
Error: rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
File: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft (raw, json)
Hash identifier: ItspoY9TpxV9hhvI6W7AlbDLs2Zh68u6jVgRRF3f4T0=
Subject key identifier: CE:2C:53:68:85:CD:B6:6E:3F:E0:0D:FA:C5:16:C9:D2:67:A5:3F:C9
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Certificate issuer: /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial: 2440F817CE6A0CC3E27FC1073E49C47964069100
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
Manifest number: 048F
Signing time: Sun 23 Aug 2026 05:27:06 +0000
Manifest this update: Sun 23 Aug 2026 05:22:06 +0000
Manifest next update: Mon 24 Aug 2026 07:50:06 +0000
Files and hashes: 1: 3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (hash: 8OS7uuXS1Ib6w7NymYc+smoWk9lCVl91GePs/EyW/6c=)
2: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl (hash: v/eBIVQ91Q+B6Hb50oeFW+KVeywCNtkqOmk9ZmF8VwM=)
3: 323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (hash: JPj5bp3GSQ1Pdx4dEb6Z9JcF5JJVL7Z/lAfwZTtp78Q=)
4: 323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (hash: q0wR+Q2fRmj5Ry2tUqDaoeAUS0DsDC6Hanqo2HvQLOQ=)
5: 323830343a373462633a383030303a3a2f33332d3333203d3e20323731303030.roa (hash: KPh1DWjvfTKxyjDd66vw83fekeEGbI16UMHM6YxwImk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 07:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:40:f8:17:ce:6a:0c:c3:e2:7f:c1:07:3e:49:c4:79:64:06:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Validity
Not Before: Aug 23 05:22:06 2026 GMT
Not After : Aug 24 07:50:06 2026 GMT
Subject: CN=CE2C536885CDB66E3FE00DFAC516C9D267A53FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:38:04:f1:3a:1e:d8:04:f9:5b:f3:62:2b:
50:38:2f:6d:ab:e6:e8:df:0e:35:93:dd:ac:b4:ae:
f5:72:72:e4:69:15:ea:8e:83:11:c0:ac:38:32:a4:
fd:23:77:58:68:06:53:ee:f7:ed:85:49:bb:25:ff:
28:f6:03:7b:b8:40:ac:db:be:81:5d:b3:9c:ef:36:
35:ea:8b:8a:af:d3:db:b9:f8:39:57:5b:9b:b2:31:
6b:29:c5:96:1e:bc:cf:4b:69:6b:1f:7a:f1:0d:57:
98:73:f7:0d:e0:e6:6e:36:ad:14:85:2e:ca:ab:1e:
63:e1:bb:b2:3e:75:44:14:33:77:1f:ad:d7:89:b1:
39:4c:4a:28:6e:3c:22:d8:cd:bb:7b:ca:fe:f6:9c:
02:43:aa:0d:11:94:7e:d9:45:88:11:e6:28:3d:4f:
fd:9d:ce:6e:01:8a:2f:e8:8d:7f:92:fb:86:11:1f:
c2:9a:b5:70:40:3d:ac:ec:89:bb:07:1a:53:51:a4:
06:09:dd:37:c5:b5:ab:95:a9:4c:b8:a0:c7:05:65:
46:16:2b:31:6e:6a:9e:29:52:2e:62:ee:94:48:51:
34:55:cb:65:71:50:85:15:27:2b:52:37:31:06:55:
8b:59:88:7c:a6:e5:c1:f4:f7:71:b9:0b:49:6e:04:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:53:68:85:CD:B6:6E:3F:E0:0D:FA:C5:16:C9:D2:67:A5:3F:C9
X509v3 Authority Key Identifier:
keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2b:49:18:2c:61:5f:10:b3:d8:8e:25:72:fe:83:05:eb:65:
dd:f5:36:10:d6:1d:e8:68:b0:1a:25:c1:72:bc:a6:0c:46:54:
d6:c0:9d:3c:9c:39:bd:30:16:06:ec:5a:0e:37:c8:2e:a6:0b:
d5:13:c2:a2:e8:5f:a6:89:ee:91:25:43:00:3d:2d:04:3b:fe:
f3:10:0b:43:9c:d0:ab:b0:27:3e:6c:33:7c:2c:49:ba:a1:00:
01:e7:19:df:6f:06:67:42:67:e6:86:6f:7f:6f:fe:4f:e6:71:
64:b3:d7:ce:5a:17:e3:df:37:55:2c:fd:69:2d:50:fb:5a:80:
4e:98:fb:6e:16:52:c1:ee:8e:d2:92:60:dd:5d:68:4a:2c:26:
25:27:d0:a6:7c:4a:67:02:18:d3:a9:b5:07:88:2d:83:0b:dd:
1c:01:7e:0b:11:06:6d:8d:e1:ba:2b:cc:b5:c7:bd:08:9f:6f:
cb:60:26:9a:78:87:e1:1b:a7:17:8b:9a:f0:81:7b:54:8d:df:
8a:53:e0:d8:27:cf:db:70:68:fa:ba:b1:d5:2a:42:0a:31:9f:
33:b1:51:88:31:20:f3:90:27:58:77:36:8d:57:ab:ba:8e:cf:
eb:90:53:7e:44:c7:e4:ea:db:2b:fa:bb:10:ef:c3:50:53:ac:
32:43:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:22:48 2026 by rpki-client