
Error: rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
File: 75A4972B7CD4E111D558A51F98974C6685D9043C.mft (raw, json)
Hash identifier: B943r/VaUVG007+MTVzv5KsGxcS33J7GXm2SaKZopkc=
Subject key identifier: E9:7E:0F:AD:75:71:21:09:8D:41:F4:B2:4E:E5:D6:DE:32:89:70:68
Authority key identifier: 75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C
Certificate issuer: /CN=75A4972B7CD4E111D558A51F98974C6685D9043C
Certificate serial: 20D550C43D9D184527382ABD44E243FCFE0A766E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
Manifest number: 0284
Signing time: Sun 23 Aug 2026 17:23:04 +0000
Manifest this update: Sun 23 Aug 2026 17:18:04 +0000
Manifest next update: Mon 24 Aug 2026 19:37:04 +0000
Files and hashes: 1: 75A4972B7CD4E111D558A51F98974C6685D9043C.crl (hash: LKr0t/ODqCGbVSdACPO0iGF3vy7vEguxZaEtpmxNLRU=)
2: 323830343a383833383a3a2f33322d3438203d3e20323633303237.roa (hash: WOvIsZiFeA4D+AkqcmTvBSaJtvK0sOhdJd7ZgIlYn3k=)
3: 3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (hash: 8L5zHPkgN3btTubQyhZjje/aZYVVn4dB7bgkm7uDDLY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl
rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 19:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d5:50:c4:3d:9d:18:45:27:38:2a:bd:44:e2:43:fc:fe:0a:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75A4972B7CD4E111D558A51F98974C6685D9043C
Validity
Not Before: Aug 23 17:18:04 2026 GMT
Not After : Aug 24 19:37:04 2026 GMT
Subject: CN=E97E0FAD757121098D41F4B24EE5D6DE32897068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:7d:7f:bb:87:1f:bc:80:c8:14:1c:0b:6f:
be:b4:4c:49:80:29:ea:dc:02:68:23:67:ed:03:47:
ab:11:bf:07:bc:9f:38:19:a8:ec:10:4e:40:e2:56:
08:f0:0d:8f:e6:ca:23:eb:7f:b5:a1:1f:23:c7:e5:
06:f6:a3:d9:f9:31:76:94:d1:74:6e:de:44:f4:94:
22:32:e7:1b:9a:86:98:d2:4a:b4:a8:68:7a:07:84:
1a:f5:e8:cf:34:aa:20:84:e0:68:3b:cc:31:3b:03:
56:47:9b:18:16:e4:6f:32:9b:e4:5f:6f:e8:15:4d:
31:36:05:90:29:fb:5b:90:88:6f:05:6b:76:64:d1:
79:45:6d:0f:71:a6:56:99:07:72:f9:20:eb:55:64:
7b:2c:46:90:e2:25:22:dc:f7:3a:ae:8b:2d:e4:72:
d4:c2:2b:4e:0b:71:0e:f3:ab:0b:4e:c5:8b:83:ac:
78:33:b0:00:3d:5d:79:26:b9:a4:3a:47:a9:be:11:
86:01:c5:62:f1:b2:7d:2d:0b:cd:c9:45:44:c5:e7:
23:5b:f8:ec:86:94:55:d5:47:7c:89:21:99:fd:8e:
00:ae:ac:5c:50:e1:86:58:f3:ef:75:5b:9e:38:c3:
84:17:36:95:58:03:16:8b:57:5e:6b:b1:96:c3:ae:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:0F:AD:75:71:21:09:8D:41:F4:B2:4E:E5:D6:DE:32:89:70:68
X509v3 Authority Key Identifier:
keyid:75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7b:a8:30:e1:14:b5:04:6e:98:9c:e6:e8:a5:25:e9:b3:16:
