
Error: rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
File: 677267BB5B39E407382A7BBF001BEE00278BE380.mft (raw, json)
Hash identifier: NJItPPrLebTRVkrshboNS3eJmJU0sgh+1+VosXW3AIg=
Subject key identifier: AD:85:C6:F2:5D:23:85:D5:C5:07:38:CB:29:0A:F5:8A:6C:6B:82:DA
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Certificate issuer: /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial: 0C2C1776171437CCCE00A3F92B56BAAC24EAC2F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
Manifest number: 043E
Signing time: Mon 24 Aug 2026 08:17:36 +0000
Manifest this update: Mon 24 Aug 2026 08:12:36 +0000
Manifest next update: Tue 25 Aug 2026 09:36:36 +0000
Files and hashes: 1: 677267BB5B39E407382A7BBF001BEE00278BE380.crl (hash: /JNYIMgzi755eZ/gwuy7lOg6EQrP/XDtca2Y5apQsHc=)
2: 323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (hash: SVR7J2UuOnwpuKypvqBPf5ZM4y1V0nafNhyxtr7Z18w=)
3: 323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa (hash: Vr1fCgEhrW67b9Pg04bv0c8OElyqkko0uCh8BNwjDo0=)
4: 323830343a373131303a343030303a3a2f34382d3438203d3e20323730373634.roa (hash: EhHdAbrWns4VKQOmUkTRJJLnohNXef2b03xI2dTdQXU=)
5: 323830343a373131303a333130303a3a2f34382d3438203d3e20323730373634.roa (hash: yPtRbzBnqjQzH9Vzdgaiq+se1xuQ+/poE1k1POnq2uA=)
6: 323830343a373131303a353130303a3a2f34382d3438203d3e20323730373634.roa (hash: rPirab4PQPwJnSul7EprgLakaM6GggTU+RnaAmMHXZA=)
7: 323830343a373131303a373130303a3a2f34382d3438203d3e20323730373634.roa (hash: HHMpNbygGK57EzK67MkLC9oL5wu26nM1HSANt3EaWB4=)
8: 323830343a373131303a363130303a3a2f34382d3438203d3e20323730373634.roa (hash: RgaufxsWSWXXXAm2+UgcZJAp3gp56vfKP5emM411XsI=)
9: 323830343a373131303a366166663a3a2f34382d3438203d3e20323730373634.roa (hash: 7BO9GOdyx4pmKJ/UtvIK4BNZzuFIq/ny8XUiH/iVf4U=)
10: 3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa (hash: 4ritKEtu0cw0NFhr3+Kkd3C+3ti3LGI9rXbnBUhfolA=)
11: 323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa (hash: 96vyuhGkl1b0gO+9uiVrmHV/RQTbnB74uPma7k7V9ac=)
12: 3138392e3132372e3136342e302f32342d3234203d3e20323730373634.roa (hash: DlzJunf9iGS8DPDFRBic9bX1BGwXEQPjx+PJOkJc1hE=)
13: 323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa (hash: POzjvghn3Vmnnbwr+9/1YAH/dzTVxutNhT105tnzydo=)
14: 323830343a373131303a343930303a3a2f34382d3438203d3e20323730373634.roa (hash: Nadrbb7pYGzaeT2EpvOoieGw2AULXeMa9mYbmhK/1Yc=)
15: 323830343a373131303a353030303a3a2f34382d3438203d3e20323730373634.roa (hash: RKSkDONGDT7S/fIk1fA0VhSpLn+vxb7GfG+d/dQr62U=)
16: 323830343a373131303a373230303a3a2f34382d3438203d3e20323730373634.roa (hash: n/ogW4PWa+19trE64dVyTI/v95kn0yuOnuXTsQ7pnAc=)
17: 323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa (hash: SdlVFtYRw+g7Fq7IVm5NYoswyK95X5/pB5Xw7iqwP/8=)
