
Error: rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
File: 3E268A146165B7580B59E044B59D275B5F824225.mft (raw, json)
Hash identifier: LHkbBsDGqWXOTzTlTCsqphy/wSPA93gmLr3WRyYSN/A=
Subject key identifier: 67:C6:53:AA:4E:53:34:C7:0D:55:3E:75:10:BB:6A:9D:56:E0:37:B8
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Certificate issuer: /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial: 7219237B018145BF87C0467C71F9ACBF6EF5D2B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
Manifest number: 0492
Signing time: Sat 22 Aug 2026 23:10:54 +0000
Manifest this update: Sat 22 Aug 2026 23:05:54 +0000
Manifest next update: Sun 23 Aug 2026 23:36:54 +0000
Files and hashes: 1: 3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa (hash: +Lmk9SgP9NXhg/YH8kDvfKbHSY8jyv+GUB8LRlqXEsc=)
2: 3E268A146165B7580B59E044B59D275B5F824225.crl (hash: gegJ9YgmrOJBn3+sbMNzLHuoSldIRZBG1TEOHk5Ugyk=)
3: 323830343a373264303a3a2f33322d313238203d3e20323730383737.roa (hash: Gks6Be/g4HR3+hGte3HA0NnYRPlD1k4mNFs48T4zq7E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 23:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:19:23:7b:01:81:45:bf:87:c0:46:7c:71:f9:ac:bf:6e:f5:d2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
Validity
Not Before: Aug 22 23:05:54 2026 GMT
Not After : Aug 23 23:36:54 2026 GMT
Subject: CN=67C653AA4E5334C70D553E7510BB6A9D56E037B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:62:f5:0b:40:de:70:79:fa:5b:81:bb:77:
ca:ae:e3:4b:8f:78:ba:61:da:81:fa:e9:e3:32:fe:
84:04:4d:73:0e:2d:8a:d8:38:5b:84:68:a1:95:2f:
61:22:ff:6a:28:50:f3:75:61:e5:1c:6c:d7:55:c1:
98:48:c3:d1:06:f2:eb:fc:07:ff:11:dc:bc:b9:1d:
a3:6d:77:20:b9:7f:cc:cc:7a:d1:5b:bf:a3:31:f0:
c6:2e:51:5b:87:0c:84:75:32:23:67:46:60:3c:67:
53:3a:b3:57:fe:78:33:5d:60:b7:b9:92:1f:25:ce:
ec:1a:b6:be:61:7a:9d:73:bc:65:a2:0f:83:38:e9:
6a:12:bb:1a:6d:cb:d9:66:08:7e:89:4b:4e:df:40:
ac:ce:53:9f:30:08:9a:b8:1a:fd:09:cf:08:81:58:
23:fb:45:a8:16:dc:dd:9c:11:6d:16:10:d4:3d:4a:
00:2f:5c:03:25:3e:9d:64:3e:f9:11:92:d3:5b:39:
c0:2d:2a:96:9c:14:87:6f:be:17:6f:96:7d:31:22:
f9:00:b0:61:22:b2:da:c8:f8:18:5a:33:ad:78:b3:
c3:79:cf:f2:77:d8:42:c6:46:af:4c:c9:bc:63:1e:
8b:da:9b:e7:b7:59:1c:e4:83:34:01:9d:96:22:2a:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:53:AA:4E:53:34:C7:0D:55:3E:75:10:BB:6A:9D:56:E0:37:B8
X509v3 Authority Key Identifier:
keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:c7:51:b8:b8:85:17:7c:3b:47:4a:29:81:e4:00:6f:1c:
06:70:98:ac:e9:aa:34:76:21:11:1e:51:67:14:a7:bc:d9:5c:
5d:26:b5:a7:ec:9c:be:ff:28:e8:24:65:55:f2:24:19:ca:23:
90:bf:2b:d8:50:a9:bc:79:2b:79:b3:fb:d2:a6:42:69:04:c1:
ee:7f:0b:28:78:3c:8a:e4:f5:2e:9e:f9:b1:fd:22:79:41:db:
3d:92:bd:9d:b0:c3:4f:95:72:b0:d8:bb:34:25:7e:c1:20:44:
7f:aa:90:83:e2:27:da:01:5e:8d:01:c5:66:8d:f3:e5:e6:6e:
da:ab:21:4b:60:37:5a:50:69:77:63:ee:c5:0b:d1:db:5b:22:
5d:cc:8f:53:9c:8c:e5:14:10:dc:9f:34:aa:ad:17:e4:8c:58:
95:65:8a:df:74:74:f8:9b:52:e8:8c:61:74:fe:44:af:c6:74:
0e:6f:ac:94:c8:0a:cd:ae:2a:ce:6b:f4:fb:ee:5e:37:d0:8a:
4b:14:5f:da:6e:67:b2:f3:41:d2:75:ac:74:17:03:53:71:55:
2b:1a:06:41:e9:8e:7a:cf:c9:13:de:7e:f1:9c:86:b2:f1:3f:
93:aa:32:b6:a7:30:7d:7c:f8:c7:e1:95:77:c5:59:af:05:30:
85:0b:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:44:30 2026 by rpki-client