
Error: rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
File: 072772F63E62DC06EAED9A555C2C793CEFF59262.mft (raw, json)
Hash identifier: NPJksKav3DFyeVLVYk5/Z48pGWbS4e0D0KXbsh2rnNk=
Subject key identifier: E5:69:48:62:BF:82:3C:44:D9:FD:F2:57:28:E8:96:F3:89:45:18:0E
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Certificate issuer: /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial: 743DD39F51195F485FF2EBC4FF36AC596552F850
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
Manifest number: 0259
Signing time: Sun 23 Aug 2026 14:50:00 +0000
Manifest this update: Sun 23 Aug 2026 14:45:00 +0000
Manifest next update: Mon 24 Aug 2026 17:30:00 +0000
Files and hashes: 1: 34352e3233362e36302e302f32342d3332203d3e20323731323034.roa (hash: tkxBdhmmrIiPacFA+zr4TDJ+Q8UjFK9N6hFvmYHgsyQ=)
2: 072772F63E62DC06EAED9A555C2C793CEFF59262.crl (hash: ICc3fn8ifFp2e89le5NSoBRuPq2/9rhG0G/Lzu2c80w=)
3: 3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa (hash: mOjjEPcviTZ+qCmYX6z5szjAD9RD9p34iWcHM8xiwZY=)
4: 3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa (hash: 9YIbsc02CJRJnEUTXNcVcC3dwpP00GO1wKqEWWc8oqc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 17:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3d:d3:9f:51:19:5f:48:5f:f2:eb:c4:ff:36:ac:59:65:52:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Validity
Not Before: Aug 23 14:45:00 2026 GMT
Not After : Aug 24 17:30:00 2026 GMT
Subject: CN=E5694862BF823C44D9FDF25728E896F38945180E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:d9:c1:2e:90:fe:e4:64:ac:5c:64:4b:cd:
ee:36:cc:44:87:9c:5b:93:90:c1:70:43:15:68:08:
a1:4e:22:ea:47:b4:6f:34:31:97:5d:ab:34:6d:92:
19:6f:40:56:b5:c6:27:6c:fd:e9:b2:10:c0:c9:98:
74:13:c9:2a:d9:9d:ac:84:90:21:86:3a:68:ef:54:
db:9c:c6:1d:49:ec:16:a7:ff:06:ed:23:54:06:09:
0d:16:84:24:31:ef:8c:75:17:cc:3d:f6:f6:4b:07:
e9:58:a0:89:57:75:0a:56:70:ee:fa:6a:7a:b2:5e:
8d:a5:e6:26:1c:00:5d:20:0b:75:ab:50:d3:f2:c8:
45:7f:7b:d1:aa:1f:57:97:fc:9f:5b:b1:ac:14:04:
7e:15:57:31:0e:db:e7:3e:d7:5c:2a:78:b7:81:0a:
0e:e1:9a:b3:a3:de:d6:67:a7:e0:ca:78:21:78:ed:
0e:49:88:b9:6b:1f:45:66:59:45:44:51:02:7c:50:
de:cd:e5:2c:c9:72:bc:6f:3c:e2:08:2a:ad:20:f9:
fe:63:a7:cb:64:29:c6:0d:3d:d8:43:61:60:ab:27:
28:23:86:70:1d:1f:1c:78:2c:12:ab:6f:00:04:2e:
a6:48:f3:1a:27:e1:22:26:e7:f4:8c:1e:a6:03:82:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:48:62:BF:82:3C:44:D9:FD:F2:57:28:E8:96:F3:89:45:18:0E
X509v3 Authority Key Identifier:
keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:59:bd:a5:88:82:93:1c:c6:9b:6b:a9:e3:dd:8d:04:30:cf:
03:0d:f2:54:dc:e3:f1:9f:2d:c3:a7:4d:c3:46:c3:81:8e:3d:
97:b9:58:57:e7:e1:d5:52:8f:82:b3:3d:73:70:62:39:f7:25:
df:5e:c7:e8:16:2c:02:0f:3f:37:c8:52:47:1a:29:e2:f3:ba:
4c:7c:32:36:0f:5b:0c:29:dc:e2:78:15:f8:8a:83:96:36:82:
11:76:53:a1:6b:34:07:c5:59:7a:5e:9b:2f:33:63:53:42:34:
d1:e7:d4:1e:d4:d1:55:8e:2f:a9:9a:a6:b5:2b:62:a2:53:2a:
81:37:80:98:f4:57:12:5d:7b:97:5e:9a:0b:07:a3:0f:aa:60:
74:89:b0:98:83:f4:d4:b6:28:0c:7e:2b:f7:3a:66:fe:45:1c:
7e:82:22:46:08:9f:75:14:6c:e6:35:02:3e:e3:9f:39:ff:73:
b4:0c:2d:8a:74:bd:a4:8d:7f:c1:75:a4:03:65:94:1b:96:58:
9d:42:d8:36:ef:d4:2d:c6:99:71:0d:7f:fa:1c:7b:57:21:b5:
87:f3:6b:26:61:a8:fb:f1:ea:62:47:61:96:f1:bb:44:18:d6:
63:e9:2c:c9:58:03:08:d4:f1:29:1f:fe:48:0e:79:99:53:31:
46:22:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:53:08 2026 by rpki-client