
Error: rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
File: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft (raw, json)
Hash identifier: dzidJCzh8LzoWG1q4C67pp9cGtv8VHaC9lIIGFzLago=
Subject key identifier: 42:74:FB:C7:D1:16:C2:42:84:7D:6B:3B:8C:D7:82:16:BC:6D:2B:6A
Authority key identifier: AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E
Certificate issuer: /CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E
Certificate serial: 0DBF074572C7636D9CB26C6DE9F3723217E38BDF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
Manifest number: 0286
Signing time: Mon 24 Aug 2026 08:36:16 +0000
Manifest this update: Mon 24 Aug 2026 08:31:16 +0000
Manifest next update: Tue 25 Aug 2026 09:43:16 +0000
Files and hashes: 1: 323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (hash: 8SOQpY3R15+0dcEBXwHtsQKsvPqU+XKQNl1fli1w8pQ=)
2: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (hash: C9vupcU4vZ3mjiR7U7t83g03wrnH6z1BizDieSfk+zY=)
3: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl (hash: 3y7hgEEc4Q/Q/vcnv7bFwbA3cJku5toTi8Z1AQNyJFE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl
rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 09:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bf:07:45:72:c7:63:6d:9c:b2:6c:6d:e9:f3:72:32:17:e3:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E
Validity
Not Before: Aug 24 08:31:16 2026 GMT
Not After : Aug 25 09:43:16 2026 GMT
Subject: CN=4274FBC7D116C242847D6B3B8CD78216BC6D2B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:4d:78:c8:a9:3a:37:8b:dc:80:1b:4e:da:
b5:6d:66:22:0a:26:ba:e9:d6:20:a1:6e:7b:4d:f9:
cd:da:2f:7d:c5:d7:7d:02:ac:ac:5f:9c:d4:9d:12:
73:dd:85:35:c7:00:ac:0f:36:0b:49:03:40:33:c5:
bb:eb:6d:77:40:85:de:f3:7a:5d:a6:ca:6b:5d:9b:
c6:14:8d:b0:b3:ef:8e:b6:9c:59:01:04:7f:54:7a:
56:03:a6:6d:d3:5a:0e:70:e5:2b:f0:c2:c0:db:dd:
67:e9:2b:4e:7b:e9:2c:76:0e:55:4d:fa:55:f8:64:
14:74:4d:17:2c:7e:d4:40:0b:0e:d8:17:49:a9:39:
3a:80:16:cd:91:81:f6:fe:c6:e0:5c:22:07:c3:da:
29:8a:72:01:49:fd:ca:ee:0e:89:e7:e4:31:97:3b:
c5:52:43:a6:b4:dd:a2:76:03:6e:7e:07:79:0d:fd:
13:71:ea:20:09:25:8e:56:ec:c4:fa:aa:7d:c1:1d:
41:5e:e0:8f:11:0a:6c:06:47:08:ae:f1:e0:86:a8:
c1:33:36:0b:6c:f9:e0:69:01:ca:d4:1e:bd:91:c6:
e5:4b:0e:e2:90:67:52:e8:99:d6:f5:a4:e6:f3:78:
8a:67:d9:dd:1a:be:a5:00:22:b4:80:62:29:1d:56:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:FB:C7:D1:16:C2:42:84:7D:6B:3B:8C:D7:82:16:BC:6D:2B:6A
X509v3 Authority Key Identifier:
keyid:AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:dc:b2:4e:ce:03:46:67:23:e9:e3:b2:2a:6a:3f:cd:10:
a4:ed:fa:9a:83:a7:cc:60:94:8e:74:15:d4:e8:ab:0c:b4:49:
d7:88:33:d1:16:10:b0:f9:f6:d2:ae:83:00:d0:e2:83:12:33:
6c:72:56:c4:73:b1:6d:cf:5b:c1:1c:7f:39:45:34:6f:f0:17:
3c:a0:01:ba:2f:7a:6c:be:a6:fd:23:53:5a:6c:36:88:98:f5:
9d:68:d3:04:57:d9:42:82:dd:fa:9d:fb:71:fe:b8:82:d6:01:
68:00:35:db:e9:17:07:b0:c5:d7:83:7b:b6:75:04:14:a5:1a:
84:e1:47:40:7e:74:b4:e2:c3:d2:70:ef:b3:ac:68:95:63:83:
65:43:8e:13:ef:a4:24:f5:48:14:4a:a0:48:e2:43:41:55:3e:
4b:3b:c8:d4:44:a2:a2:84:e9:ae:1d:bf:7b:1a:a8:61:b5:ae:
e9:bc:34:e4:eb:2e:65:a2:e5:52:72:6d:0a:e9:25:6a:bb:2d:
17:ff:c4:4a:63:0a:f1:b1:f3:de:78:ce:7b:f6:21:91:7b:32:
05:8a:c9:7e:c2:dc:d0:8a:58:3d:e3:4c:dd:87:f5:3c:7f:a4:
a6:b9:cb:df:74:34:d6:77:6a:ac:b8:dd:ec:9d:32:1b:4c:64:
6a:6c:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 19:43:07 2026 by rpki-client