
Error: rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
File: 36244827F02756DD24031B3B242555C70EB4D0C3.mft (raw, json)
Hash identifier: p47j1s26QEZU+XOLatKe9NwL5sNnCUylV10j99nZi1Y=
Subject key identifier: D5:53:23:C1:BE:2E:EC:06:7C:5C:97:41:19:93:21:35:92:62:C2:7F
Authority key identifier: 36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3
Certificate issuer: /CN=36244827F02756DD24031B3B242555C70EB4D0C3
Certificate serial: 0E5721ED4AA947F586CDA5C87D1B102C36F33B34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
Manifest number: 0155
Signing time: Tue 25 Aug 2026 04:37:45 +0000
Manifest this update: Tue 25 Aug 2026 04:32:45 +0000
Manifest next update: Wed 26 Aug 2026 08:21:45 +0000
Files and hashes: 1: 34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa (hash: q3b368ZzCNZLfO6SwPa7rsF2rfDVHEdLx84ESBaPH4s=)
2: 34352e3138382e3234322e302f32342d3234203d3e20323639353631.roa (hash: r0ipxxUotswfPIaIlHvTRsdWksn91Gy49lwWepxyM5I=)
3: 34352e3138382e3234312e302f32342d3234203d3e20323639353631.roa (hash: b4frb7WeOMoPesHWLOLu42RxkSO6dq/SsLsT6or+950=)
4: 323830343a363637383a3a2f33322d3336203d3e20323639353631.roa (hash: j0tlNv6NLMv2Z9V5p29kFYzhTZBTiCuWQt3KPfF2y5g=)
5: 36244827F02756DD24031B3B242555C70EB4D0C3.crl (hash: gie0q1X2R0liBQ4+4vWANKTNviFoQcHoeGurLY7WIRs=)
6: 34352e3138382e3234302e302f32342d3234203d3e20323639353631.roa (hash: LRK2EqwotZooxW8hkQfg2TTGd8W4y3cM+Xp3XAP/Dsk=)
7: 34352e3138382e3234332e302f32342d3234203d3e20323639353631.roa (hash: 00sVIkNBrM8gkHJUJUkmx0r9LZTDz75BsXLnG0FQyns=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl
rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 08:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:57:21:ed:4a:a9:47:f5:86:cd:a5:c8:7d:1b:10:2c:36:f3:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36244827F02756DD24031B3B242555C70EB4D0C3
Validity
Not Before: Aug 25 04:32:45 2026 GMT
Not After : Aug 26 08:21:45 2026 GMT
Subject: CN=D55323C1BE2EEC067C5C9741199321359262C27F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:db:76:71:bf:7b:4a:b1:c4:88:4c:62:5a:
45:a0:2d:7a:a6:8e:ff:05:04:61:92:e2:bb:78:41:
ac:db:d0:39:f3:33:48:4c:da:5c:76:6a:d3:8b:cb:
8f:7e:77:ec:36:fe:7c:21:13:7d:74:41:db:3e:c7:
50:b8:97:f9:e8:67:a0:87:05:ef:a7:24:01:ad:9c:
b0:df:26:bb:9a:2e:57:35:4c:2e:d9:09:9d:e1:ac:
74:e3:bf:cf:b8:f3:e6:76:a1:7f:5f:ac:33:0d:78:
61:a2:7f:8e:b7:b8:c9:20:f6:ac:6b:8c:11:35:d0:
46:55:ca:2a:71:a6:fd:e0:38:a9:04:b8:d1:49:d1:
d3:f2:9d:f0:b1:cb:7a:43:a1:3e:40:3f:2c:6d:29:
45:34:b7:d6:97:56:4a:f7:33:81:b8:5e:3f:b4:eb:
da:06:d5:1a:47:74:4b:83:31:02:ed:66:3b:6e:d5:
06:38:04:e8:72:4e:29:d6:15:c8:df:ea:83:7d:ab:
f0:56:b3:2c:a9:ef:f5:54:7a:fa:38:e5:7f:00:9d:
6c:d1:49:3e:ce:b0:eb:1a:e5:20:77:62:2f:a4:42:
d9:0b:ce:d5:df:71:1f:fc:c2:fb:88:6d:27:f4:e5:
3f:53:a8:a5:09:3f:e2:f2:0e:39:7c:1e:e1:f7:05:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:53:23:C1:BE:2E:EC:06:7C:5C:97:41:19:93:21:35:92:62:C2:7F
X509v3 Authority Key Identifier:
keyid:36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:61:4a:07:7d:5b:da:10:74:8e:f7:6c:89:88:1d:38:da:05:
4c:27:ef:b2:a7:25:0f:a0:fc:6f:80:85:e4:30:f4:d4:3d:a5:
32:56:70:dd:dd:67:ed:0d:ee:40:89:38:29:3f:de:3a:bc:29:
34:eb:00:91:27:24:98:f9:4f:b9:80:cf:ea:13:bc:94:00:cd:
1e:e2:3d:2b:de:27:a3:a8:9d:d4:3a:64:6c:1c:1f:a7:de:b1:
46:dd:0d:b5:83:53:a0:86:fa:de:4d:e3:aa:2c:4c:a4:80:77:
63:63:8b:e0:4b:14:94:b3:1f:d9:c1:80:ba:f0:06:39:ed:62:
e6:0a:72:f2:6e:30:57:3d:aa:9b:a5:ea:22:fa:48:de:53:3f:
79:de:e0:d4:0d:e3:b3:b4:f8:52:a8:ee:4a:4c:9b:e7:14:40:
6d:e6:34:37:46:63:2b:ae:8a:9f:4a:fd:ad:3c:e8:c7:2e:ee:
43:00:d7:dd:53:0d:ac:e2:a5:ef:08:c4:c7:f6:a1:f6:95:94:
1b:29:f4:19:41:3a:d6:e4:0b:50:d4:1f:22:6d:38:ac:62:7d:
2b:58:eb:26:08:4f:17:44:cb:b9:ca:cd:5c:63:13:29:31:19:
87:e4:6b:f1:4d:ea:d2:25:a9:66:6b:10:98:20:b0:b9:45:79:
2c:15:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:13:50 2026 by rpki-client