
Error: rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
File: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft (raw, json)
Hash identifier: /LbmqZITs6kX2shV3OuWXVGOsumkHKEaMkCb4idUl4I=
Subject key identifier: F1:D0:F3:B8:09:60:08:F1:6D:9D:73:39:19:BA:27:E1:AF:EE:23:CE
Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
Certificate issuer: /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Certificate serial: 781E2860BB75453F777FC8477DF3EC1FB9AECB0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
Manifest number: 048B
Signing time: Tue 25 Aug 2026 16:38:53 +0000
Manifest this update: Tue 25 Aug 2026 16:33:53 +0000
Manifest next update: Wed 26 Aug 2026 16:59:53 +0000
Files and hashes: 1: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl (hash: OnALCA7JJJA3NDrBzJ80GAWKAXXEJGD2fdTMZ5J0YEY=)
2: 323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (hash: abHVhG12dzDWoy3hbAp0hHDec0gdi//rFgA0sgRtxBo=)
3: 3138362e32362e36382e302f32322d3234203d3e20323730393233.roa (hash: ML47epr+BpH8xtAeDWrtTL74LrCvv+0dv5IOZTh7dJ8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 16:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1e:28:60:bb:75:45:3f:77:7f:c8:47:7d:f3:ec:1f:b9:ae:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Validity
Not Before: Aug 25 16:33:53 2026 GMT
Not After : Aug 26 16:59:53 2026 GMT
Subject: CN=F1D0F3B8096008F16D9D733919BA27E1AFEE23CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:61:2d:e4:0f:23:06:a8:6d:b3:39:41:dd:
8c:6e:e3:92:ca:33:12:bf:bb:7f:68:04:de:7e:e6:
75:fa:18:fc:88:f1:b7:87:1b:9e:be:7e:0d:da:50:
b3:99:e6:77:e3:7c:40:7e:7a:76:e2:9c:af:23:d2:
e8:9b:f0:d6:c4:a5:09:65:57:63:db:98:f5:5a:bf:
68:f8:a4:7b:a1:5c:11:1a:93:cf:bd:bd:4e:95:5c:
7c:0f:8e:ca:d4:37:d1:0a:66:7a:3d:05:ca:2d:c9:
97:e9:53:12:cd:de:3f:76:23:b9:db:6d:ca:1a:70:
4d:51:f8:3d:41:6c:40:fe:dc:ad:26:76:22:e2:6d:
85:b5:f7:fd:15:95:92:5c:66:d0:7a:24:85:73:13:
b3:4d:ea:5a:67:fb:d8:ed:c8:1a:e0:d0:40:b6:c1:
11:4d:42:5f:81:3f:62:4d:87:7c:00:27:11:f0:4a:
69:34:ab:5b:2d:bd:75:03:c9:3e:cf:e2:c4:b8:20:
f0:18:16:2b:06:8c:f0:96:fd:e1:1a:c9:fe:06:52:
b3:90:06:7d:c7:57:3a:b3:eb:a3:46:fa:c6:6c:e0:
83:6b:ae:97:3a:3c:be:f5:93:20:aa:97:e8:d0:70:
38:68:7c:ac:17:fa:9e:99:3e:f6:3c:46:87:71:29:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:F3:B8:09:60:08:F1:6D:9D:73:39:19:BA:27:E1:AF:EE:23:CE
X509v3 Authority Key Identifier:
keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:8d:03:e2:4d:b2:c3:c6:28:18:25:c4:2a:a4:db:14:a8:
57:6c:3d:ff:bd:67:d4:f5:89:36:1b:c0:9c:d6:01:87:05:bf:
f5:8d:67:6b:75:f2:b5:52:bd:24:a5:0d:a7:4c:e5:98:b5:c1:
ee:cb:61:92:9f:cd:9c:db:c1:18:cd:72:f5:10:ac:46:82:28:
46:80:b1:40:9b:5f:f2:50:de:ab:88:c2:12:73:50:ae:27:47:
f0:7a:67:42:82:4e:74:b8:33:8f:37:ca:20:2e:ba:d2:93:5b:
58:53:ca:53:76:d6:e6:c5:27:eb:0e:ae:06:75:31:24:5e:3a:
ea:62:44:bd:dc:e9:0c:7f:6f:ac:c5:6b:16:00:9e:9c:a6:c1:
42:a1:52:0f:ef:49:c8:e4:69:c5:6b:86:0a:d2:ab:84:42:42:
42:7a:b8:bc:6b:5b:37:2a:f5:9c:0d:1f:ed:38:aa:6f:96:b5:
42:bf:f2:e3:a5:e4:d8:4b:75:74:a9:32:73:d5:16:2a:84:b7:
ab:4f:f0:9f:8f:3c:cc:6b:8e:eb:bd:4f:1d:81:a1:87:f9:98:
25:2b:4a:e9:1f:01:b0:d0:41:e7:8d:22:1c:0b:d1:9e:ee:74:
cb:c0:dd:db:26:b9:cb:9f:94:a7:3f:ad:f7:1c:79:b9:36:3d:
20:f2:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:25:32 2026 by rpki-client