
Error: rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json)
Hash identifier: UL69RPz8LlOVC5G3bWKYKdh/2B0cpJmDWe0XlVRdwOw=
Subject key identifier: 12:92:D6:31:5A:23:FE:33:90:5D:02:F8:C1:2D:3D:A3:B8:C4:AC:CC
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial: 504C702035283429AB656177DD7D831B86769DF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
Manifest number: 048C
Signing time: Sat 22 Aug 2026 19:31:31 +0000
Manifest this update: Sat 22 Aug 2026 19:26:31 +0000
Manifest next update: Sun 23 Aug 2026 19:34:31 +0000
Files and hashes: 1: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: Rz4oEJOP6UvkBFjPK3ZuyT7m869P08DDJ4ho0q7tOSo=)
2: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: ByqCRffdpAcanx/bARoA+SLmhp2YvKTovdaZPnfDEu8=)
3: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 1jiPLN7k23pfp303XMfvHpUfO1fnwC1H4dxKN6JZTRI=)
4: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: ashwnlAibbNwSgP5vRGNo5jGaiBT/0Chbnd873TTeT4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 19:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4c:70:20:35:28:34:29:ab:65:61:77:dd:7d:83:1b:86:76:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Validity
Not Before: Aug 22 19:26:31 2026 GMT
Not After : Aug 23 19:34:31 2026 GMT
Subject: CN=1292D6315A23FE33905D02F8C12D3DA3B8C4ACCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:8d:70:e3:ec:00:df:50:83:eb:10:92:19:
3a:e5:51:ea:0d:43:1f:be:01:46:ea:9d:9f:f2:86:
ce:82:96:59:c6:b1:37:8a:ee:22:6e:52:47:bf:09:
82:c8:ea:95:90:78:a0:39:ee:06:d1:b3:3b:e5:c4:
4a:bd:f0:33:1d:32:de:8a:b3:61:1d:c4:ca:45:36:
df:7d:1d:25:c5:3b:25:9f:b9:5e:35:25:5d:c2:16:
80:6e:31:16:1c:fc:2b:f1:41:52:8e:d1:4a:66:9a:
08:8c:ce:08:31:e4:ec:c9:6d:36:a3:a6:90:58:34:
aa:67:0c:48:ad:bd:6a:09:16:87:2f:87:fe:27:1d:
bc:45:81:b5:e5:0b:1f:24:a3:50:21:62:d2:cc:bf:
2b:ad:a9:71:eb:b6:ed:6e:a8:81:a4:00:a7:29:ce:
36:98:11:ad:e8:69:e7:90:4a:06:9d:57:39:f0:f7:
a1:45:80:a3:b7:bb:e2:5b:8e:44:48:a8:5c:5c:95:
18:4e:49:f9:d0:a7:8d:fb:44:2c:cb:fd:5e:d5:ba:
83:cf:01:6e:97:df:6e:35:f5:6e:27:dd:f5:8e:4c:
58:21:40:c6:62:2d:99:51:2d:20:2e:39:a5:c4:e3:
2b:a6:69:a0:c5:27:ad:91:b1:a8:e1:91:33:07:c5:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:D6:31:5A:23:FE:33:90:5D:02:F8:C1:2D:3D:A3:B8:C4:AC:CC
X509v3 Authority Key Identifier:
keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:3d:c5:0d:bf:68:55:71:02:93:14:ac:bc:44:f1:db:ba:
bd:0c:e0:42:23:05:1f:c2:73:17:68:58:14:3f:9f:ec:03:e7:
81:e0:4c:fe:74:97:af:1f:66:8c:90:57:b5:6f:0c:41:e1:73:
32:65:46:b2:9a:84:e1:ef:51:9e:e4:e7:a4:5a:41:47:65:bf:
1e:e3:dc:5b:e3:15:72:4d:33:8a:83:4c:5d:ff:89:6e:73:86:
43:03:5a:fe:52:34:d5:ee:e9:64:61:9e:ad:9b:0a:ac:69:96:
34:5e:5f:dd:1f:58:d4:6b:25:2d:c8:fd:cd:a8:d4:ec:96:2e:
56:16:57:42:2d:e6:a0:20:fc:73:43:7f:ca:78:ad:11:ea:9d:
3f:72:4c:bf:1a:6f:ab:8c:a3:d5:08:e2:4c:b6:22:45:db:3a:
06:b9:7f:6b:5c:06:11:3b:d9:ad:05:51:89:6a:18:dc:be:f6:
44:a7:5a:b8:95:12:38:cb:93:ae:d5:a2:97:50:bd:a2:d9:86:
fe:5b:8b:09:fe:c1:11:af:12:b5:6f:d6:a2:40:d0:26:8f:ca:
8e:01:20:1f:24:0d:a8:65:b0:c3:67:ba:88:96:ad:b8:e3:3f:
94:28:bc:e9:5b:de:48:42:a2:2b:b2:4e:e0:ab:8d:d9:3b:4d:
c6:e4:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:04:08 2026 by rpki-client