
Error: rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json)
Hash identifier: Z4Kfbg4DGBtZWHlKJmVr0TDrX05nhB/dJu04JIFinx4=
Subject key identifier: E2:62:6E:F6:F2:E1:00:F3:07:E4:40:66:66:65:02:53:0E:09:A5:A6
Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Certificate serial: 1B506045FEC25D1796C0461B1FF3752E81DB2B65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
Manifest number: 048D
Signing time: Tue 25 Aug 2026 06:49:55 +0000
Manifest this update: Tue 25 Aug 2026 06:44:55 +0000
Manifest next update: Wed 26 Aug 2026 09:28:55 +0000
Files and hashes: 1: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: hbL6oixnIdBITCKBifkh9LpzmAhOha/aSh7WHPIZEpA=)
2: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: infniEWP3j17myDo6uSPhVMIMf9cY06lNVvSV//w480=)
3: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: +m9YWZk3TMhLiqol4NpnwKiR2A38eOMIKyxmbrjEwwU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 09:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:50:60:45:fe:c2:5d:17:96:c0:46:1b:1f:f3:75:2e:81:db:2b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41
Validity
Not Before: Aug 25 06:44:55 2026 GMT
Not After : Aug 26 09:28:55 2026 GMT
Subject: CN=E2626EF6F2E100F307E44066666502530E09A5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:8c:f7:63:55:1b:8a:b7:a7:49:b4:19:d4:
fe:50:91:54:de:7d:42:45:d1:0b:96:6e:05:f6:48:
9b:f4:d7:98:37:bd:09:fb:94:f8:ba:ca:3a:1a:69:
0c:fd:90:c7:8d:d7:30:50:43:78:be:d2:f4:3b:7a:
9a:e8:f7:32:43:29:4a:26:c8:7c:01:28:4a:8b:01:
b4:3b:aa:84:d9:03:69:39:d5:d9:12:ea:e3:a8:a0:
ac:d0:6c:28:74:b2:9f:10:e1:6d:74:6c:65:45:e5:
3e:a3:98:bc:ae:25:cf:83:f3:16:d6:13:79:7b:e4:
75:2f:69:25:4f:99:b5:41:be:b2:6c:3a:06:a9:a7:
df:1d:65:dd:1f:d7:0f:81:37:d5:23:23:39:3d:04:
44:57:00:c7:d5:7e:1e:12:8a:7c:5f:fe:cf:09:59:
62:91:36:7e:b7:54:e2:c3:b6:0a:bf:10:52:67:ce:
a4:9b:52:19:72:3d:0a:f3:f0:41:66:fe:34:3a:2b:
3b:74:a3:9b:a2:12:a5:62:55:33:ab:af:2c:85:7f:
1b:b2:ee:51:63:96:22:fd:85:3c:20:7c:a5:4c:7f:
87:d0:c8:da:5f:c9:c7:84:4a:18:e6:91:fc:4d:4a:
a2:6b:aa:26:eb:96:83:49:e8:bc:5a:89:fb:f3:03:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:6E:F6:F2:E1:00:F3:07:E4:40:66:66:65:02:53:0E:09:A5:A6
X509v3 Authority Key Identifier:
keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f0:11:e7:ca:a2:16:79:bc:05:b9:c8:86:16:08:9c:a0:d2:
96:a8:eb:0b:ba:b0:ef:58:16:50:d3:f7:dc:cd:f7:c9:2e:f6:
af:27:68:51:7d:b2:e5:8d:cd:6b:8f:19:56:49:cf:f0:0d:42:
44:97:8e:2a:ee:fe:9a:d7:ff:68:8c:d4:c5:3c:4e:8a:d0:48:
a4:7f:75:ac:ab:f7:d5:b1:ad:9d:0c:3f:be:c1:ce:86:b7:fb:
76:ab:e4:66:c9:39:a6:a0:87:8a:0c:a4:37:00:26:5b:cf:05:
97:72:9a:6e:d4:25:52:4e:c9:91:11:3a:ea:98:4d:4f:35:06:
2a:0f:d4:de:00:8b:c5:05:16:86:e1:60:f9:72:32:45:61:d6:
01:98:b0:80:b1:df:42:6a:c7:2b:5f:f3:65:e4:0f:00:66:9d:
95:7d:b4:05:77:48:da:33:62:85:a4:c4:56:06:56:06:bf:44:
a2:27:1d:e2:95:c3:c3:29:65:3f:a5:29:fc:87:a9:14:63:f5:
df:c9:75:3b:d0:ad:62:1e:cb:de:9f:b9:ff:4d:a8:48:a6:47:
18:f8:27:62:02:5e:79:61:6c:8e:80:88:f3:4d:27:78:f0:56:
18:f3:a5:1e:65:d7:55:68:24:2c:b7:59:c5:77:69:c8:3d:02:
e5:c7:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 14:59:28 2026 by rpki-client