
Error: rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
File: 5FBCB1EF158A0F369859F4CE22712203039C8002.mft (raw, json)
Hash identifier: +K4ypEId6NCoen7HURzmFTn+lb2KfN1rKMw6KgwPKp0=
Subject key identifier: 34:D6:8C:EE:3F:5E:C9:DB:C0:78:3F:92:AA:74:42:9B:9F:78:E3:E0
Authority key identifier: 5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02
Certificate issuer: /CN=5FBCB1EF158A0F369859F4CE22712203039C8002
Certificate serial: 05CA711739C9EFFE023B1AE5E59760A62FB7E84D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
Manifest number: 041E
Signing time: Mon 24 Aug 2026 15:57:58 +0000
Manifest this update: Mon 24 Aug 2026 15:52:58 +0000
Manifest next update: Tue 25 Aug 2026 17:54:58 +0000
Files and hashes: 1: 3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa (hash: kSX6YU7UnrMUBUbZWVy3eS+LdLrfz4nY3Gxdb9aCXlQ=)
2: 323830343a326163303a3a2f33322d3438203d3e20323634303932.roa (hash: RTPnXJRbX0AW/MfP8doTT1aeb7JijKfyGvTv3hfTkX8=)
3: 5FBCB1EF158A0F369859F4CE22712203039C8002.crl (hash: kdXLJhGvVz9Tuapy8hOsuBHHSw1c6zRootrn2goyypw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl
rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 17:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ca:71:17:39:c9:ef:fe:02:3b:1a:e5:e5:97:60:a6:2f:b7:e8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FBCB1EF158A0F369859F4CE22712203039C8002
Validity
Not Before: Aug 24 15:52:58 2026 GMT
Not After : Aug 25 17:54:58 2026 GMT
Subject: CN=34D68CEE3F5EC9DBC0783F92AA74429B9F78E3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:f5:ba:93:3b:70:58:04:02:9c:43:a1:c4:
10:54:64:18:78:22:be:6b:f1:fa:c4:f8:8c:35:5e:
12:4d:35:d1:53:08:95:ef:03:2f:8d:ab:11:de:12:
54:4a:5b:85:33:5d:43:08:5d:44:f6:5c:04:ba:b2:
8d:4a:ed:c5:f3:89:78:42:58:62:47:d6:90:73:49:
6a:9e:72:74:b1:d1:43:fe:97:c0:52:d6:83:86:95:
b7:7d:f9:52:e8:1c:2e:26:f2:69:4c:fb:58:a8:3f:
83:a8:31:a5:5d:0c:87:ef:6a:bf:db:9c:9c:20:31:
e4:6b:d2:b9:47:3b:bc:51:23:e6:f2:c3:27:bd:32:
f2:59:b0:f3:33:c3:4e:30:d1:81:9f:f4:5d:2e:f0:
0d:0c:72:de:b6:eb:85:2b:da:53:54:80:63:86:05:
9b:4b:4f:da:0e:c4:25:e9:c3:27:a8:ac:29:38:76:
72:7e:8b:2d:3c:72:67:27:45:fe:33:39:7a:da:8a:
f3:f2:00:da:ff:f9:b1:dc:9e:03:9c:e2:eb:50:34:
01:7d:7c:44:34:39:27:c0:c7:30:41:fa:f0:5c:16:
4a:61:c7:d4:41:3a:60:b0:14:7b:ae:e8:6c:cd:92:
66:c2:63:da:4d:76:5f:38:42:9f:b1:15:9e:21:8e:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:8C:EE:3F:5E:C9:DB:C0:78:3F:92:AA:74:42:9B:9F:78:E3:E0
X509v3 Authority Key Identifier:
