
Error: rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json)
Hash identifier: VRqHvtR9LprOVoc9y33EcHxfMUuOLfcxZAjPC8ytYIU=
Subject key identifier: BF:9A:0C:23:74:E3:46:28:33:F4:4B:D8:42:E7:F8:48:E9:D5:4B:F6
Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Certificate serial: 09E7DDBC2429F4461688C6044047643EA2851E76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
Manifest number: 0184
Signing time: Sun 23 Aug 2026 15:22:31 +0000
Manifest this update: Sun 23 Aug 2026 15:17:31 +0000
Manifest next update: Mon 24 Aug 2026 16:03:31 +0000
Files and hashes: 1: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=)
2: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: 8hRJ9io9WCTxHwwq34LmdD2B0dHXHOJMwtpu5GMwo8E=)
3: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e7:dd:bc:24:29:f4:46:16:88:c6:04:40:47:64:3e:a2:85:1e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Validity
Not Before: Aug 23 15:17:31 2026 GMT
Not After : Aug 24 16:03:31 2026 GMT
Subject: CN=BF9A0C2374E3462833F44BD842E7F848E9D54BF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:93:c1:3f:43:d5:7d:8b:77:de:90:0d:a6:
52:e5:42:e0:81:98:89:7a:07:9f:dc:23:ce:2e:7a:
0b:f8:cf:30:54:79:eb:7b:44:58:2a:f8:00:1f:a4:
13:65:32:91:47:ed:ac:3d:4a:b5:ed:2a:bb:c0:82:
55:82:62:9e:8f:c5:96:54:96:32:95:c7:05:0e:d4:
51:aa:6a:7d:f3:0c:d2:43:64:1b:11:ef:52:88:56:
d3:e7:4f:f1:6c:7e:36:b2:d2:79:f1:77:57:7a:f7:
aa:97:62:a4:6d:b5:a1:44:8c:2f:60:ce:41:ac:e3:
03:81:dd:80:99:6c:5c:55:9d:13:f3:e8:2c:5e:b6:
74:10:d0:51:40:51:03:21:8e:4a:4e:2b:c3:4d:27:
4d:30:d2:2f:b7:e7:57:45:56:5f:ec:19:dd:57:7d:
65:0a:19:ad:41:bc:82:56:3d:39:1c:ee:08:35:00:
1e:75:4d:1c:8a:8c:03:f0:33:03:fb:7f:44:80:df:
8d:f8:14:5f:1e:95:8b:55:3c:51:5f:79:69:f0:59:
e7:52:70:5d:14:4e:28:89:77:bb:aa:81:0c:ed:c6:
86:d6:f6:6e:9e:e9:44:e9:90:d6:63:68:d2:43:6f:
7e:ef:e3:13:d3:fe:70:b4:79:4c:2e:ad:50:48:60:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9A:0C:23:74:E3:46:28:33:F4:4B:D8:42:E7:F8:48:E9:D5:4B:F6
X509v3 Authority Key Identifier:
keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e1:5a:67:71:a5:f4:e8:ef:91:15:9f:4a:4f:07:62:ea:d8:
a2:45:60:e0:d6:01:e5:da:45:6e:80:d1:70:06:c6:b2:55:59:
ca:3e:3a:93:58:25:57:1f:06:73:6e:61:89:c5:b4:d1:48:65:
f8:0e:39:40:51:7c:c8:e2:04:a8:35:81:bb:02:01:38:ea:f3:
af:27:1c:c8:5d:50:b1:b1:d9:33:dc:73:dc:ae:98:23:fd:cc:
18:00:45:a3:96:3c:79:1a:ed:1a:3e:1a:e4:ca:28:44:13:96:
a7:d5:c7:db:07:50:81:61:65:c7:a9:e7:8a:bc:a2:57:28:a6:
16:18:7c:eb:82:bb:09:85:ef:dc:ef:10:3d:e3:0a:43:e0:78:
94:1f:be:7d:7e:f9:cf:f2:b5:f2:a4:a9:1a:68:c1:5e:10:f3:
58:1b:dc:4a:44:c1:b6:c4:e6:01:40:98:6b:2a:70:1e:cf:3b:
30:21:82:a0:46:ee:d9:8e:dc:a8:39:88:2b:90:40:9a:57:ad:
94:94:3f:01:0f:50:ea:5e:d2:df:b3:ff:5f:f7:41:7d:cb:6b:
55:ad:1e:23:30:a4:de:d9:d5:73:92:b0:09:91:58:2b:40:d6:
0d:1e:8d:fb:4f:ed:e4:e2:c7:35:29:f1:14:02:4c:dd:f9:1d:
bb:8e:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:17:08 2026 by rpki-client