
Error: rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
File: 4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft (raw, json)
Hash identifier: p7NNmx0WRxGk0ttEdZadfuiqsuoig+sq3GbC00i2ylg=
Subject key identifier: 5A:5C:99:20:BE:86:13:29:98:09:BE:80:5D:30:EE:E0:51:77:CD:CD
Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
Certificate issuer: /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Certificate serial: 728B160F5FB2A8CDA998B5D9FB70D36B1D321B4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
Manifest number: 01B6
Signing time: Mon 24 Aug 2026 06:59:58 +0000
Manifest this update: Mon 24 Aug 2026 06:54:58 +0000
Manifest next update: Tue 25 Aug 2026 07:11:58 +0000
Files and hashes: 1: 323830343a386461303a3a2f33322d3332203d3e20323733333639.roa (hash: HjQO5eh7ERUMFZhVsKbT6TpHzBIamnp8IhL/o+140lo=)
2: 4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl (hash: f04/bICaoGF7RHkl77ItCPIhHO2dUWBHDp/lengL06o=)
3: 323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (hash: WIz1lEiWOVRmnRh+/a1Qic/qEdB/+44xE/G7kHnckp4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8b:16:0f:5f:b2:a8:cd:a9:98:b5:d9:fb:70:d3:6b:1d:32:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Validity
Not Before: Aug 24 06:54:58 2026 GMT
Not After : Aug 25 07:11:58 2026 GMT
Subject: CN=5A5C9920BE8613299809BE805D30EEE05177CDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:9b:b9:42:a8:65:c4:f0:bb:73:49:20:c7:
98:03:23:5e:68:49:33:ea:99:06:1c:0e:7c:a7:2b:
e6:50:f8:cc:11:50:15:0c:dc:b8:66:90:97:b0:b6:
df:e7:66:b5:8c:51:c2:70:cb:ef:20:84:c7:19:a7:
07:74:60:f4:12:49:ab:07:e4:5f:f8:8e:4a:e6:bc:
4b:3d:e6:8e:5d:72:c9:2e:9d:1f:6f:4d:b2:9a:78:
5c:21:e1:63:ca:b9:d1:cd:db:45:4f:b5:4a:0e:a3:
1f:81:c4:e7:2e:a1:fa:09:85:01:2f:10:38:20:a1:
70:94:4c:61:0e:25:d1:e3:e1:43:a8:3f:76:57:bd:
02:28:28:09:2d:5c:27:b1:57:e3:6c:b5:3a:25:6e:
bf:6e:b8:7e:cd:93:7c:09:a2:06:0d:1d:23:a8:bc:
3f:10:b3:c2:1c:8f:fb:9c:b1:df:72:94:04:68:ea:
c3:f6:64:01:d9:2a:04:6b:62:c6:72:f9:04:8d:df:
54:50:ae:27:e0:f7:fe:13:65:7d:51:dc:d4:4b:cc:
e6:9c:e6:07:2f:67:87:06:cb:89:ed:18:33:89:39:
76:92:b4:7b:df:b8:70:c0:79:11:f6:85:d1:1d:d5:
9c:23:81:e9:72:8e:ee:aa:0b:fd:67:ab:6a:94:83:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:99:20:BE:86:13:29:98:09:BE:80:5D:30:EE:E0:51:77:CD:CD
X509v3 Authority Key Identifier:
keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8a:a6:b2:f6:dd:45:de:8d:65:f8:f8:56:68:b3:ad:c2:96:
c2:4f:80:b5:82:eb:1e:1f:6f:52:2b:13:da:8c:9c:35:ac:cb:
87:c6:1e:3a:50:75:a1:d3:2c:a3:6c:6c:13:d1:3a:0e:c5:3a:
93:1b:cf:a8:06:84:2a:dc:3c:6f:a1:c2:09:a2:52:93:f2:e0:
a1:c4:77:b4:e1:19:1a:5a:a6:4f:2c:0f:89:eb:01:75:16:e2:
08:8b:1b:76:db:f1:72:39:36:ad:7c:2b:c1:64:7c:8b:f3:e0:
a0:14:f5:3d:ee:31:77:ca:a4:b6:79:15:70:d3:2e:a2:3c:81:
fa:44:fb:7b:cc:0b:57:63:b7:75:b7:cb:5f:e5:91:60:3c:f8:
63:b4:06:4e:b0:bc:73:31:1d:7c:c3:11:bb:7b:79:d3:25:74:
15:45:9f:8a:1e:19:55:50:81:4a:49:99:f2:e6:47:ed:a3:be:
e7:26:7e:a9:44:6d:c9:26:0d:0a:e4:f5:36:ec:ec:cc:cf:f3:
6e:84:81:b1:2b:76:cc:cf:b5:04:cf:d3:4d:0d:41:25:38:8d:
9b:1b:45:f7:24:43:14:65:81:2e:8b:0a:11:02:1a:a8:ed:ea:
8d:4e:fb:90:32:a4:50:42:5c:f1:2b:db:39:de:54:66:51:b2:
1a:22:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:31:58 2026 by rpki-client