keyid:5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:4b:c2:ec:5b:a2:e5:36:f4:31:21:2f:1f:9b:95:e4:08:
ba:6b:98:d4:f4:fe:a5:eb:69:77:4d:5f:52:a9:55:57:fb:4f:
91:be:5f:81:38:4c:75:2d:99:cf:0f:30:f5:ad:71:01:e6:90:
63:2d:77:ce:d5:32:3d:f8:42:fb:6a:1c:27:d4:e8:cd:8f:72:
9d:c3:cd:9e:19:3e:00:81:f3:d5:14:d2:6d:5e:b5:3d:57:d3:
f8:08:d0:4c:a0:27:cd:70:17:5e:66:17:a2:f7:bd:11:a1:7f:
47:ad:07:66:90:0b:14:8e:8b:c4:82:e1:41:5a:3b:e7:43:80:
9f:42:78:5b:db:23:e8:83:9b:3e:38:55:b1:58:06:f7:6f:70:
02:75:a3:29:b5:00:1d:5f:01:71:a8:bf:36:4f:b7:e5:85:1a:
59:03:86:5f:3e:89:84:ea:08:bc:cc:c7:ca:e7:cb:7c:19:d6:
f2:ff:35:ec:11:9d:ac:78:31:49:b0:f4:e4:6d:16:fe:ec:59:
4b:70:7e:52:32:00:15:1f:61:1a:18:56:8b:6f:9c:d8:0d:16:
d6:88:bb:9b:5b:90:c0:fb:20:0d:df:e1:ea:ad:24:84:2a:83:
ba:5d:bb:16:fd:5e:8d:03:5e:1a:84:49:47:30:9a:14:3a:c7:
b1:ac:18:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBcpxFznJ7/4COxrl5Zdgpi+36E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCQ0IxRUYxNThBMEYzNjk4NTlGNENFMjI3MTIyMDMw
MzlDODAwMjAeFw0yNjA4MjQxNTUyNThaFw0yNjA4MjUxNzU0NThaMDMxMTAvBgNV
BAMTKDM0RDY4Q0VFM0Y1RUM5REJDMDc4M0Y5MkFBNzQ0MjlCOUY3OEUzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4fW6kztwWAQCnEOhxBBUZBh4
Ir5r8frE+Iw1XhJNNdFTCJXvAy+NqxHeElRKW4UzXUMIXUT2XAS6so1K7cXziXhC
WGJH1pBzSWqecnSx0UP+l8BS1oOGlbd9+VLoHC4m8mlM+1ioP4OoMaVdDIfvar/b
nJwgMeRr0rlHO7xRI+bywye9MvJZsPMzw04w0YGf9F0u8A0Mct6264Ur2lNUgGOG
BZtLT9oOxCXpwyeorCk4dnJ+iy08cmcnRf4zOXraivPyANr/+bHcngOc4utQNAF9
fEQ0OSfAxzBB+vBcFkphx9RBOmCwFHuu6GzNkmbCY9pNdl84Qp+xFZ4hjjevAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNNaM7j9eydvAeD+SqnRCm5944+AwHwYDVR0j
BBgwFoAUX7yx7xWKDzaYWfTOInEiAwOcgAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVlEbjdpOG9jYmdGNEhSTm5yc1llZUI4SDlnRWZvYVlZd1dmUU1idEpT
U3kvMC81RkJDQjFFRjE1OEEwRjM2OTg1OUY0Q0UyMjcxMjIwMzAzOUM4MDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQkNCMUVGMTU4QTBGMzY5
ODU5RjRDRTIyNzEyMjAzMDM5QzgwMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVlEbjdpOG9jYmdGNEhSTm5yc1llZUI4SDlnRWZvYVlZd1dmUU1idEpTU3kvMC81
RkJDQjFFRjE1OEEwRjM2OTg1OUY0Q0UyMjcxMjIwMzAzOUM4MDAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfb5LwuxbouU29DEhLx+bleQIumuY1PT+petpd01fUqlVV/tPkb5fgThMdS2Z
zw8w9a1xAeaQYy13ztUyPfhC+2ocJ9TozY9yncPNnhk+AIHz1RTSbV61PVfT+AjQ
TKAnzXAXXmYXove9EaF/R60HZpALFI6LxILhQVo750OAn0J4W9sj6IObPjhVsVgG
929wAnWjKbUAHV8Bcai/Nk+35YUaWQOGXz6JhOoIvMzHyufLfBnW8v817BGdrHgx
SbD05G0W/uxZS3B+UjIAFR9hGhhWi2+c2A0W1oi7m1uQwPsgDd/h6q0khCqDul27
Fv1ejQNeGoRJRzCaFDrHsawYIQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 23:44:34 2026 by rpki-client