
Error: rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
File: 650CDA051146F7753756149BDB6B92197765D95E.mft (raw, json)
Hash identifier: 7nGWLNYzygISidK8CPYd5Q4gZ0n2x6g+ekw9sD+kF9Q=
Subject key identifier: C0:96:0D:D6:0C:57:B5:82:BF:3E:E7:5F:65:56:07:09:B3:B7:03:71
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Certificate issuer: /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial: 3082B213470F1190C74EA949BE0E8956C9920B56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
Manifest number: 048B
Signing time: Mon 24 Aug 2026 21:40:00 +0000
Manifest this update: Mon 24 Aug 2026 21:35:00 +0000
Manifest next update: Wed 26 Aug 2026 01:01:00 +0000
Files and hashes: 1: 323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (hash: AN25yo3eXMHV1W8PhjsweFfiym7xl37gbOtqoXKPI/o=)
2: 3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (hash: I/xnq0bsZM2KCqDQuEwyR/TUNXt4kaaRIw7Q1uq0nSQ=)
3: 650CDA051146F7753756149BDB6B92197765D95E.crl (hash: GreT5l/Flz37qrSWXESCczJOteeCi2gA5gGpii6mKRI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:82:b2:13:47:0f:11:90:c7:4e:a9:49:be:0e:89:56:c9:92:0b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
Validity
Not Before: Aug 24 21:35:00 2026 GMT
Not After : Aug 26 01:01:00 2026 GMT
Subject: CN=C0960DD60C57B582BF3EE75F65560709B3B70371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:da:c3:99:c7:9d:50:57:fa:7c:4b:b6:ff:
c5:3e:04:6f:63:50:b2:1f:55:c7:96:7a:af:67:ca:
49:62:44:79:6f:bd:6d:79:d5:ce:5f:08:f8:79:b8:
c1:62:cd:8c:ea:ec:b3:b3:19:56:e6:3d:89:67:05:
7d:16:f8:72:2e:9c:3c:4a:ec:aa:e4:f9:24:f1:1e:
4c:1b:9a:54:9f:fb:01:f6:a2:e3:da:e0:89:99:53:
35:75:67:e1:bc:e1:15:e0:4b:ff:ac:66:16:9d:71:
ae:ab:0f:7f:ae:c0:34:ff:74:5f:00:dc:bc:6b:8b:
df:88:31:30:9f:27:22:aa:b6:87:a4:cd:54:bf:5c:
31:f8:96:79:e6:95:48:51:83:df:87:72:4e:3e:ad:
b4:8b:83:22:96:e6:a5:c6:eb:4c:2e:c8:49:2b:f2:
68:f1:f4:e8:c1:2f:13:9d:db:8e:00:2e:6b:84:d4:
3a:e9:7e:fe:ac:4f:cd:11:5b:22:8e:ef:3b:48:86:
e2:34:83:a6:59:14:74:cf:15:2f:d2:93:dc:76:52:
f5:2c:0e:17:3c:35:c5:ba:f4:97:d3:10:39:56:c7:
1e:cf:1e:fb:be:42:b5:fc:62:f8:b5:70:25:6c:87:
00:e3:a2:59:81:2c:2a:a3:dc:71:29:f1:ee:23:b8:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:0D:D6:0C:57:B5:82:BF:3E:E7:5F:65:56:07:09:B3:B7:03:71
X509v3 Authority Key Identifier:
keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:05:f5:79:50:47:7e:bd:52:58:df:23:b4:ad:39:44:2b:
ea:c6:33:99:6e:77:ad:e7:46:19:dd:34:ee:b8:85:83:b2:fc:
ca:68:5c:08:14:55:de:d5:76:8e:f4:07:e0:89:ed:bc:2a:51:
de:63:b2:22:64:c8:1c:53:9d:8a:d6:df:eb:6c:eb:23:0c:68:
85:3b:72:a2:6a:f0:98:5d:8a:fe:39:41:4d:0f:6d:c6:9e:18:
8f:5d:98:48:ab:ea:70:00:9a:77:92:92:56:f7:d1:88:9f:10:
a0:48:19:8a:4d:80:5b:c0:82:f6:c3:c2:ba:4b:de:72:35:6a:
34:09:e5:1f:e9:11:39:3a:f2:32:c8:61:ce:5c:21:cf:10:a0:
98:f8:b7:84:54:90:fc:75:6f:51:69:cc:86:77:1a:44:03:d7:
2c:ee:ae:72:4f:b5:eb:64:e1:1e:23:c9:44:db:53:96:56:dd:
5e:51:8e:01:dd:7a:fe:b1:0c:4e:40:91:92:89:35:c1:5f:ba:
33:f3:96:e0:41:93:95:6b:5a:d0:8f:84:7c:db:1f:2c:aa:13:
58:50:f1:fe:96:74:38:f5:86:e3:22:26:e9:60:79:63:13:ff:
f9:9d:a8:2a:db:b5:45:7c:aa:1e:b5:4f:15:58:09:b0:14:f6:
eb:8b:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:50:25 2026 by rpki-client