9c:e0:58:49:d6:a6:f0:c7:29:40:96:58:6b:de:32:58:d8:0e:
ae:8c:94:f6:0d:d9:95:20:39:e4:13:48:82:79:88:a6:fe:fc:
df:5f:04:d8:64:4b:b9:3b:08:83:f4:a0:fe:2d:37:37:b0:67:
d0:96:e4:b2:9a:be:39:de:d7:4e:6f:53:cf:b1:48:55:05:52:
71:80:22:10:ee:fb:ce:96:e8:bd:82:50:34:8f:be:a6:02:e7:
03:f9:bc:55:6c:b3:cd:3c:4c:11:f1:8a:3f:df:8b:54:09:0b:
a8:2a:ed:e5:98:32:c7:47:50:13:61:6a:11:a7:0c:61:34:7a:
18:c6:5e:0d:67:52:dd:55:50:a6:55:cc:85:94:cc:48:ed:01:
1e:30:36:7c:06:f0:c5:df:dc:49:83:7d:02:7c:73:57:95:83:
76:06:1c:c5:5d:16:7d:60:7b:a4:3f:34:a7:ba:ec:2f:12:57:
fe:8b:0c:5f:42:f5:95:16:87:f0:6f:cc:13:91:e1:6f:7b:23:
45:1b:00:5e:91:df:02:d6:44:65:ed:f5:c6:20:bf:22:0d:05:
a3:18:3e:9d:f4:63:a3:6e:b5:a4:b7:1c:d0:cd:79:5f:f1:98:
06:41:18:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUINVQxD2dGEUnOCq9ROJD/P4Kdm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVBNDk3MkI3Q0Q0RTExMUQ1NThBNTFGOTg5NzRDNjY4
NUQ5MDQzQzAeFw0yNjA4MjMxNzE4MDRaFw0yNjA4MjQxOTM3MDRaMDMxMTAvBgNV
BAMTKEU5N0UwRkFENzU3MTIxMDk4RDQxRjRCMjRFRTVENkRFMzI4OTcwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ831/u4cfvIDIFBwLb760TEmA
KercAmgjZ+0DR6sRvwe8nzgZqOwQTkDiVgjwDY/myiPrf7WhHyPH5Qb2o9n5MXaU
0XRu3kT0lCIy5xuahpjSSrSoaHoHhBr16M80qiCE4Gg7zDE7A1ZHmxgW5G8ym+Rf
b+gVTTE2BZAp+1uQiG8Fa3Zk0XlFbQ9xplaZB3L5IOtVZHssRpDiJSLc9zquiy3k
ctTCK04LcQ7zqwtOxYuDrHgzsAA9XXkmuaQ6R6m+EYYBxWLxsn0tC83JRUTF5yNb
+OyGlFXVR3yJIZn9jgCurFxQ4YZY8+91W544w4QXNpVYAxaLV15rsZbDri7HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6X4PrXVxIQmNQfSyTuXW3jKJcGgwHwYDVR0j
BBgwFoAUdaSXK3zU4RHVWKUfmJdMZoXZBDwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZrY0FaZ2RzQWNYU2N2dWlqSGduNHlaZFVKNEZ1VENlZTlXRjRhUmcy
Q2ovMC83NUE0OTcyQjdDRDRFMTExRDU1OEE1MUY5ODk3NEM2Njg1RDkwNDNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1QTQ5NzJCN0NENEUxMTFE
NTU4QTUxRjk4OTc0QzY2ODVEOTA0M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3ZrY0FaZ2RzQWNYU2N2dWlqSGduNHlaZFVKNEZ1VENlZTlXRjRhUmcyQ2ovMC83
NUE0OTcyQjdDRDRFMTExRDU1OEE1MUY5ODk3NEM2Njg1RDkwNDNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHHuoMOEUtQRumJzm6KUl6bMWnOBYSdam8McpQJZYa94yWNgOroyU9g3ZlSA5
5BNIgnmIpv78318E2GRLuTsIg/Sg/i03N7Bn0Jbkspq+Od7XTm9Tz7FIVQVScYAi
EO77zpbovYJQNI++pgLnA/m8VWyzzTxMEfGKP9+LVAkLqCrt5Zgyx0dQE2FqEacM
YTR6GMZeDWdS3VVQplXMhZTMSO0BHjA2fAbwxd/cSYN9AnxzV5WDdgYcxV0WfWB7
pD80p7rsLxJX/osMX0L1lRaH8G/ME5Hhb3sjRRsAXpHfAtZEZe31xiC/Ig0Foxg+
nfRjo261pLcc0M15X/GYBkEY6Q==
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:44 2026 by rpki-client