
Error: rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier: OBEX6KTqr834CClEUSRBlIiEIOQbdV87Q1osTlYcRzY=
Subject key identifier: C4:48:08:B0:B2:5A:90:C3:DE:0A:68:E0:7E:6E:2F:D7:18:31:8E:18
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer: /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial: 2A11E09399DA718A6FC2393EA8EF267CEF5D59B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number: 0489
Signing time: Mon 24 Aug 2026 05:26:39 +0000
Manifest this update: Mon 24 Aug 2026 05:21:39 +0000
Manifest next update: Tue 25 Aug 2026 06:10:39 +0000
Files and hashes: 1: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: giDattPtpMfLfNwgvY/WO8KykbnMNNMIJ9VFca4mkPw=)
2: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nLLmZ8EQUhz7OXKMVJeC2fRgvtjpcy8YTaA23mxddjY=)
3: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: pMXB6vS47T1+SOT7YWNtoBplp/WaMdztCL3dC4Ku6OA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 06:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:11:e0:93:99:da:71:8a:6f:c2:39:3e:a8:ef:26:7c:ef:5d:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Validity
Not Before: Aug 24 05:21:39 2026 GMT
Not After : Aug 25 06:10:39 2026 GMT
Subject: CN=C44808B0B25A90C3DE0A68E07E6E2FD718318E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:88:ea:0d:74:2f:15:15:bf:8e:8c:e6:c3:
0c:31:64:78:cd:84:3e:36:f9:d0:2a:c0:86:78:29:
3b:c0:7d:52:5e:c5:bf:f9:52:e0:05:3b:e5:5e:4b:
f0:06:ed:a9:d5:f6:dd:46:27:ce:c0:c2:24:83:8c:
90:c5:66:11:21:c3:78:c1:ff:f8:d0:40:ea:78:4d:
f3:e5:6f:c3:95:78:f0:7e:f5:a1:07:55:c0:d8:f3:
e8:c6:6e:80:bc:df:57:97:64:21:a0:ad:d7:74:13:
03:31:9a:19:8d:c9:12:19:5d:d0:e8:82:ce:72:fb:
54:11:7b:ef:2b:39:29:89:3c:fb:97:fb:79:61:23:
fa:93:4f:8f:ea:98:ce:15:9d:5d:65:eb:30:87:fa:
e3:98:ca:f7:25:f8:19:55:05:34:4c:67:73:34:05:
df:d9:08:2c:7c:70:7a:87:24:d3:99:a8:bc:14:52:
fe:67:3e:e9:91:b1:eb:34:bb:a1:c7:1b:47:4b:0b:
e3:3e:2d:44:46:0a:81:5a:c9:4b:79:5e:75:1f:ac:
98:81:50:3c:d5:aa:7e:63:df:6e:c4:58:d2:1d:8c:
9e:21:ef:30:09:ca:da:bf:74:34:2e:f3:1d:76:cb:
20:cc:10:26:41:1a:b7:88:d8:7b:35:df:3d:88:3a:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:08:B0:B2:5A:90:C3:DE:0A:68:E0:7E:6E:2F:D7:18:31:8E:18
X509v3 Authority Key Identifier:
keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:69:01:1e:4c:06:b8:a7:12:13:b9:e4:56:c4:d9:58:ae:
1c:02:f6:54:72:07:7f:bd:06:e5:3a:80:a8:e2:78:90:6b:d3:
9c:f7:33:c9:9d:a7:f3:1b:da:39:92:f7:97:be:f2:ba:2c:9d:
d9:dd:b5:e1:39:0f:be:72:69:0a:8d:10:27:7e:f3:b9:48:d3:
9f:42:e7:df:d3:ba:bd:b7:19:25:89:93:89:32:77:9a:af:03:
61:55:b5:62:08:61:2a:fb:f7:66:95:40:ed:9a:fd:6f:96:bd:
07:04:20:19:90:5b:23:5c:b3:27:e4:40:b8:54:67:4e:ac:2d:
63:fd:07:3c:c3:78:d4:4d:27:c5:fb:42:b5:70:32:c3:59:7f:
a6:2e:b3:59:d8:0b:d0:b4:bd:42:b0:65:d7:48:30:16:7b:e6:
ff:e7:ed:e8:a1:9e:f5:56:af:89:48:ff:69:ac:bb:2f:d1:9d:
45:ba:5f:55:99:9f:52:d0:0a:7d:5f:4b:33:9e:f8:4d:d5:b1:
02:4a:04:fa:6b:a5:bc:28:b2:45:45:dd:4e:e4:a0:bf:f1:8a:
53:f1:8a:21:96:ff:9f:e8:e3:51:27:e0:d9:16:27:46:8d:9f:
b3:7b:08:91:78:bc:4e:f6:b9:00:b5:84:d7:c1:07:97:a8:f1:
e8:21:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:27:27 2026 by rpki-client