
Error: rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
File: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft (raw, json)
Hash identifier: 2wKqAOmlT3RGuJn1vEf1Uqhbdrqlb5Dxo0raIJ/xm+Y=
Subject key identifier: 70:1C:BE:B1:CC:10:6D:AD:C5:AF:8E:E2:BD:5C:E5:D6:06:09:43:7C
Authority key identifier: 13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Certificate issuer: /CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Certificate serial: 46F61D38B487D7C963E416E43D6728C160D1BFFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
Manifest number: 02AD
Signing time: Sun 23 Aug 2026 15:20:45 +0000
Manifest this update: Sun 23 Aug 2026 15:15:45 +0000
Manifest next update: Mon 24 Aug 2026 18:56:45 +0000
Files and hashes: 1: 3133382e302e3136342e302f32322d3332203d3e20323634353537.roa (hash: Zu4CbibibHuiR6HArJ04hoy05s8Y2LXooWHOzkB9aGg=)
2: 323830343a323137633a3a2f33322d313238203d3e20323634353537.roa (hash: OOTZpKI8FQtbfmgU7oV9DJryt1kSiKrkgtA/SU0iGHk=)
3: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl (hash: ZAFHBBVHHscZ23DpLXuAH/LozVruWgtB+q2UzOQWE+Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 18:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f6:1d:38:b4:87:d7:c9:63:e4:16:e4:3d:67:28:c1:60:d1:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Validity
Not Before: Aug 23 15:15:45 2026 GMT
Not After : Aug 24 18:56:45 2026 GMT
Subject: CN=701CBEB1CC106DADC5AF8EE2BD5CE5D60609437C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:91:38:70:16:ac:4b:5f:43:26:f9:3b:09:
ca:99:1d:69:d8:93:9b:7b:24:fb:e5:71:19:ba:1e:
2e:25:6b:73:9f:47:06:d0:d2:73:2d:c9:34:29:7c:
b0:c8:f2:6d:aa:d3:54:48:81:7d:b0:3a:a9:12:72:
41:ff:26:7b:1b:8f:fb:69:e6:27:e7:e0:94:89:23:
94:8c:6a:9a:a9:45:63:c5:1d:12:0e:89:2b:8f:ae:
a8:4b:f1:75:9d:02:c2:38:a3:59:17:0d:01:ae:ee:
cb:bd:a9:63:19:dc:a8:8f:a3:1f:19:9d:69:54:9d:
8d:20:ac:ea:5f:de:99:74:66:53:50:ef:f1:db:8c:
76:29:c1:fb:e3:9f:b2:2f:5d:37:f7:7a:eb:30:4d:
b9:b6:c4:23:8a:05:66:e7:d1:4a:2f:ae:1c:46:be:
b4:b6:4e:1c:86:d6:60:b9:6a:94:e0:cd:1c:31:33:
ca:d6:1e:15:7c:11:2c:45:99:a7:06:9f:04:6f:85:
c5:4f:58:1f:a2:6e:3f:ff:11:55:82:5a:ad:ab:0b:
4e:8b:4a:37:31:7a:77:86:fa:65:bf:59:a2:37:fd:
67:10:37:a6:ae:da:c3:c0:82:f7:cf:1c:db:c7:5d:
39:91:7a:f2:3f:94:b7:3a:86:aa:79:96:9e:43:31:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:BE:B1:CC:10:6D:AD:C5:AF:8E:E2:BD:5C:E5:D6:06:09:43:7C
X509v3 Authority Key Identifier:
keyid:13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:a1:d9:fd:db:97:8b:be:bb:ff:09:63:76:a2:cf:a3:de:
ba:c0:fe:f4:7a:e6:b7:1f:4e:21:f3:c8:ee:da:3e:7e:71:a0:
39:82:b6:62:5f:84:8b:c9:f1:75:5d:f1:81:67:6a:16:9b:ea:
66:d0:c2:32:c1:14:9d:c2:71:d5:ad:7f:e7:7c:b6:b2:65:b0:
e7:1b:90:7a:f7:a2:54:09:fe:9b:a9:af:2d:5a:74:42:7b:d9:
8d:d5:0b:aa:02:e0:00:ca:6d:01:e5:21:97:9e:64:6e:05:08:
ec:83:82:a7:5e:b1:45:97:14:11:4e:47:f2:92:d5:93:a2:c2:
8e:f6:81:b8:d7:1b:db:b2:09:df:05:df:3c:4d:68:47:72:2b:
45:8a:ae:4c:1a:d2:60:a8:13:44:7b:e2:02:a2:b5:41:47:41:
37:17:65:5d:56:f2:12:a3:29:7b:cf:9d:d7:0d:fd:db:2d:5b:
8f:83:41:f3:31:88:2a:18:70:9b:04:74:f7:0d:30:80:98:b0:
f6:76:c7:39:37:cf:93:63:4e:8a:de:9f:cf:1f:54:a2:13:63:
18:bd:0d:e1:67:d1:51:e3:82:7c:e5:df:fc:c1:eb:43:c6:e9:
30:1d:77:e9:d8:b4:b2:cd:10:76:74:32:b6:ce:d9:b5:a3:81:
5e:a6:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:31:45 2026 by rpki-client