
Error: rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
File: A5455EE25C6FEB15A12789F15E975474289CE800.mft (raw, json)
Hash identifier: UB3g+XWKYYRn7bG0dWlIOoObRjnoqC7HsSXvBJ7/NTg=
Subject key identifier: 79:1D:FC:37:86:CA:49:D8:7D:97:50:BD:64:03:FC:25:8B:D1:73:2F
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Certificate issuer: /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial: 46A3E442BDFC3002D3920699B88AD658D025F052
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
Manifest number: 0489
Signing time: Tue 25 Aug 2026 08:45:52 +0000
Manifest this update: Tue 25 Aug 2026 08:40:52 +0000
Manifest next update: Wed 26 Aug 2026 09:27:52 +0000
Files and hashes: 1: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: ys27577PqH66BrurIrEVwQ5tEqgBqr5HUr4Rlja4vfQ=)
2: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: 4xd5JGaPOnIwdMy1RXiFR3AKjwGlJtBxV2lEsXXQd4c=)
3: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: j+57I9Y1dM/Gzg8JoCGwhAvHA66ijLzKmJrRLGy9ESY=)
4: A5455EE25C6FEB15A12789F15E975474289CE800.crl (hash: liYqguILhWiHYQF+OY0KPfQA7wlAylJFW9TLXN8xOMY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 26 Aug 2026 09:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a3:e4:42:bd:fc:30:02:d3:92:06:99:b8:8a:d6:58:d0:25:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
Validity
Not Before: Aug 25 08:40:52 2026 GMT
Not After : Aug 26 09:27:52 2026 GMT
Subject: CN=791DFC3786CA49D87D9750BD6403FC258BD1732F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:22:58:9c:52:ad:98:46:6f:da:c7:ff:ea:
67:02:6c:db:41:96:f9:91:2c:bf:e6:9b:9b:b7:e8:
ae:14:13:20:ce:ca:aa:48:d7:15:40:8a:4d:55:22:
74:f0:28:45:6b:ae:16:42:23:57:e5:9b:6e:b5:35:
05:58:52:4d:ac:9a:36:8e:b9:a6:86:fc:be:69:38:
42:47:00:b0:7b:f0:01:29:5c:ed:ba:c4:70:c4:15:
4a:4e:71:9f:e6:b3:89:3d:73:a1:c1:77:43:92:fd:
33:5c:25:e6:f7:18:2b:3f:57:06:84:2f:68:b6:4d:
08:96:81:79:cf:ca:a1:8d:64:a2:17:f5:0e:00:fe:
bb:5f:c0:cc:7d:cd:4e:29:4e:e9:f9:60:be:2b:ab:
42:aa:d7:3e:31:3b:dd:95:5a:d6:e9:ef:7a:7e:bf:
16:dd:d1:7c:65:5c:45:d7:e3:86:c7:f3:37:9e:3e:
44:8f:a9:0a:fd:d1:8a:7e:1d:43:2f:68:f1:d6:b6:
ae:c1:45:27:2d:46:66:d1:bd:b0:80:06:8f:31:b1:
02:b2:27:03:c1:9f:c2:ae:fa:b5:86:20:96:0d:31:
e0:5f:a2:a5:89:b5:0c:90:61:b7:e0:63:e8:9c:8c:
7d:1e:34:43:8e:2c:6d:0e:c5:d1:52:40:fd:f5:81:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:FC:37:86:CA:49:D8:7D:97:50:BD:64:03:FC:25:8B:D1:73:2F
X509v3 Authority Key Identifier:
keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fd:64:35:d5:a3:87:d8:9b:e0:68:dc:a8:30:6a:32:d5:a7:
05:25:0a:5c:35:98:48:f2:db:37:8d:bc:e4:93:90:dd:6c:41:
15:ff:ae:f4:b5:7d:d3:c7:4f:40:b0:44:a6:9d:8c:24:60:57:
33:d5:08:d0:48:0c:01:db:50:93:24:bc:b9:7b:84:0a:93:64:
0d:ae:76:60:a3:82:9d:03:df:22:9e:a2:20:b6:26:9a:bb:eb:
a8:b2:9d:5c:3b:c3:dc:ec:17:9a:d6:2f:2b:ae:a6:8b:e2:5a:
53:25:c2:81:88:21:e7:82:b6:7b:66:b1:53:df:2a:19:48:f0:
8a:02:5e:21:95:6e:78:9d:89:35:88:76:0f:30:d7:a9:57:15:
62:62:05:18:b4:09:74:0c:2a:e2:1a:2e:ab:fc:98:9e:3f:b6:
b6:d0:fe:f2:60:e3:3d:5b:2f:c8:3d:63:94:e7:62:09:df:63:
54:f4:8f:d6:1c:1a:5a:ed:cc:9e:6f:2e:30:6d:2d:16:52:b9:
1a:d3:9a:83:81:73:68:d6:ee:93:02:5f:a2:92:cb:2f:d5:88:
58:6a:85:63:53:69:ed:b2:f8:28:3e:59:22:68:ea:90:43:f3:
be:99:8e:dc:92:fe:78:9e:8b:c1:03:b2:d7:4b:0a:8d:d9:ee:
d6:ed:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:15:23 2026 by rpki-client