
Error: rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
File: 82564553AE299B22FAC12CA23483B4453FF22D0A.mft (raw, json)
Hash identifier: fwYkQuYsscPDBBVIEaGEiW5SzEIHt0Jwjzr2QshZO68=
Subject key identifier: 7F:38:30:F6:D0:37:62:03:E0:38:E2:3F:E5:E0:9F:4D:58:68:42:DF
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Certificate issuer: /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial: 688D8ED261B3B07560266025BFDACED212D9574E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
Manifest number: 048D
Signing time: Sun 23 Aug 2026 08:40:20 +0000
Manifest this update: Sun 23 Aug 2026 08:35:20 +0000
Manifest next update: Mon 24 Aug 2026 10:51:20 +0000
Files and hashes: 1: 323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (hash: rPKECQmhJgrhlnYz1Hkz1YO+GT3uTQhk8qlOxG/cHvY=)
2: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (hash: /Ojdaw9jWWMSQk2sBUiYCLAwVgbJtg6gsdZLdRV+m0g=)
3: 82564553AE299B22FAC12CA23483B4453FF22D0A.crl (hash: By/hlKV/7PqC2KQ5ogW5wFOu3v1lDgshDj1JAxfnlxY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8d:8e:d2:61:b3:b0:75:60:26:60:25:bf:da:ce:d2:12:d9:57:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Validity
Not Before: Aug 23 08:35:20 2026 GMT
Not After : Aug 24 10:51:20 2026 GMT
Subject: CN=7F3830F6D0376203E038E23FE5E09F4D586842DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:53:40:10:a3:e8:c8:1a:aa:98:d9:2e:2f:
63:e2:14:d0:f7:11:cf:cb:9a:50:4f:64:a3:fb:4a:
6c:14:74:78:00:0b:e8:ab:ab:c2:d8:b5:7c:5d:3c:
49:d9:3f:bd:42:4a:44:83:ec:ff:63:cc:47:e9:b9:
18:a8:67:d5:64:5d:4e:72:f1:55:52:9c:45:6c:90:
cc:83:50:c7:c6:15:2d:8a:ab:6a:e7:b1:d4:da:68:
97:4c:b9:04:4e:4f:5b:70:72:b3:67:51:af:bb:41:
c1:97:3f:b0:43:ce:5d:df:9d:8a:24:45:ab:5f:56:
12:8b:2d:4a:a1:3f:1a:2a:f5:dc:1d:47:0f:7f:9e:
92:b6:5b:e0:d1:55:5b:54:95:77:59:b6:83:bb:55:
f5:ee:6f:be:1f:28:01:81:1e:b6:78:42:d4:fb:d8:
48:d8:4b:78:97:61:90:5d:7d:98:82:2f:20:ae:47:
4d:e0:f7:7d:58:c8:14:01:31:3a:8a:8c:b0:dc:0a:
87:6f:89:b1:0b:50:2e:f4:b7:02:c2:38:ed:a2:62:
6a:3d:28:1f:8c:0f:b8:43:1e:6c:bc:5e:6d:28:da:
90:ad:8f:d0:39:82:55:dd:de:07:25:06:fd:f5:5d:
07:47:de:64:bb:21:13:f2:ac:3f:d0:e9:56:70:ab:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:30:F6:D0:37:62:03:E0:38:E2:3F:E5:E0:9F:4D:58:68:42:DF
X509v3 Authority Key Identifier:
keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c7:da:70:85:17:8d:8e:6f:15:4a:81:14:15:89:6e:bc:fd:
89:0a:d3:00:90:4a:a2:fb:8b:1b:25:50:24:ee:4d:7f:35:08:
69:99:9e:ef:2d:1c:29:67:8e:f1:76:6d:60:04:eb:db:f1:76:
da:93:8f:89:82:aa:02:ca:36:02:8d:c5:08:15:5b:2e:80:5a:
30:c7:43:7b:a3:4a:95:7f:ed:24:f8:5d:97:72:11:a4:c2:9a:
f2:ee:bf:ec:2a:75:f6:25:3b:3e:52:ec:44:ea:f2:36:e2:3b:
0e:69:49:f7:60:48:92:78:31:f0:d0:c7:1c:9d:6f:f0:2c:94:
a4:3d:5f:27:dd:73:4d:e2:b4:bb:0d:e1:23:f6:77:24:69:f6:
69:14:55:62:c0:c1:d8:d7:d3:a2:8f:1f:dc:97:74:6f:6a:34:
b9:67:7c:a8:aa:c2:be:40:13:73:b5:62:2c:ee:56:72:c3:4b:
48:7f:c3:0e:f1:f5:91:c1:53:ba:f2:f5:5e:7e:d7:ab:13:68:
a2:74:02:25:8b:c2:45:7f:90:7b:7d:09:70:31:f4:7f:93:6a:
fd:eb:1b:e8:4e:91:35:ed:be:84:6c:67:da:17:9f:b1:c4:ed:
16:aa:39:8b:3e:0f:c6:93:5e:58:b6:f6:1b:5f:93:98:2d:b3:
5b:5b:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:57:16 2026 by rpki-client