
Error: rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
File: 5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json)
Hash identifier: sjtpWJoMslkWDQQoWc+O2Bdlq7mZEjRA1AfnKz2FHkU=
Subject key identifier: 9C:6D:8F:47:A5:40:9D:B9:3C:7C:9F:F8:FE:BC:AE:62:78:15:94:80
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial: 47E2152C86C1E14B2F9220E8F14AEEFF27F18EBF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
Manifest number: 0440
Signing time: Mon 24 Aug 2026 02:18:42 +0000
Manifest this update: Mon 24 Aug 2026 02:13:42 +0000
Manifest next update: Tue 25 Aug 2026 05:35:42 +0000
Files and hashes: 1: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: rZTaXIKnQiw3eVa41BnmNEPOZgvOEZc3ujp2ZY+jsfM=)
2: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: /dqf7ZM/K7ViSc/f3cQWa28CIRpYIbbvi5ldhcT0hCw=)
3: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: QbXtP8xoYHUt420Ga0SYsEUiLxuC3BqWzYiEWu7ymZw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 05:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e2:15:2c:86:c1:e1:4b:2f:92:20:e8:f1:4a:ee:ff:27:f1:8e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Validity
Not Before: Aug 24 02:13:42 2026 GMT
Not After : Aug 25 05:35:42 2026 GMT
Subject: CN=9C6D8F47A5409DB93C7C9FF8FEBCAE6278159480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:a5:64:ac:e1:df:8b:21:a2:d7:13:9d:05:
b8:1c:56:f4:91:20:79:d4:de:60:e0:1c:6c:ba:57:
bf:7b:8a:1a:59:19:b1:1b:3b:0f:fe:13:98:b2:cb:
0b:bb:39:ca:71:99:60:b7:07:98:c5:7a:b2:1b:d8:
d2:58:18:1e:4e:3a:1f:29:2b:6d:09:ec:a7:12:2c:
d4:6d:a2:ee:6a:8f:4d:3d:37:08:be:d7:6a:b2:57:
34:c8:3e:f7:29:3d:a2:98:27:71:0d:27:36:d9:c3:
fa:e8:85:4f:d3:ed:21:b1:37:87:21:c1:5e:61:29:
9f:2e:d0:f5:66:23:aa:41:21:5f:5b:20:6b:98:ae:
3d:9c:f4:3b:46:ae:cc:3b:cb:93:90:30:a7:d3:34:
d7:92:a6:86:f5:56:01:53:08:12:85:51:74:2d:06:
c5:7a:7c:94:f9:7a:3f:c2:0c:2e:87:3b:d7:f4:78:
dc:68:8d:ae:07:18:c9:0a:d9:a2:7d:e9:4d:19:eb:
36:99:3d:02:50:02:64:5a:fd:3a:c3:71:f9:c2:3e:
a9:78:96:5a:02:b0:0d:75:99:62:a0:e0:1c:64:41:
f6:50:a2:ea:70:92:78:36:10:db:38:8a:be:bc:c0:
33:4e:2f:74:ad:79:6e:db:84:77:e9:2a:25:86:11:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6D:8F:47:A5:40:9D:B9:3C:7C:9F:F8:FE:BC:AE:62:78:15:94:80
X509v3 Authority Key Identifier:
keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:a3:9d:9f:2f:54:1f:2d:0f:e2:cf:1d:f1:3f:42:2c:79:
c2:b7:85:bb:32:99:ea:f8:46:2e:b9:06:ad:13:2a:c8:01:40:
ba:6b:bd:88:c9:fc:c0:82:7b:09:ae:cb:98:3f:49:a7:39:2e:
f9:38:82:ae:0c:0a:78:1f:64:58:a5:e2:82:7d:c1:31:d9:98:
56:73:4a:bc:8c:fc:4f:b3:f6:5c:34:24:e5:1c:b5:e8:9c:bb:
d4:b2:e4:1a:3f:ce:9b:8a:92:e8:98:c9:29:ee:c8:c5:eb:59:
28:67:14:8e:e6:c8:6f:b5:46:19:df:12:cc:be:02:90:88:bd:
f5:2e:b4:6e:ba:06:61:ff:61:88:0e:e4:46:a1:4e:1b:d7:47:
b7:df:c0:93:d7:05:6c:af:ad:5e:b9:99:54:5b:85:c7:1f:55:
f7:ab:60:d6:19:2b:98:b9:c0:cb:4d:eb:18:b4:7b:79:6f:4f:
cf:c9:25:68:df:90:dd:14:c7:bd:e2:20:b8:61:1c:06:ed:13:
da:3c:73:64:f9:07:b4:9c:92:be:75:d6:10:9f:8f:b4:80:a0:
43:e1:29:a5:2f:03:c5:0e:b4:97:50:cd:1a:1b:01:bf:a2:87:
c4:e5:19:7b:c4:09:3b:fd:e5:9a:5b:6d:82:32:ac:dd:4d:2c:
36:98:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:55:52 2026 by rpki-client