
Error: rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
File: 663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft (raw, json)
Hash identifier: Yd1AVt5DFQ+sfsVy4t9/ljIYhM5I8OJrQzJ3UAE896o=
Subject key identifier: 5D:89:C4:5B:1D:07:03:56:1A:F4:4A:D9:9F:63:F1:AA:D7:B6:7A:D6
Authority key identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
Certificate issuer: /CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Certificate serial: 2B5BD33EC77908CE5C6DE2C9276118E12CA62B26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
Manifest number: 0487
Signing time: Sat 22 Aug 2026 12:12:47 +0000
Manifest this update: Sat 22 Aug 2026 12:07:47 +0000
Manifest next update: Sun 23 Aug 2026 14:08:47 +0000
Files and hashes: 1: 323830343a333063303a3a2f33322d3438203d3e20323634393732.roa (hash: zi20dVF7gTtFijXK/a1rKeOcSANS5/9DLSCiYbJiN4Q=)
2: 3137302e3234372e3138302e302f32322d3234203d3e20323634393732.roa (hash: HBQ5FDqj1642iaZvy/bOOaEpr/g1ECk1eiM93BSKSwU=)
3: 663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl (hash: aYHjV+N2PO3AAER0SwC2I39IM7iogmf5xcU2Bg6RrEQ=)
4: 3137302e302e3132382e302f32322d3234203d3e20323634393732.roa (hash: gBau7ixnY61L8fGq9AiL+HkV9dRTJ7pIsVQU9bWnoEk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl
rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 14:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5b:d3:3e:c7:79:08:ce:5c:6d:e2:c9:27:61:18:e1:2c:a6:2b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Validity
Not Before: Aug 22 12:07:47 2026 GMT
Not After : Aug 23 14:08:47 2026 GMT
Subject: CN=5D89C45B1D0703561AF44AD99F63F1AAD7B67AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:f1:bd:10:0d:3a:5f:d9:ca:f2:01:93:5e:
99:18:2a:c7:6b:a5:06:24:29:42:56:85:34:29:1e:
90:39:cc:9f:43:cf:d9:f4:73:ba:55:a5:e9:5d:30:
68:32:fb:b3:8a:6c:50:17:dd:cf:f4:d5:56:dc:05:
55:d2:88:86:a4:a0:d4:bf:da:6d:23:ff:97:b7:36:
6c:63:ce:f3:66:79:f7:b6:12:02:79:7b:6a:3e:d2:
30:18:f6:6d:47:c7:14:53:a6:21:cc:73:64:96:53:
6a:4a:ff:fd:11:46:bb:24:55:6f:a5:cd:f1:54:0c:
38:d1:65:46:5e:86:dd:ac:f1:1a:9e:cd:03:e8:78:
e1:33:38:20:16:ce:a1:69:30:33:85:69:a4:17:6c:
ba:97:2c:f7:44:93:80:45:16:79:0f:bf:06:bf:28:
1d:19:f9:31:2d:c6:5a:4c:18:37:fa:41:a1:28:54:
99:4d:c4:56:3a:d3:35:f8:4d:ae:08:46:73:7c:93:
93:29:12:64:6e:11:46:eb:8d:a1:0d:78:da:50:66:
78:60:c0:d6:9f:2f:62:f3:cb:4f:c4:a9:7b:f1:b5:
5a:7b:d9:3a:90:d8:22:0d:f1:7c:44:87:b8:58:3f:
e4:70:23:52:24:79:b7:94:1f:5c:d5:50:14:8e:72:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:C4:5B:1D:07:03:56:1A:F4:4A:D9:9F:63:F1:AA:D7:B6:7A:D6
X509v3 Authority Key Identifier:
keyid:66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:6e:1e:22:24:9d:68:ad:c4:dd:73:db:bd:d0:ec:77:fa:
e4:9d:a6:02:84:91:20:45:e2:1e:4f:09:38:ae:44:9e:c2:ab:
ad:70:ce:5a:1d:a7:2f:dc:41:57:b6:b4:b5:31:b4:c9:3f:e6:
8d:4b:35:b3:dd:e6:ab:ce:82:2c:39:86:ff:98:fc:55:00:4a:
39:db:da:0b:f5:9e:df:d5:7b:26:2a:2c:b5:9f:1e:62:fe:a4:
93:5f:79:95:cd:9a:ae:0d:20:d2:26:44:f5:a0:a7:2e:1f:e5:
a6:ca:31:c0:fb:7c:32:19:73:f1:8d:cd:e0:30:80:25:16:c3:
16:ff:a1:29:80:1d:e0:17:36:ee:3b:b2:65:3a:f6:a9:87:b0:
04:70:b9:9d:be:df:8d:da:2a:8b:b9:2b:26:7f:c8:3d:4a:71:
af:bd:c2:70:99:cd:53:04:4a:a8:b8:3c:4e:4c:5d:0b:bc:dc:
43:b0:73:38:aa:3e:7a:b7:62:f0:47:18:1f:f6:f4:d8:03:a3:
a3:cf:9e:f7:91:07:3c:0f:6b:de:5a:0b:e3:f7:e1:3b:93:e5:
83:c3:59:56:4b:94:4b:e2:a1:11:5b:49:96:62:fc:88:99:ff:
56:9d:d8:cb:b5:21:77:74:11:a3:bc:24:be:5b:1b:14:10:ac:
ec:2c:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 02:07:38 2026 by rpki-client