
Error: rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
File: 3E3635534C5268C5F8F31D910454018D21BBA954.mft (raw, json)
Hash identifier: bi2pHmSrmUmjEqwsw/dTdO2IVCXhMODne1Z7XX5j/mc=
Subject key identifier: 0E:EE:B7:02:BD:62:04:D0:17:F5:71:75:4E:4D:A1:84:30:40:20:F8
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Certificate issuer: /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial: 02000EDF9334F80FA05D4116C75EF8105F558852
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
Manifest number: 0521
Signing time: Mon 24 Aug 2026 12:20:00 +0000
Manifest this update: Mon 24 Aug 2026 12:15:00 +0000
Manifest next update: Tue 25 Aug 2026 12:20:00 +0000
Files and hashes: 1: 3E3635534C5268C5F8F31D910454018D21BBA954.crl (hash: PVOwyyhC/i7CKnXuipN1BEgyCCad12rwi+4UQGQGj80=)
2: 323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (hash: jZxhJTQqmwny21y8m5P5/HKateUCwxPl8xRM7krjfJ0=)
3: 3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (hash: RoQfLojjxs4Go9NvVNqCM4tyg/i/cKgZvazNzDuKazE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 12:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:00:0e:df:93:34:f8:0f:a0:5d:41:16:c7:5e:f8:10:5f:55:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
Validity
Not Before: Aug 24 12:15:00 2026 GMT
Not After : Aug 25 12:20:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:67:24:5a:56:56:09:e8:4e:77:ad:a0:64:
9b:97:b5:52:10:a1:10:ee:3b:5a:f6:36:2d:fc:4e:
07:15:07:75:ff:c9:07:3f:44:a7:76:53:d5:eb:5c:
fe:33:0d:2d:7a:1a:eb:e5:d8:c7:c1:fd:ee:eb:8e:
12:fa:98:c6:73:cf:7d:86:0e:ae:d8:ce:39:6d:ff:
ee:35:14:63:8d:98:4b:0a:79:51:d9:31:7e:3e:56:
3c:fb:e6:d5:1a:19:f5:82:17:9f:5c:5a:36:84:b6:
e1:4b:e2:35:85:c3:9b:d8:48:e6:04:91:53:7f:ac:
4e:b5:32:40:ca:b4:e4:ef:fa:44:06:b9:a1:46:f7:
e6:4e:48:5c:ba:11:a7:55:49:96:9c:27:47:de:2f:
10:1d:4f:85:5a:7b:e6:09:86:b1:2e:86:26:b5:34:
48:84:2a:8b:59:36:89:8f:28:91:4e:b9:c2:b9:f4:
d0:69:42:6b:ad:e1:c9:06:e5:cc:ee:6a:25:c2:b7:
7b:c2:ed:dc:b1:ac:a1:ec:cf:f6:a6:38:15:43:60:
d2:03:cb:ce:c9:c8:23:f1:db:c2:b1:b8:33:75:29:
f8:f3:32:1f:90:d4:76:d1:93:7f:09:4c:a8:9d:e8:
05:dd:f5:94:ef:d2:2a:69:88:0c:54:a9:99:a1:31:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:B7:02:BD:62:04:D0:17:F5:71:75:4E:4D:A1:84:30:40:20:F8
X509v3 Authority Key Identifier:
keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:76:84:f6:9c:5e:a0:3d:09:51:75:a7:5c:af:45:3f:bb:
aa:31:16:ce:d9:fa:f2:f1:33:2e:04:98:39:f3:58:ed:e3:63:
b4:c8:01:d1:e0:14:bf:c8:b3:ce:84:d9:20:40:e2:5a:3b:a7:
9e:10:49:cd:94:de:48:e6:3c:aa:1c:83:29:06:8f:33:b3:b6:
d6:e4:4e:af:7f:18:31:79:cc:54:9e:c4:3d:cb:bb:79:3d:cc:
b3:7a:61:db:bc:d3:f6:9f:bb:2c:08:85:9b:0b:b1:fd:4d:48:
41:a1:30:2f:ee:10:1a:0a:c2:35:2e:b0:05:e6:1e:b4:14:96:
e4:88:2c:09:23:2e:0d:c0:d9:bd:2f:00:ec:05:08:2c:87:19:
77:92:56:82:ff:6b:0c:24:b8:fe:9c:4e:ab:8f:a4:e9:78:fe:
b9:a9:86:7c:1e:3f:29:17:f1:7b:51:28:e4:82:3b:ab:04:32:
bd:29:94:8d:cc:cc:08:57:2a:eb:b3:1d:bc:90:5b:a8:25:54:
23:3c:01:10:0b:35:aa:ff:54:ba:91:f6:79:42:8f:3f:59:5b:
13:71:d3:cb:d5:61:77:79:e4:09:c1:ad:2b:dd:e4:29:ef:02:
74:74:8b:4e:cc:bc:2c:00:ab:a6:37:66:25:6b:7d:66:9f:9b:
84:a0:2d:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 23:53:58 2026 by rpki-client