
Error: rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
File: 6837437B682D69085C3574DE4EE122A490D3C359.mft (raw, json)
Hash identifier: iHCOxxI4beIjMtsKlGVTJmw5LqXlbDxroKETLoud9Cc=
Subject key identifier: E0:C4:D9:7D:C2:07:39:CD:8F:37:C7:27:9A:CE:AC:30:D9:E7:D1:0C
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Certificate issuer: /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial: 1AA2771EB873D27906BF3D1AED69F8D91EACA139
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
Manifest number: 0522
Signing time: Sun 23 Aug 2026 23:20:01 +0000
Manifest this update: Sun 23 Aug 2026 23:15:01 +0000
Manifest next update: Mon 24 Aug 2026 23:20:01 +0000
Files and hashes: 1: 3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa (hash: 9i+WRFs4Z39t6CbqCm0KFmdbS4RZqrz8qFhCqkKvfWA=)
2: 323830343a323762383a3a2f33322d3335203d3e20323633393138.roa (hash: aKpjvI4JQVBSX6jRRoRuJloYl9KpvVO6lj0YjZLhzxc=)
3: 3137372e35332e36382e302f32322d3234203d3e20323633393138.roa (hash: YiTeKR3tr4poLevYoONudWDuLA+rdwpA8rhncZn8MQU=)
4: 3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa (hash: S5Qk3UmH8CD1wHojOwhuPzerv5qN9tNIEyNepf/5D+4=)
5: 6837437B682D69085C3574DE4EE122A490D3C359.crl (hash: QzCwGOhNYsaRySI4lGdRkJrF9mBzwalCkZiBhqxZtmA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 23:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a2:77:1e:b8:73:d2:79:06:bf:3d:1a:ed:69:f8:d9:1e:ac:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
Validity
Not Before: Aug 23 23:15:01 2026 GMT
Not After : Aug 24 23:20:01 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:1a:b9:af:d8:81:62:f6:3d:70:23:ca:7b:
04:36:10:c4:90:5b:19:c2:51:c4:a9:43:9e:ae:41:
f1:05:44:08:50:28:94:28:46:c3:8e:1d:ff:09:d9:
57:65:c8:94:3c:68:77:6a:56:fa:90:24:f8:10:08:
2d:df:cc:d1:a3:5b:38:4e:fd:9b:c3:09:ed:12:f1:
97:6e:ae:1d:d0:43:40:13:b3:50:8b:c2:30:34:86:
ea:ee:83:7c:1b:7c:23:43:f9:e7:74:40:93:ef:e8:
75:1b:5d:be:1b:c8:1d:7d:d7:0f:5b:b7:03:79:aa:
55:61:ea:98:f8:1b:67:cb:e8:1a:a0:62:a3:5b:06:
97:77:b0:fa:10:fa:2d:73:59:d4:24:32:65:70:6e:
eb:12:5d:4c:02:a6:46:ca:7f:b0:3b:d0:ff:20:a0:
36:55:5b:f1:36:61:a6:9b:ce:56:f6:bd:70:a7:c0:
ce:6b:16:52:e3:2c:a8:dd:b0:6d:ba:f8:f2:c0:fe:
ab:fd:02:97:44:c6:7e:04:a2:da:06:1d:0c:ed:fe:
ee:76:45:9d:51:03:e4:76:9a:e8:9e:50:f1:5f:aa:
72:be:0c:4d:59:47:88:55:6a:ef:79:59:8f:78:68:
ca:d2:bd:22:bd:9d:5f:48:21:1a:6f:4c:73:7b:81:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:D9:7D:C2:07:39:CD:8F:37:C7:27:9A:CE:AC:30:D9:E7:D1:0C
X509v3 Authority Key Identifier:
keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:74:43:ac:ad:47:dd:e1:78:b6:51:36:19:60:8b:c7:07:2c:
05:8b:54:8c:f5:96:b6:23:7a:f0:25:75:a0:aa:c0:32:85:67:
a4:fc:e7:ff:e9:51:ce:97:5f:bf:2c:27:fd:b0:0c:d0:56:31:
a0:66:64:d2:1d:2e:a3:45:59:98:c5:35:11:09:a5:24:e7:07:
45:41:af:4a:a4:02:ce:57:c2:25:ce:ec:82:cb:c2:62:84:05:
5d:51:67:ee:b6:61:c3:23:59:1f:5c:e7:8d:6f:5f:36:6d:b7:
44:73:09:a1:06:0c:be:24:c3:aa:6c:12:2d:01:da:ba:eb:32:
ed:ea:7a:22:72:de:45:3a:3c:25:fe:70:b4:d6:88:3a:e9:14:
ca:5a:17:f6:05:07:ae:bf:2c:93:22:52:45:7a:51:02:f2:4c:
a0:b2:52:cd:58:00:57:23:c2:6f:8f:91:b3:90:eb:d4:94:f0:
35:34:b9:d3:19:43:69:38:85:a8:38:93:72:6a:e2:10:81:b3:
1e:cd:03:f0:e7:16:83:be:32:e4:9a:86:c2:14:0f:47:1d:58:
0e:5f:4b:a9:e0:25:59:a5:8a:40:6f:2a:8f:87:59:48:9d:f1:
1e:6c:b6:46:f0:0a:f7:47:04:28:72:f1:76:56:6c:93:ee:62:
a3:bd:32:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:16:21 2026 by rpki-client