
Error: rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
File: 383F00CFEBB36741056246E209D3A5BBAC5663A5.mft (raw, json)
Hash identifier: 1saXOryhLeSuz7+W7jJMK0iAW14huI44LRJ+RDmBU3k=
Subject key identifier: 03:22:91:BC:A2:A8:A1:64:35:70:8C:32:4B:60:34:E2:07:8C:4D:EC
Authority key identifier: 38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5
Certificate issuer: /CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
Certificate serial: 118233808A8E2569EC47F340E92661D92CEF3222
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
Manifest number: 60
Signing time: Tue 25 Aug 2026 05:05:04 +0000
Manifest this update: Tue 25 Aug 2026 05:00:04 +0000
Manifest next update: Wed 26 Aug 2026 05:34:04 +0000
Files and hashes: 1: 323830343a313266383a3a2f33322d3438203d3e20323633353037.roa (hash: Xy6FbPYaEBWCIbCSrhPXqPzba0+6aiz/vHDBfXK/Fhs=)
2: 3139312e3234332e3133362e302f32322d3234203d3e20323633353037.roa (hash: hkGqrfDiL3EzFRpSHiI5yLZR2d/IMEYKVDyPxcxlbS4=)
3: 383F00CFEBB36741056246E209D3A5BBAC5663A5.crl (hash: hQOIbnC9OPWkLGOpTtWTXeKn2tdcpz0T+1jpFKC4yXw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl
rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 05:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:82:33:80:8a:8e:25:69:ec:47:f3:40:e9:26:61:d9:2c:ef:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
Validity
Not Before: Aug 25 05:00:04 2026 GMT
Not After : Aug 26 05:34:04 2026 GMT
Subject: CN=032291BCA2A8A16435708C324B6034E2078C4DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:78:3c:24:01:25:0d:50:85:70:16:c3:14:
39:9d:c6:03:69:a6:97:0b:37:de:f5:91:ca:67:88:
9d:67:64:93:39:fe:47:63:3f:4c:42:74:37:9a:eb:
11:4d:6d:43:ac:b4:ac:25:c6:5f:40:27:89:9c:1e:
0c:e7:d7:12:b5:5f:a0:94:77:07:3a:16:3f:c7:e9:
30:c7:bc:ed:2b:ec:4a:b6:f7:9e:31:ba:53:ae:e0:
e7:fa:36:d0:63:a5:25:36:87:70:a4:d2:c2:88:84:
bf:88:8d:63:89:c0:98:4d:70:bc:b8:b0:f7:84:62:
5e:2a:27:86:b0:ae:a8:f8:29:82:d8:ca:11:2b:b8:
10:19:36:88:12:a7:36:54:06:ee:3a:5c:2a:9d:96:
e0:66:64:32:a0:c7:d6:d8:72:02:18:32:94:34:82:
93:fb:1b:11:35:98:91:07:47:d2:97:0f:fd:8e:39:
13:67:54:9b:eb:be:84:1a:09:a6:6a:32:0e:d2:af:
19:5f:c6:98:d8:df:95:53:0f:d6:77:1d:49:6f:01:
27:e7:1c:6c:2a:d4:fe:fe:11:d9:50:16:0c:9b:68:
03:81:ff:39:0d:4a:3e:7f:0e:e1:72:ce:5a:84:71:
5d:33:63:90:a9:2d:49:c7:f3:8c:42:7e:54:a9:fb:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:91:BC:A2:A8:A1:64:35:70:8C:32:4B:60:34:E2:07:8C:4D:EC
X509v3 Authority Key Identifier:
keyid:38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:66:a4:be:9b:5b:38:4a:2d:83:2f:2e:9c:c5:f4:28:26:
d4:b3:e1:e4:42:ed:2d:66:b9:fe:fb:e4:d1:78:f1:36:ab:26:
b4:c8:b8:23:39:0f:e0:32:c0:11:a7:73:89:8a:c0:f2:de:ef:
da:9d:a7:ab:28:1d:3d:3a:76:64:d1:6c:92:78:da:58:79:e5:
67:2f:e0:a3:56:a7:48:19:55:03:f1:85:68:91:8c:43:38:0b:
b9:05:65:97:c6:de:ef:40:a6:f6:6a:e6:b1:23:00:17:0f:92:
7a:f5:53:24:b5:9b:49:f6:1f:5b:7d:c9:9d:b7:96:0f:23:1b:
44:01:e6:22:7f:79:fa:14:f0:14:bf:84:9a:2e:b4:a1:2d:3b:
d9:28:cf:71:3a:1d:98:d1:da:cf:4c:0f:fd:c3:14:bf:38:44:
07:1f:b8:7f:e6:fe:63:e8:2f:f7:54:49:80:4d:b4:ca:d8:f6:
25:76:bd:37:10:09:77:ea:96:6d:28:10:42:4f:c7:7c:19:ad:
20:5c:00:1e:1c:16:d8:f4:e2:b6:36:55:64:0d:1b:ef:e2:22:
2e:ab:7c:0d:01:a4:66:07:ba:0e:28:46:0d:d2:fb:4d:8b:ad:
e8:8d:09:74:34:6d:d7:bf:22:d8:49:cd:dd:24:0b:0d:70:44:
ab:fa:c1:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEYIzgIqOJWnsR/NA6SZh2SzvMiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgzRjAwQ0ZFQkIzNjc0MTA1NjI0NkUyMDlEM0E1QkJB
QzU2NjNBNTAeFw0yNjA4MjUwNTAwMDRaFw0yNjA4MjYwNTM0MDRaMDMxMTAvBgNV
BAMTKDAzMjI5MUJDQTJBOEExNjQzNTcwOEMzMjRCNjAzNEUyMDc4QzRERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0Xg8JAElDVCFcBbDFDmdxgNp
ppcLN971kcpniJ1nZJM5/kdjP0xCdDea6xFNbUOstKwlxl9AJ4mcHgzn1xK1X6CU
dwc6Fj/H6TDHvO0r7Eq2954xulOu4Of6NtBjpSU2h3Ck0sKIhL+IjWOJwJhNcLy4
sPeEYl4qJ4awrqj4KYLYyhEruBAZNogSpzZUBu46XCqdluBmZDKgx9bYcgIYMpQ0
gpP7GxE1mJEHR9KXD/2OORNnVJvrvoQaCaZqMg7SrxlfxpjY35VTD9Z3HUlvASfn
HGwq1P7+EdlQFgybaAOB/zkNSj5/DuFyzlqEcV0zY5CpLUnH84xCflSp+7EBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAyKRvKKooWQ1cIwyS2A04geMTewwHwYDVR0j
BBgwFoAUOD8Az+uzZ0EFYkbiCdOlu6xWY6UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgyazNZYlFmRmpjaG40UUdpeDVDcGF4eEZnV2ZQdHAxbzVuWkY5U0g4
WHAvMC8zODNGMDBDRkVCQjM2NzQxMDU2MjQ2RTIwOUQzQTVCQkFDNTY2M0E1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4M0YwMENGRUJCMzY3NDEw
NTYyNDZFMjA5RDNBNUJCQUM1NjYzQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDgyazNZYlFmRmpjaG40UUdpeDVDcGF4eEZnV2ZQdHAxbzVuWkY5U0g4WHAvMC8z
ODNGMDBDRkVCQjM2NzQxMDU2MjQ2RTIwOUQzQTVCQkFDNTY2M0E1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkGZmpL6bWzhKLYMvLpzF9Cgm1LPh5ELtLWa5/vvk0XjxNqsmtMi4IzkP4DLA
EadziYrA8t7v2p2nqygdPTp2ZNFsknjaWHnlZy/go1anSBlVA/GFaJGMQzgLuQVl
l8be70Cm9mrmsSMAFw+SevVTJLWbSfYfW33JnbeWDyMbRAHmIn95+hTwFL+Emi60
oS072SjPcTodmNHaz0wP/cMUvzhEBx+4f+b+Y+gv91RJgE20ytj2JXa9NxAJd+qW
bSgQQk/HfBmtIFwAHhwW2PTitjZVZA0b7+IiLqt8DQGkZge6DihGDdL7TYut6I0J
dDRt178i2EnN3SQLDXBEq/rBkQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 19:12:39 2026 by rpki-client