
Error: rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
File: 733F4B034A3788745713B6F81B211FD8957CF1EE.mft (raw, json)
Hash identifier: U9dRbgzMlwlT52y1KV3cBKBfB4n/NTW027hoIb/iEmc=
Subject key identifier: 93:6E:58:39:C6:C7:08:C4:C6:25:21:F6:85:C1:BE:A0:6C:FE:11:8D
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Certificate issuer: /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial: 4913B0E0B7E81268F35B5773E6E8819F57CCFC78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
Manifest number: 0489
Signing time: Mon 24 Aug 2026 05:09:25 +0000
Manifest this update: Mon 24 Aug 2026 05:04:25 +0000
Manifest next update: Tue 25 Aug 2026 08:55:25 +0000
Files and hashes: 1: 3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (hash: uIVDUZk2eLRH+jxk52HbsHUXpJiTBIzFAwde6PQTcGc=)
2: 733F4B034A3788745713B6F81B211FD8957CF1EE.crl (hash: ZbQnLSvUkVUYI+w0wp8KVjfI6PO14ta45qcboO2sQCk=)
3: 323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (hash: f+YUrCN5kYvokNgrwug1C06hBM0mBzli4EV5hr5Ll6o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 08:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:13:b0:e0:b7:e8:12:68:f3:5b:57:73:e6:e8:81:9f:57:cc:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Validity
Not Before: Aug 24 05:04:25 2026 GMT
Not After : Aug 25 08:55:25 2026 GMT
Subject: CN=936E5839C6C708C4C62521F685C1BEA06CFE118D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:70:0f:70:55:a5:24:81:82:1b:e3:dd:18:fd:
a9:5b:8e:d8:94:be:ef:c8:39:05:18:d6:12:30:cf:
31:8b:e3:44:23:45:a9:2b:57:be:e7:6a:c0:6b:ac:
51:13:09:8a:9d:53:a0:22:0e:32:82:1b:36:8e:b5:
dc:25:e8:7f:c2:37:eb:45:03:d0:ff:d6:57:7c:1d:
70:1c:39:9b:a6:a5:2d:3a:e0:48:39:45:2a:1f:80:
78:6b:1b:a1:ab:c7:a5:1f:63:0a:3b:24:b2:6a:ba:
5d:0f:92:c6:fa:a7:39:fd:de:fd:78:42:c6:57:c6:
f3:49:86:2a:9d:7a:a8:a8:18:3f:c1:e8:ba:ab:64:
b9:ae:6c:61:a0:e8:d5:86:55:9f:4a:20:4c:c6:d3:
39:ca:be:94:f3:39:08:ed:96:9c:a6:55:47:9c:0b:
2d:c1:ce:f5:af:9a:34:81:5d:7c:f2:6b:b6:76:eb:
cc:9c:1e:24:78:f7:6a:7f:d9:6f:2f:24:ea:24:c0:
95:fa:8a:ae:c3:7d:4c:4f:e3:c4:07:62:ef:6e:bb:
b9:2d:20:be:93:69:6b:ca:a8:cf:5b:95:72:6d:25:
69:3b:4b:93:89:2a:d4:e3:48:c3:8e:e9:b2:1b:02:
c0:ca:c5:27:7c:00:2e:65:c6:6d:63:e9:2f:45:ba:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:58:39:C6:C7:08:C4:C6:25:21:F6:85:C1:BE:A0:6C:FE:11:8D
X509v3 Authority Key Identifier:
keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:10:40:62:80:59:1b:c6:44:c0:0f:3b:40:d1:75:66:57:
16:fd:03:29:dc:8e:72:9b:0c:22:58:87:77:04:3b:4d:10:67:
20:a5:6b:3a:e5:95:d7:f8:18:a4:dc:e6:2f:1c:74:c3:fc:6e:
ce:2d:dc:70:70:c8:78:16:0f:5c:16:f1:24:d1:2a:f2:e6:1b:
11:a9:c9:fe:a9:67:1f:b3:3d:78:db:6b:a6:da:2e:4e:a5:e2:
a0:2c:75:f0:ed:47:9c:25:09:1f:4c:ee:41:d6:bb:fc:ed:e1:
1c:0b:f7:1f:bd:5a:23:d5:4a:7f:d1:11:76:7b:b2:26:1c:7f:
38:98:12:51:66:cf:0c:d4:a1:2b:27:2c:65:49:83:ae:52:f5:
88:40:94:bf:71:a4:58:82:67:9c:c8:d7:9e:7f:e9:24:9f:97:
0a:46:eb:5d:90:0b:da:23:91:4f:0a:25:8a:f7:dc:1f:27:40:
20:ca:2c:79:f1:79:f2:6e:62:df:61:93:e2:24:09:11:24:1f:
0c:ec:82:c9:49:f1:66:51:f5:fc:9b:bb:45:ce:36:87:56:db:
0c:3e:b5:90:8e:75:c0:21:7b:67:fa:5f:6d:12:6d:9f:0e:d1:
56:01:9f:46:2a:cf:85:dd:ee:37:03:f4:b9:00:45:b4:85:06:
73:45:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:29:00 2026 by rpki-client