
Error: rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
File: 39E9C8F360117C7F207DEE7951C1AD935707A727.mft (raw, json)
Hash identifier: Y27UmHMZRXRWh08DgYSzjXOakpHX68rK+TqwJXQtreY=
Subject key identifier: 24:D0:4A:21:F8:88:FA:64:13:F1:CF:D3:D8:78:91:80:33:DB:0A:2A
Authority key identifier: 39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
Certificate issuer: /CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Certificate serial: 157F8607D9C75DEF381C66DB6695D4717C630DFA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
Manifest number: 051F
Signing time: Sun 23 Aug 2026 04:10:00 +0000
Manifest this update: Sun 23 Aug 2026 04:05:00 +0000
Manifest next update: Mon 24 Aug 2026 04:10:00 +0000
Files and hashes: 1: 3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (hash: PI++vmQS7p1miOoGJAg7YPaGgKyS/QAmIFAV0GvxdIc=)
2: 3137372e38362e3132382e302f32322d3234203d3e20323632363330.roa (hash: tX6hzm8Y8+025gxrx5F/gMNIdSivmBvQ9DvXNi4RsS8=)
3: 39E9C8F360117C7F207DEE7951C1AD935707A727.crl (hash: ziwzc85hNq9jz66Pumw4gtvuZap47ZUFWPKFJHSzQzw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7f:86:07:d9:c7:5d:ef:38:1c:66:db:66:95:d4:71:7c:63:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Validity
Not Before: Aug 23 04:05:00 2026 GMT
Not After : Aug 24 04:10:00 2026 GMT
Subject: CN=3082010A0282010100DF4C13496F87CB33E5838D78EF304FDA9F4F064BEB1B0F14B0F0E65D161A63E6F464109DC6339384CEA6D8E0FAAE748868449FB027E9D2F8F8A84DA6B925C9DD282D2480DD3FFB4E5841ABCE357F2EF8C023A68BCA6248D50CB42380E85754988E38D6630C9B393D4BE5F438C75DFB9ECE76FCC7CA8934D03A6D00674CC4AAE1C0D9E0078585C0607886C86D7A820BCEA5EA478978076FA93831D0C157D93FCE4D01BCCB90964B7365EBE5713F09B155991A8BF291C21C674CE54152D993522EAFB06E80F6425A96B7204C61DA2131FA86ADC48D76854B67D449CAC9040269E613BFB15B02D24764CE723F448560DE236B380DD7D10249B2FD0E9F0015C5687D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:13:49:6f:87:cb:33:e5:83:8d:78:ef:30:
4f:da:9f:4f:06:4b:eb:1b:0f:14:b0:f0:e6:5d:16:
1a:63:e6:f4:64:10:9d:c6:33:93:84:ce:a6:d8:e0:
fa:ae:74:88:68:44:9f:b0:27:e9:d2:f8:f8:a8:4d:
a6:b9:25:c9:dd:28:2d:24:80:dd:3f:fb:4e:58:41:
ab:ce:35:7f:2e:f8:c0:23:a6:8b:ca:62:48:d5:0c:
b4:23:80:e8:57:54:98:8e:38:d6:63:0c:9b:39:3d:
4b:e5:f4:38:c7:5d:fb:9e:ce:76:fc:c7:ca:89:34:
d0:3a:6d:00:67:4c:c4:aa:e1:c0:d9:e0:07:85:85:
c0:60:78:86:c8:6d:7a:82:0b:ce:a5:ea:47:89:78:
07:6f:a9:38:31:d0:c1:57:d9:3f:ce:4d:01:bc:cb:
90:96:4b:73:65:eb:e5:71:3f:09:b1:55:99:1a:8b:
f2:91:c2:1c:67:4c:e5:41:52:d9:93:52:2e:af:b0:
6e:80:f6:42:5a:96:b7:20:4c:61:da:21:31:fa:86:
ad:c4:8d:76:85:4b:67:d4:49:ca:c9:04:02:69:e6:
13:bf:b1:5b:02:d2:47:64:ce:72:3f:44:85:60:de:
23:6b:38:0d:d7:d1:02:49:b2:fd:0e:9f:00:15:c5:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:4A:21:F8:88:FA:64:13:F1:CF:D3:D8:78:91:80:33:DB:0A:2A
X509v3 Authority Key Identifier:
keyid:39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:6c:e5:7d:41:7c:65:67:d9:4f:a7:51:7a:92:13:3a:0c:
92:ef:2e:3a:37:13:b0:df:15:a5:d3:ca:37:47:7d:c4:47:3e:
0c:8b:83:df:18:1e:df:95:bf:c0:17:49:16:65:68:94:67:42:
ab:cf:2c:1c:ea:bc:ac:08:50:9b:a6:a4:34:73:9f:cd:d8:06:
50:6e:66:7a:4a:dd:fa:ac:90:c6:31:72:fc:96:41:3a:a4:09:
9f:6e:23:27:1b:e5:f8:59:d9:1f:26:1e:e0:ba:65:71:62:1f:
38:17:07:eb:a0:74:8b:88:d3:21:ed:f6:3a:97:dc:3c:09:79:
33:6a:90:f7:2c:a4:40:0b:55:d6:86:0c:c9:4e:af:23:57:5d:
41:2d:0a:4a:8a:01:f4:4f:e7:e9:65:c7:20:9e:b4:c8:2f:d6:
5c:96:bd:f8:30:3f:29:3e:d7:5f:e2:7f:31:3e:14:58:d9:e9:
05:7c:45:5f:a6:06:48:f0:d2:a5:6a:3e:e5:2f:c1:18:42:cf:
d9:50:ca:3a:7f:21:97:3e:3b:08:d3:a4:a9:89:f2:00:41:37:
ab:fd:d1:57:16:60:ca:38:2d:7c:cb:95:47:a6:8c:ee:aa:4d:
6e:85:ac:d5:57:19:e4:be:d9:47:e9:22:fe:19:5f:2f:ac:8d:
6c:20:89:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 06:18:40 2026 by rpki-client