18: 323830343a373131303a323030303a3a2f34382d3438203d3e20323730373634.roa (hash: 8bEkcSzl12tGyl7eE5cDL+m1hvRXLQhp76V5hkUM+LY=)
19: 323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa (hash: RhghMc++exHkMk3M570ZG9CPdiDY5l6pOWYttx55pvg=)
20: 323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa (hash: DOC+8oRzTbrpqH8IGVQt9VB6JP7tzE1bFfsuRclhKgc=)
21: 323830343a373131303a393030303a3a2f34382d3438203d3e20323730373634.roa (hash: qpwQgD4ZLWrXo0PNZC8W5ojPRSB2VlLhDVabvVMOlQo=)
22: 323830343a373131303a353030303a3a2f34302d3430203d3e20323730373634.roa (hash: 7gI/Sps7U+mkdQE4eIsOpauZiUmCTaTxy/lyoI+HdUQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 09:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2c:17:76:17:14:37:cc:ce:00:a3:f9:2b:56:ba:ac:24:ea:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
Validity
Not Before: Aug 24 08:12:36 2026 GMT
Not After : Aug 25 09:36:36 2026 GMT
Subject: CN=AD85C6F25D2385D5C50738CB290AF58A6C6B82DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:39:50:0b:37:a2:13:3f:09:a2:0d:36:cb:
c6:f1:b8:fd:e4:58:11:e3:23:a1:47:8b:c7:7f:89:
61:7e:9c:06:0c:b6:d9:ba:c7:78:a8:cc:b8:43:a4:
e7:c2:6c:81:fc:d8:21:9a:38:6f:38:f9:4a:f9:78:
b6:e7:31:da:33:13:72:58:6b:58:4a:78:0c:ae:65:
d2:2d:b0:72:e3:31:a1:82:d3:35:9f:5c:85:93:44:
91:8a:e6:40:23:04:62:b8:43:68:11:66:27:6f:ed:
cb:b4:94:4e:f1:f2:71:65:ae:96:62:aa:ac:a0:c0:
e2:6c:d9:f5:0e:27:76:91:61:a8:e2:4d:47:9a:e8:
87:5b:0c:e9:5f:96:eb:05:e2:45:dd:e8:bc:4e:45:
f5:08:16:12:db:e2:6e:7f:a3:5f:21:e7:33:a5:dc:
bb:57:b2:1f:ff:19:b2:ac:00:93:d3:a7:09:05:bf:
6a:8f:cb:74:65:8a:06:f6:1d:9c:66:70:01:64:86:
f2:bc:a4:1f:c5:2f:6a:da:8a:f8:99:5a:61:7e:2c:
d3:a2:13:0b:c4:02:02:cd:60:bb:e1:b3:46:ed:c9:
8f:b3:2c:66:76:ba:47:60:7f:94:81:59:e3:96:58:
77:82:eb:1b:e5:fa:9a:8f:3c:b7:a8:18:46:05:03:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:C6:F2:5D:23:85:D5:C5:07:38:CB:29:0A:F5:8A:6C:6B:82:DA
X509v3 Authority Key Identifier:
keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:42:d3:8a:a8:31:78:f7:9f:07:23:80:f8:5f:d4:af:b0:
79:fb:ab:63:22:df:90:28:78:11:72:9b:3d:28:fa:c6:04:43:
e6:f4:6d:f6:63:13:d8:91:5f:b2:6b:a0:53:05:e8:64:37:11:
be:66:3f:2a:22:36:49:8c:03:5a:db:1b:c4:f0:ad:81:21:19:
ff:f1:32:38:b3:40:d1:08:bd:11:51:de:02:a6:8e:c7:95:29:
9e:63:14:00:5f:b7:77:02:6d:38:81:3f:63:49:82:1d:b8:50:
9c:25:dc:b1:e5:07:f8:e6:cb:a5:59:23:2e:d5:9e:b1:c6:f8:
08:df:db:ef:e8:fd:54:77:03:39:45:79:18:d7:dc:53:94:1a:
60:41:cb:db:72:4b:83:fb:7a:66:17:95:b5:1a:97:6c:d2:2c:
40:74:f6:92:6e:86:a5:af:47:b6:b7:3f:a2:ce:55:ce:43:79:
36:f5:c2:6d:c7:f5:04:74:cc:c3:63:6f:b4:cc:6b:e2:65:eb:
56:00:4f:0e:86:dc:28:6c:bb:2b:10:ce:b4:c7:a3:d8:7c:1a:
38:41:06:43:5e:d1:7d:1b:62:70:ac:d3:0a:e7:0e:c6:5f:b9:
77:b5:74:d1:cd:fa:52:4a:35:fa:ec:33:3d:2f:f0:01:93:a7:
d3:86:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:13:13 2026 by rpki-client