
Error: rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
File: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft (raw, json)
Hash identifier: xsk6TZ6157DHUnl6tQnbyTnap0PrvekH93m0m0KpSn0=
Subject key identifier: 2A:E0:4D:BD:99:53:DB:4F:38:E0:11:BD:28:E3:6B:5D:15:62:8F:C1
Authority key identifier: 39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
Certificate issuer: /CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Certificate serial: 1AB54C158231395DAAD9C58F2702B9175ED3DD2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
Manifest number: 018D
Signing time: Sat 22 Aug 2026 20:22:56 +0000
Manifest this update: Sat 22 Aug 2026 20:17:56 +0000
Manifest next update: Sun 23 Aug 2026 22:52:56 +0000
Files and hashes: 1: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl (hash: SqPVuVFpNuDs96le8Srjd4nJKJ2Qa2sMbrR9kRmR6S0=)
2: 323830343a363530303a3a2f33322d313238203d3e20323639343632.roa (hash: dYFJ+TK53yUSuiBuIq6FGVmH+goh9YSou9bovn9JMV8=)
3: 34352e3138372e39362e302f32322d3332203d3e20323639343632.roa (hash: NaiFTgXjlXyLcqdW+W3yI7vIOFQqkj4gTIl4hxoKefI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b5:4c:15:82:31:39:5d:aa:d9:c5:8f:27:02:b9:17:5e:d3:dd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Validity
Not Before: Aug 22 20:17:56 2026 GMT
Not After : Aug 23 22:52:56 2026 GMT
Subject: CN=2AE04DBD9953DB4F38E011BD28E36B5D15628FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:59:c0:0c:98:3c:d5:47:9f:58:0c:1b:a9:ab:
fa:ba:5c:3c:53:46:b8:e2:1a:eb:b2:49:70:5b:1f:
ae:e7:c3:62:51:ea:3a:f8:20:02:b9:4f:41:c0:2b:
a7:12:9e:c3:07:88:34:a6:aa:1b:6c:4b:dd:f9:ac:
b5:f0:27:fe:27:e5:1a:2c:1d:20:6a:f0:8f:af:cd:
d5:77:4a:c6:f8:46:46:72:dd:ea:f6:2d:68:a6:ef:
2a:a7:10:96:90:79:f5:cf:eb:ef:2b:c3:5c:5b:81:
0a:4e:55:98:3f:b7:40:a3:cf:89:58:c5:ec:f0:bb:
1f:4b:40:7d:b6:c3:6c:1b:e3:a5:0e:2f:a2:fe:00:
3c:ac:72:28:e9:3d:fc:cb:46:90:68:38:18:64:0b:
02:59:1c:73:74:29:f9:f4:c7:15:a5:be:b6:3b:12:
35:8d:07:b4:17:d4:02:54:78:a4:18:6b:db:9c:49:
8f:2f:38:97:bf:75:61:2d:9e:45:15:83:e2:33:b0:
f2:fd:3c:d5:ba:60:d7:21:67:ff:e4:9b:03:69:27:
2c:22:5b:06:72:df:c4:7e:3b:66:18:3d:2a:4c:fe:
54:88:7a:62:bb:d9:15:39:f2:91:83:9e:46:ca:a5:
e5:39:53:ac:6d:a1:3a:33:5e:23:c6:eb:b9:77:55:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:4D:BD:99:53:DB:4F:38:E0:11:BD:28:E3:6B:5D:15:62:8F:C1
X509v3 Authority Key Identifier:
keyid:39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:25:97:d3:4e:52:70:1e:c1:cf:f9:eb:55:1d:7f:0d:ef:
25:54:d4:d3:b0:4e:de:20:e0:d3:9d:2c:74:05:51:7f:ca:49:
38:4c:6d:1f:45:a9:68:21:66:78:59:eb:e7:76:59:19:dc:1f:
7f:70:d7:5c:b0:83:0a:d6:d4:4a:85:35:4a:51:45:a5:72:66:
b7:2f:20:5c:11:34:20:a8:a5:95:e9:55:e3:36:17:d6:06:75:
bf:7f:49:33:6a:a3:e4:71:7a:bd:f8:53:01:f7:bf:f6:d9:82:
83:aa:9f:8d:4b:a1:40:78:63:47:a1:f3:c8:a5:40:76:87:08:
cb:12:e9:97:10:84:bd:c8:f3:38:0a:4f:33:97:81:9d:02:91:
e6:19:2e:11:a5:a5:de:ec:25:cc:1c:9d:90:f9:fa:35:65:0e:
5b:f9:26:70:df:3e:d3:dd:49:f7:24:f4:c6:cd:f7:4b:59:2f:
04:93:6f:81:36:1a:f4:a5:32:3f:4f:56:6d:99:21:7e:e9:97:
30:bb:28:80:0b:b9:0b:18:f3:69:9e:13:92:81:75:19:5c:4d:
21:a2:d8:0d:46:b9:8a:c6:4b:98:e3:0c:2a:35:92:fe:90:6f:
1c:5b:c7:d2:aa:f2:f0:70:d3:66:a2:09:db:ff:f4:47:32:39:
34:7c:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:46:36 2026 by rpki-client