
Error: rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
File: B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft (raw, json)
Hash identifier: BHXfvjQ9dqJqbRLpaw+2D7Kq2KlJQEcpXIbBmubEgGU=
Subject key identifier: C5:1B:53:5D:CF:31:E2:C9:67:ED:2B:80:B2:8F:CB:74:7D:E2:D3:C8
Authority key identifier: B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
Certificate issuer: /CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
Certificate serial: 21DEF6FF674A9E12D239EAE25D522F53AE038F52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
Manifest number: DC
Signing time: Sun 23 Aug 2026 03:18:42 +0000
Manifest this update: Sun 23 Aug 2026 03:13:42 +0000
Manifest next update: Mon 24 Aug 2026 04:38:42 +0000
Files and hashes: 1: 323830343a353630383a3a2f33322d313238203d3e20323637393732.roa (hash: g5HGluNoTUYMeIXWNITEz8Bcv3PBAbiGFlvTewawy9g=)
2: B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl (hash: FXxdJ9sUgQO9pi2KQkgmkrzkwGrhM5AVyCBlePDFK3s=)
3: 34352e3136362e3232382e302f32322d3332203d3e20323637393732.roa (hash: +Muz8uNJqri90LBPJYy9Sb6dL8N6bt26jmuxWmY7zhA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl
rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:de:f6:ff:67:4a:9e:12:d2:39:ea:e2:5d:52:2f:53:ae:03:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
Validity
Not Before: Aug 23 03:13:42 2026 GMT
Not After : Aug 24 04:38:42 2026 GMT
Subject: CN=C51B535DCF31E2C967ED2B80B28FCB747DE2D3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:3b:e8:a7:18:f9:0e:14:59:91:2c:98:29:
df:6f:0d:6b:11:c6:c0:35:89:33:3a:1e:dc:f3:b8:
cd:a5:16:90:07:f8:42:a1:24:38:c1:60:00:7f:cc:
64:b6:9b:6e:de:f3:c4:fc:a3:3f:71:1d:3b:84:6c:
80:06:a8:a5:ca:c4:d0:97:7d:6c:66:a4:45:68:51:
9e:88:b2:a5:15:a1:58:2a:3b:41:11:33:17:3c:57:
b4:43:7d:06:49:60:65:a1:c3:0e:86:93:63:3e:25:
54:fd:9e:4f:03:e4:6a:de:ac:28:62:4c:97:3c:f8:
2b:e6:28:7f:f7:04:96:31:00:7d:43:f2:40:bc:c6:
10:56:04:f6:a0:20:f4:10:fc:fc:cf:15:e9:cd:dd:
dc:8f:bf:fc:8c:9c:02:21:d2:c8:0a:6a:5d:12:1e:
02:d4:ff:5f:53:91:bd:23:98:83:d2:ad:31:1b:19:
b6:e2:4e:23:34:ce:87:4f:a5:1a:a9:09:ca:9f:5e:
82:73:eb:0d:f9:4e:cb:8f:1b:c5:3b:ca:8e:f2:04:
d5:7c:a7:c7:87:0f:48:47:0c:8e:4d:8a:3f:1a:a0:
2a:00:5b:e8:83:12:34:0e:63:cf:1b:9d:9c:5d:41:
7e:7d:7a:3b:d0:07:3d:14:42:28:dc:08:35:2d:41:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:53:5D:CF:31:E2:C9:67:ED:2B:80:B2:8F:CB:74:7D:E2:D3:C8
X509v3 Authority Key Identifier:
keyid:B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5e:36:ff:32:cd:0a:08:74:06:a7:6f:60:82:53:c0:85:c5:
a6:ca:e6:1a:96:b2:f5:02:b2:4b:4e:3a:d4:ba:16:ac:58:4a:
0c:eb:7f:f8:14:09:92:45:6c:a8:a2:89:18:81:be:5b:79:81:
8f:7f:89:ef:62:33:f3:d5:f3:87:80:58:32:eb:6b:38:15:9e:
e5:76:91:25:7d:bc:8e:51:07:cc:1f:7f:e6:a9:de:09:9b:ce:
9b:93:59:90:09:3d:60:1f:60:23:40:1b:92:d0:e5:7a:88:a9:
8d:30:c3:d3:5e:d4:4e:3a:68:10:3e:c9:05:74:78:15:b4:c7:
d9:91:ab:5b:f9:a3:d0:68:26:5c:a4:71:ef:4c:86:37:ba:09:
5e:01:fa:0b:46:62:81:eb:63:01:80:7c:40:25:dd:f9:3f:de:
2e:02:76:82:a8:b5:96:c6:53:65:1a:93:7f:11:7f:17:ca:05:
39:f5:0e:48:00:77:ac:c9:ad:0e:c6:41:05:66:d7:5a:99:e8:
24:df:7a:5d:72:23:a2:b2:ec:7a:66:ae:3c:09:04:ec:ce:43:
85:1f:e1:61:78:76:df:f2:9c:fb:39:4a:02:f1:c6:d8:14:20:
41:2a:f9:bc:c6:4a:39:f8:ab:23:d7:f7:23:cd:b2:f4:a1:13:
20:86:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:10:19 2026 by rpki-client