
Error: rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
File: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft (raw, json)
Hash identifier: byQJmvx05tLa0U9ZLBfnIbXpwBXHFFZw3ZnC0Rj5s5s=
Subject key identifier: A9:DD:00:4E:11:0C:12:E9:F1:70:A5:E6:47:A0:C1:F2:83:24:0C:8F
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Certificate issuer: /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial: 2685E178B6AD12B14EEDF8C6DE9A66D40F10A243
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
Manifest number: 03EE
Signing time: Sun 23 Aug 2026 20:10:00 +0000
Manifest this update: Sun 23 Aug 2026 20:05:00 +0000
Manifest next update: Mon 24 Aug 2026 20:10:00 +0000
Files and hashes: 1: 3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa (hash: iD8njkNi1+SywWFxKBhuzbzW8A2DGeqSj/w6gEbhJDU=)
2: 323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa (hash: d6xNzA++sK2wvDPvQ+fG5NLmKmVoNiSpjm7Jx012ON4=)
3: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl (hash: JtTsvMI2Q2wXDFag+RBPTVUDOp5n2fZ/bkRXgZNzg04=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 20:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:85:e1:78:b6:ad:12:b1:4e:ed:f8:c6:de:9a:66:d4:0f:10:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Validity
Not Before: Aug 23 20:05:00 2026 GMT
Not After : Aug 24 20:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:66:18:59:ff:6f:17:65:f4:f3:e5:ea:5c:
73:cc:2c:92:03:3d:e9:4e:82:f5:a5:e8:0f:28:f6:
4c:65:20:74:f3:af:98:c3:3f:bb:5a:66:ba:3d:50:
c0:b4:9c:a2:b8:78:a7:35:6c:5b:5a:fb:6d:13:1b:
3c:a9:54:d5:56:7b:42:56:90:9d:65:7c:7a:90:d8:
26:a6:0d:ab:c7:bb:94:7a:e0:5f:ca:2f:ef:f6:b5:
98:51:9e:4e:9a:ce:a4:af:44:cc:26:1f:e5:f2:25:
da:e8:9b:06:5b:b0:b8:db:13:91:f0:74:4a:59:e8:
64:0e:94:7a:d7:a4:d0:ab:51:8a:ca:ac:90:70:e5:
85:58:eb:44:c8:89:f2:33:b0:67:cb:14:b1:4f:29:
1b:5f:ea:bd:62:d4:b5:1f:62:cd:e7:25:9a:3f:99:
a1:ab:5c:b8:b9:89:82:3d:86:f9:ba:44:87:70:73:
05:93:32:9e:e9:b4:a3:25:86:6d:98:2e:03:1b:4d:
32:5d:67:bc:bb:63:4e:92:d0:8f:09:af:bf:d3:3b:
05:77:b8:ec:fa:1d:6f:20:ed:6c:47:b3:9a:c0:8d:
6c:c6:54:f2:16:11:53:62:5c:eb:c7:26:de:d8:ad:
d7:bb:bb:4e:c4:ed:78:a3:84:b2:a3:92:7e:b4:d1:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:00:4E:11:0C:12:E9:F1:70:A5:E6:47:A0:C1:F2:83:24:0C:8F
X509v3 Authority Key Identifier:
keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:a3:0f:ae:ed:15:9f:5b:f0:0d:e4:da:6b:79:dc:53:69:
da:73:84:3d:0d:43:cd:e0:16:c0:ab:03:2c:7d:c5:51:4d:15:
48:25:a6:c2:1c:d9:c2:24:84:7e:c0:79:d3:4e:4e:a9:f9:74:
4a:82:90:32:aa:47:ac:78:fa:c8:c9:e1:6e:55:a0:a7:78:ed:
f0:51:bc:c5:00:d2:ad:09:43:6d:1f:58:9f:69:9d:b5:62:97:
32:04:a9:72:5b:7e:b3:db:5f:a4:e1:39:14:f0:dd:d0:87:d1:
ef:17:95:dc:9d:eb:8c:4e:48:85:7b:e5:9f:0e:58:00:e5:42:
d3:71:b2:8b:b3:b3:fb:c9:bc:81:ca:b8:a1:1f:7e:2e:cc:1f:
93:78:6d:31:42:5f:bf:5d:0e:a7:78:5c:6b:bd:4d:36:3f:91:
5d:d6:5a:48:94:59:e7:90:f9:e5:c0:76:11:59:34:45:a8:a3:
8b:f5:e5:63:a7:b9:3e:20:91:f5:ac:5f:30:5f:bd:67:5d:5a:
d7:8d:5f:7d:99:7f:16:36:47:78:2a:35:06:5e:68:8f:d1:4a:
b9:d9:e4:b6:33:0b:64:3d:c0:d1:52:79:ae:76:a9:60:22:21:
5b:a6:be:e5:fd:8c:98:fa:15:36:a7:c9:49:49:24:d6:5e:31:
a9:2c:24:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 23 23:00:16 2026 by rpki-client