
Error: rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
File: 0B07367A81B15A220D69956D612B34AE5A9E594E.mft (raw, json)
Hash identifier: gp1mOt1zxZRY3jfPIKh/ldeTxGlzQTIVjm4Z0jIAs9k=
Subject key identifier: DD:4B:C5:2B:F3:9B:51:E2:41:8D:E1:FA:45:3D:0F:C4:64:3A:2A:4F
Authority key identifier: 0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E
Certificate issuer: /CN=0B07367A81B15A220D69956D612B34AE5A9E594E
Certificate serial: 02B6FC2C3EB360C9FA89B341592286466319C62E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
Manifest number: 0484
Signing time: Mon 24 Aug 2026 03:49:53 +0000
Manifest this update: Mon 24 Aug 2026 03:44:53 +0000
Manifest next update: Tue 25 Aug 2026 04:54:53 +0000
Files and hashes: 1: 323830343a326662303a3a2f33322d3438203d3e20323634393036.roa (hash: PPoHrciuNKj8bZr/BZBR0qeQqoXngxr/RWUumb157TA=)
2: 3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa (hash: 5Qo+rZtqBKkbE1/hFOxkgyiMQLy7gpguM+WGUAs3yCg=)
3: 0B07367A81B15A220D69956D612B34AE5A9E594E.crl (hash: 8Sy97vc8auUQK4Sk04BfW/M4078sS4SUtynZV7fjfKw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl
rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 04:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b6:fc:2c:3e:b3:60:c9:fa:89:b3:41:59:22:86:46:63:19:c6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B07367A81B15A220D69956D612B34AE5A9E594E
Validity
Not Before: Aug 24 03:44:53 2026 GMT
Not After : Aug 25 04:54:53 2026 GMT
Subject: CN=DD4BC52BF39B51E2418DE1FA453D0FC4643A2A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:a4:a9:b3:f4:6e:58:56:84:84:3d:29:36:
03:88:1f:d7:4a:9a:ba:3e:2f:9f:60:0f:e2:b5:bf:
90:62:98:2a:12:39:67:af:69:f9:8f:6b:e7:69:29:
69:60:c4:82:8f:d0:02:c1:2b:04:d5:01:61:ba:61:
c4:e0:76:da:c2:f4:91:c3:3a:c2:3f:06:e4:22:a4:
50:ff:8b:77:72:e1:1b:af:12:32:67:35:5e:ae:95:
03:6f:9b:d4:df:48:f0:46:0b:e1:2c:eb:d3:58:74:
04:bf:46:cd:f1:86:da:59:1a:ad:bc:dd:60:76:ce:
5f:f2:46:99:65:24:0c:e1:f6:cb:7b:67:d7:d0:7a:
10:f3:63:4c:78:db:99:bd:f5:c6:f9:06:92:3b:d1:
2d:17:a8:77:24:8d:af:b9:c2:f3:72:40:ff:90:e7:
d0:32:83:58:f8:51:91:c9:7a:63:56:48:ee:09:b0:
ce:4d:ea:74:2b:7a:28:35:13:6d:0b:d3:97:96:80:
79:1a:94:46:a6:e3:a1:03:14:5c:c7:8f:c0:4a:dc:
5e:25:d5:63:52:2b:8e:84:79:03:37:01:2a:fb:0b:
97:f4:28:c4:f5:e8:a8:a8:83:dd:2a:68:ca:7d:cb:
c3:e5:42:26:df:39:f4:b6:b3:b6:e4:74:d6:b8:56:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4B:C5:2B:F3:9B:51:E2:41:8D:E1:FA:45:3D:0F:C4:64:3A:2A:4F
X509v3 Authority Key Identifier:
keyid:0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ed:24:3f:55:86:37:87:46:81:9a:d8:79:e8:21:dd:f8:ee:
54:c3:20:f5:68:94:bb:37:70:e1:da:c8:f4:ee:1c:73:0e:a3:
fa:da:03:e0:d9:7c:67:29:3b:65:ae:59:f0:08:05:f5:82:b3:
88:2c:14:8f:75:2c:18:8f:7d:be:fe:f5:dc:01:03:90:b8:58:
38:e8:3e:41:f5:2b:1d:e8:92:f7:7f:56:db:ba:f4:67:6a:c8:
0c:60:20:d1:df:ac:65:78:5c:c7:40:be:1d:d8:27:38:bf:93:
0a:38:46:b2:ee:a6:ea:eb:17:4d:a7:eb:71:dc:f5:8b:7c:f8:
8b:f1:9c:7f:02:09:65:b8:12:81:ab:f0:9b:08:4b:41:a0:ac:
20:02:59:dc:09:71:df:72:3d:78:fa:ac:3d:71:c7:82:4b:0d:
23:76:dd:8e:84:ed:50:90:79:97:e1:6b:b4:c2:76:ea:57:f6:
c2:18:82:87:83:b4:f3:55:bf:8d:40:11:88:dc:f6:2e:72:36:
64:9f:e8:4d:b3:cb:1b:e8:17:21:71:a5:fd:2c:d8:48:36:27:
00:88:8c:76:8e:23:36:02:07:b1:d2:da:e1:20:e6:3c:95:d6:
a7:6c:f5:d4:53:91:da:17:88:84:cf:37:c9:17:f4:65:86:49:
db:d2:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:28:30 2026 by rpki-client