
Error: rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
File: E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft (raw, json)
Hash identifier: hkRUPnTcKi6pkv8J46chf4ufx7E32bV6o1BQO5a9Ibw=
Subject key identifier: C7:ED:C2:69:35:B5:8D:6C:B0:CD:ED:04:FC:CB:AC:90:76:F4:7D:A7
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Certificate issuer: /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial: 09BAF44C43FE50C3FC328AA4611776EAFC957D13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
Manifest number: 048D
Signing time: Sat 22 Aug 2026 21:10:00 +0000
Manifest this update: Sat 22 Aug 2026 21:05:00 +0000
Manifest next update: Sun 23 Aug 2026 22:42:00 +0000
Files and hashes: 1: E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl (hash: 6MbT/XC4Uhgje5JuKO5z8CxTvMtCA0B38k8KaddcBSI=)
2: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: 0CZXt0UnajiGKsJyiX26vzLF6q1LpiU2bW+wAJE8iMY=)
3: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: bV7kjVQfshS1Gs6Zk0yjJpODNwkBjEfaGiLXQxvVl8A=)
4: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: gTFfMSTjK6XQ/Fgp9NPEcPcRjjvMDtvOIW4h04EDh4o=)
5: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: tzNQmKtKT7DcMJ5hNaLI9DJwW5AdtT2dIlsCg8gSLJQ=)
6: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: cegYiEZ25O9/w0DZDDTNeCXKhb+KTtiuDLeFpoPKv34=)
7: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: /PSvItM2MpjD0s9HMVuC1Gv6V+AncXqX9tGL62Wwtjo=)
8: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: tY2WEy1xLetzLSVwoWwMJhPt0vChUjtGJQ6mUzN/FSE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ba:f4:4c:43:fe:50:c3:fc:32:8a:a4:61:17:76:ea:fc:95:7d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Validity
Not Before: Aug 22 21:05:00 2026 GMT
Not After : Aug 23 22:42:00 2026 GMT
Subject: CN=C7EDC26935B58D6CB0CDED04FCCBAC9076F47DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:c8:74:85:35:75:94:01:c1:4a:14:ce:a2:
a4:e1:ee:2c:ad:6a:e8:70:75:75:21:42:94:ff:27:
71:e9:6c:2e:cf:ed:f6:31:cb:65:69:70:15:03:55:
c2:65:d4:17:ee:35:1e:9a:01:2f:9d:79:d9:78:49:
a7:e8:63:76:b8:ef:4c:55:f5:14:62:b7:28:60:c6:
8e:4a:1e:6e:c1:8d:ad:90:c0:e6:fd:68:84:23:07:
7d:6c:30:65:e7:0e:00:76:3d:0b:7f:2a:c1:1f:7f:
94:71:71:f4:8a:d3:87:99:0e:98:50:a3:7c:d5:d7:
e1:90:5d:15:c0:04:89:ba:68:ef:39:58:5d:ce:ea:
69:88:a1:30:2c:40:10:b1:bf:12:c5:5f:d6:8f:03:
ae:e5:58:62:f4:40:fa:2b:69:49:20:b4:2a:d6:80:
f9:96:f1:4b:c4:e5:35:6f:17:15:3d:97:df:63:79:
de:32:06:3c:92:ae:ce:e8:b8:81:97:5e:23:70:92:
c5:94:ee:ee:0c:1d:0e:04:0d:be:73:00:f1:5f:f5:
9d:39:d8:dc:fa:7b:89:02:dc:85:18:ef:33:95:21:
25:b7:d4:0d:9e:ea:ce:34:8f:4d:a4:76:3c:f0:27:
f6:15:71:37:9a:e3:6c:21:d1:dc:59:86:ec:7b:92:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:C2:69:35:B5:8D:6C:B0:CD:ED:04:FC:CB:AC:90:76:F4:7D:A7
X509v3 Authority Key Identifier:
keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:2f:66:2b:ee:79:c3:67:5a:4b:bc:39:49:76:91:bf:d9:
72:4e:5d:2b:a2:e2:4e:7c:55:87:00:fa:f4:94:6e:41:ed:5f:
31:1f:d9:0d:92:0f:30:ea:22:8c:5d:37:6c:90:9e:32:20:86:
4f:06:fa:a1:66:75:e6:25:b2:9f:85:fd:c1:2c:2a:03:9f:7c:
39:7c:6d:e7:13:93:19:ac:75:9f:e9:2c:21:6d:04:6d:ce:41:
a1:90:22:5c:13:1a:14:f1:f3:b9:59:83:e4:ee:bc:30:21:70:
e7:3e:9d:c5:be:32:f4:ef:9e:e7:c8:50:ad:23:88:48:ee:de:
db:79:01:4d:d8:18:75:ed:ac:9c:d3:f0:49:a8:c7:50:93:b1:
3d:23:af:0f:16:7b:97:84:c1:ba:33:85:f7:66:d1:28:20:67:
60:d5:dd:e8:ea:47:c3:db:fd:89:65:49:09:b0:8e:1c:e3:8f:
1f:3b:75:b9:d9:e3:ab:d8:9c:9d:f3:7e:f0:88:f7:76:15:e5:
79:bb:5a:cb:3a:60:5c:86:36:a1:53:47:83:b4:05:0b:ce:21:
5a:91:a5:b1:76:b0:58:f9:49:d5:07:7a:25:c9:db:9c:45:fa:
f5:c4:a8:54:7c:8b:3a:a1:36:90:8d:4f:46:a6:f2:4e:81:ac:
8c:29:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:08:01 2026 by rpki-client