
Error: rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
File: 13275A4411181B2568BCBC027250E0796CE06A13.mft (raw, json)
Hash identifier: o4FjP/eA5LmIkPLQY65tApjOZgg5eSpUJ5775zP6Ihc=
Subject key identifier: 64:D1:5F:88:BB:05:E6:9A:C8:86:17:C5:49:67:2E:88:65:9B:98:21
Authority key identifier: 13:27:5A:44:11:18:1B:25:68:BC:BC:02:72:50:E0:79:6C:E0:6A:13
Certificate issuer: /CN=13275A4411181B2568BCBC027250E0796CE06A13
Certificate serial: 347352545FD5E8E4408B985D897A00FA3B0B2D17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
Manifest number: 52
Signing time: Sun 23 Aug 2026 13:28:06 +0000
Manifest this update: Sun 23 Aug 2026 13:23:06 +0000
Manifest next update: Mon 24 Aug 2026 15:42:06 +0000
Files and hashes: 1: 34352e3232352e3134342e302f32322d3234203d3e20323636393434.roa (hash: Q35EDnNipeITEG+6oAF/4v7blQXAa03W0rsXBhn/tWY=)
2: 323830343a343562343a383030303a3a2f33332d313238203d3e20323636393434.roa (hash: IhIBy4qP7NJKtXU6MV7xH5QhuRWs44dvR71Bbh0uusA=)
3: 13275A4411181B2568BCBC027250E0796CE06A13.crl (hash: tveKBNPveMcuTyIru1lTel/TtlhuVsCfliJF1EFQtiM=)
4: 323830343a343562343a3a2f33322d313238203d3e20323636393434.roa (hash: EVIbKr8ET/3p8/rBWWWoytCuGcV4E7D1Tj9PIJ+C1QU=)
5: 323830343a343562343a3a2f33332d313238203d3e20323636393434.roa (hash: cMtqVjJXSK8l7hhfCtljKWdtN+RVEzMYHuHB1jrGKQ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl
rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:73:52:54:5f:d5:e8:e4:40:8b:98:5d:89:7a:00:fa:3b:0b:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13275A4411181B2568BCBC027250E0796CE06A13
Validity
Not Before: Aug 23 13:23:06 2026 GMT
Not After : Aug 24 15:42:06 2026 GMT
Subject: CN=64D15F88BB05E69AC88617C549672E88659B9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:ff:3a:13:74:ff:3d:1c:56:ae:f2:8e:d2:
c5:61:d3:43:7d:98:29:de:ee:ea:02:2c:31:27:95:
48:4f:63:81:c3:0d:06:8e:e1:9b:29:e0:30:6f:74:
85:af:e4:9b:ed:77:5e:40:64:d2:93:a9:f5:b4:99:
3c:6f:83:a6:97:27:23:7a:01:1b:90:b6:3d:6a:28:
ce:df:03:9c:4f:fd:4d:3a:4e:44:76:67:28:d2:ff:
35:e6:2a:42:23:2f:ae:ca:24:d5:78:90:fc:26:ce:
c4:55:95:de:46:c5:81:22:8b:ab:c8:99:bc:82:cb:
49:2c:0d:8f:cb:f7:e3:db:4b:f1:52:39:83:39:b7:
0e:8b:b3:70:ed:e2:30:7b:99:49:60:f9:24:e7:6c:
bb:24:37:3d:c5:c3:ed:fa:34:82:08:d1:c2:9a:73:
39:39:78:f5:71:23:f1:c4:c8:f5:8e:4b:31:b0:9f:
80:de:f3:56:12:da:78:15:80:70:5b:e0:b9:f0:e8:
a5:ef:c0:d8:17:6d:24:27:ce:d8:b9:0c:96:2b:54:
6e:98:3f:19:ff:79:87:1c:41:03:61:a7:cf:3f:f6:
75:ce:0f:7a:e3:34:d3:fd:d8:1b:f0:cc:b4:1f:6d:
ff:f0:a0:a4:78:ac:08:86:34:45:92:ff:eb:b5:19:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:5F:88:BB:05:E6:9A:C8:86:17:C5:49:67:2E:88:65:9B:98:21
X509v3 Authority Key Identifier:
keyid:13:27:5A:44:11:18:1B:25:68:BC:BC:02:72:50:E0:79:6C:E0:6A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13275A4411181B2568BCBC027250E0796CE06A13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gsGh9gfZTtJ73vfZYyxxxATPws1AkpDSodR1vmxWLJh/0/13275A4411181B2568BCBC027250E0796CE06A13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:b4:b5:d7:b5:b6:86:99:51:54:df:0f:3d:b8:60:f1:68:
1b:68:8d:ca:8d:dc:e4:6f:43:41:60:05:38:d2:d1:59:6c:44:
7f:4e:d1:6f:64:eb:4b:a7:5a:ba:de:53:65:3e:53:42:79:f6:
b8:b1:36:ba:82:ed:35:0a:ab:35:10:6d:4f:37:92:04:93:0a:
e7:43:5c:ab:64:c4:3a:aa:b7:96:bc:5d:2b:e8:6f:fe:f1:30:
42:b4:47:f0:c7:d9:6e:83:3c:55:b0:4d:f1:fc:96:f8:00:1b:
50:6a:53:d0:6f:06:e3:05:7f:98:69:26:66:9f:90:ac:44:1e:
30:19:fd:cf:1c:34:44:b3:4c:ad:bb:3e:dd:39:0a:27:33:28:
cf:c7:1d:d3:79:8c:3e:39:84:b1:af:4f:02:77:5f:87:de:2e:
c4:a7:16:89:f9:29:df:91:49:d4:c2:52:6a:38:a7:80:14:1b:
4a:f1:57:ac:9f:d2:ee:3f:f4:27:fd:44:12:09:a4:12:20:67:
62:4b:11:b8:41:74:30:00:82:7b:8f:69:80:53:10:47:d9:29:
04:03:4c:74:5f:69:9c:00:d9:6d:e4:a6:9f:24:d1:cc:df:00:
cf:bc:b7:fe:c3:3b:07:b4:39:62:53:1f:5f:56:d2:2e:5c:57:
94:11:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:19:37 2026 by rpki-client