:0c:b8:78:ed:b7:
f1:b5:a2:28:5c:a5:c6:15:75:e7:8a:35:f9:d1:a8:
5e:70:a9:22:43:16:37:94:1c:9f:5a:82:1a:78:7e:
f5:85:e9:10:85:69:ee:5f:35:c4:d3:95:7c:c1:6d:
16:fa:41:56:7a:0d:ac:2c:82:99:f1:bd:f4:e5:8f:
81:96:4e:55:95:85:e9:8d:9e:df:9b:26:26:55:31:
bc:f4:92:ea:f7:45:06:44:e0:2c:91:67:3b:83:90:
f2:89:5e:0b:a2:21:e2:59:79:e3:78:c5:96:09:7c:
03:cc:30:42:f1:fa:dc:f2:0f:12:12:ec:2d:aa:34:
7f:14:84:e0:c5:13:12:d0:e4:c6:6b:9f:81:c9:28:
99:0f:06:0c:31:f7:16:78:fa:b8:dd:42:81:33:29:
9f:b7:63:57:0e:d5:99:95:b7:f0:0c:da:c9:fb:7e:
b4:f9:45:6e:d0:28:0e:f0:6d:9a:ba:42:ec:2e:33:
77:39:70:01:f9:6e:1d:93:26:07:21:91:6b:97:4c:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:4E:8E:BA:6C:E7:4C:88:68:A5:F3:91:CD:04:D1:82:9A:B4:45
X509v3 Authority Key Identifier:
keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:e4:f4:50:98:49:c2:d3:a2:d3:44:cf:33:cb:d9:a4:12:
47:23:2c:b2:eb:4d:f3:eb:be:11:75:fd:90:b5:f6:1b:0a:8b:
44:0d:78:3b:6c:e7:f3:db:88:23:2f:1b:6a:03:98:f4:ad:42:
68:ae:35:ae:77:76:37:45:42:40:d2:ae:c5:79:4a:4f:48:24:
8e:bf:2c:77:b4:21:c3:6e:cb:55:04:42:4e:29:65:be:61:42:
ad:db:6e:1d:cc:83:ea:75:50:be:ca:9a:2b:9b:8d:4c:00:f6:
f1:9f:49:8f:fc:75:23:41:6b:c4:fe:bc:1d:2a:31:a1:6f:d8:
02:15:c8:2f:ee:7f:32:be:19:cd:63:4b:81:c5:e6:43:5b:69:
0b:97:af:bb:8b:21:34:68:cd:99:0d:00:ce:bc:de:de:21:ff:
40:28:4a:06:3d:75:47:67:e7:6d:79:b3:a7:de:19:b0:fd:df:
d0:28:68:4f:3e:9a:2b:95:a8:6d:24:77:a2:34:1a:b6:87:5b:
0a:6a:8e:59:ef:63:1e:d0:b6:4f:45:d4:c0:e6:07:93:37:fc:
56:98:26:39:9e:08:5d:12:8e:20:d8:74:f6:62:1f:e1:46:a2:
0d:49:a9:48:75:51:84:63:c0:c2:55:14:06:f6:57:f4:3a:e8:
3c:ff:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:41:16 2026 by rpki-client