
Error: rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
File: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft (raw, json)
Hash identifier: zROLhDNn/U4ADjr7GvQIviiiK9Bjq5a+lvzqnWDuntU=
Subject key identifier: B4:2D:32:AE:05:33:AB:98:2F:B7:93:0E:41:9A:0A:37:B3:7E:A3:C2
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Certificate issuer: /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial: 0942EA1497BCF6C3CF6F1854AF73553EF2FEE71A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
Manifest number: 051C
Signing time: Sat 22 Aug 2026 13:50:00 +0000
Manifest this update: Sat 22 Aug 2026 13:45:00 +0000
Manifest next update: Sun 23 Aug 2026 13:50:00 +0000
Files and hashes: 1: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl (hash: EFP7/bQSRpG6D8WOz6eA7XAUhLQeoR7bZrYaaO9Q4aE=)
2: 3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (hash: cnzbZ+PHLAjHkOXuZZHC2S/UIcVEQHtc3vmH6IRoJoo=)
3: 323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (hash: 7bXztEkkjutzCuDzMjrpjB7HukkkBAKAC2suGoA2guQ=)
4: 3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (hash: ELHlETihcWqCAwPowAsxt8TR/y+vFXU009Qvsh/V2lU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 13:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:42:ea:14:97:bc:f6:c3:cf:6f:18:54:af:73:55:3e:f2:fe:e7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Validity
Not Before: Aug 22 13:45:00 2026 GMT
Not After : Aug 23 13:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:72:53:3d:8c:19:78:75:e3:6c:dd:af:8a:
1e:ce:14:cb:c1:8f:d6:f2:a5:2f:32:44:0a:40:19:
c2:c8:cb:7e:c8:c2:bd:df:74:9f:89:32:13:22:60:
b7:26:4f:69:a6:b1:f8:80:77:2a:16:e3:38:ae:06:
f8:51:df:3a:22:6b:d1:6b:f9:7d:c5:40:cf:58:db:
2b:2f:ee:a7:04:31:f4:e3:20:f2:36:4b:64:b8:8b:
48:94:ab:10:23:6c:28:5c:48:c3:bb:61:3a:bd:3d:
39:3b:cd:8f:85:97:90:51:04:88:1b:3c:d3:10:0f:
e7:8c:75:8c:ba:dd:fe:1b:96:e4:a3:8e:f2:52:47:
46:81:12:e9:56:00:7a:36:4f:9f:9f:9f:51:22:64:
98:47:5f:fd:30:c2:05:c2:00:0c:ed:f4:e8:4e:7b:
5e:ec:ed:d7:5c:ba:e7:d0:73:11:a3:a8:6b:b9:e8:
26:ca:05:05:27:bc:25:44:3a:1f:9a:b8:9b:3a:81:
38:32:b6:9a:a0:d8:3b:a4:f1:80:23:42:89:d8:06:
1d:2e:27:b1:09:a2:18:ab:1e:e0:65:84:cc:2e:b0:
cd:d8:69:95:7c:35:96:5c:df:9c:43:f9:ac:a2:b3:
37:e6:2c:e8:a4:b8:97:38:17:ea:a5:04:73:ee:41:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:32:AE:05:33:AB:98:2F:B7:93:0E:41:9A:0A:37:B3:7E:A3:C2
X509v3 Authority Key Identifier:
keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:b9:60:d6:e6:ec:9c:25:6f:6b:d8:c7:50:66:ac:4c:33:
0b:99:28:b4:c8:97:3c:89:84:f5:21:38:0b:b4:ef:b9:aa:f0:
2c:28:52:29:8b:f9:0d:77:de:50:e9:4f:93:92:a5:f7:15:c7:
12:d9:fe:a8:6f:ae:2e:ce:62:23:89:7a:83:e1:5b:c0:d4:0c:
36:ce:9f:5f:84:4a:76:02:09:d5:77:f3:40:15:85:e7:28:6f:
69:ef:32:ab:c7:00:30:de:ac:26:b9:fd:8e:53:99:a1:54:97:
78:86:4e:ff:46:d6:7a:c2:d5:5c:e0:01:c0:a0:95:fb:b8:10:
38:e5:1e:44:11:80:27:b1:fc:20:98:69:5a:d9:43:9b:1a:7b:
38:9c:89:d6:9b:51:61:95:a3:fb:57:c0:90:f7:13:c2:3a:6d:
95:d2:b4:b6:c4:44:7b:57:10:e1:79:21:47:48:fa:11:fc:4b:
af:bb:27:68:33:76:f6:38:87:3e:f4:26:d7:6d:9e:12:1c:08:
ca:ca:22:76:07:cd:57:b1:3d:9f:c4:72:b9:06:a2:72:49:bd:
46:77:79:6f:01:cc:a9:68:c8:26:8d:a6:ad:02:3f:9f:43:fa:
65:7b:8c:2a:9a:a5:e5:1f:30:ef:26:18:0e:dc:ec:9d:ff:91:
02:f8:80:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 01:36:53 2026 by rpki-client