
Error: rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File: 2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier: uL46Uobp+vYweQg/REuAamhukETmyPiCXV2mtMOG280=
Subject key identifier: B0:01:45:58:42:6A:3C:92:F1:71:32:BA:C3:78:F8:DF:5E:CF:E7:AB
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer: /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial: 103F729CE0978A712286C5A56FBC48847C63E13F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number: 02A9
Signing time: Sun 23 Aug 2026 02:27:28 +0000
Manifest this update: Sun 23 Aug 2026 02:22:28 +0000
Manifest next update: Mon 24 Aug 2026 05:03:28 +0000
Files and hashes: 1: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: q4lJdcaLq2puSiZochBSHuOLkiS6gohdNhEik5FK0XE=)
2: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: qsIQ7eoS0YN6VNbkY2w77F9RrWulAixs0VqO92MOdKw=)
3: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: 0dgfAjZdFY2THoBYgdV2y3D/nsD1UP5IocHa1ixVBvk=)
4: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: kjESevkcKHDLDKZYh2WKapEabpqnHmyU/b9TpEeGocY=)
5: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: EBg+hygH3tyR1PCkSg1MnXlfxpy3mX3E6KIi9F5Szwk=)
6: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: EoVykA/7Art/ZTgGVArTxI4DOHRFURG2IregIPi5OBk=)
7: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: abQhG1dAzT3jW+P5WDuWLuQlMHWNlM3Uu5P6u/YKUfY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 05:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3f:72:9c:e0:97:8a:71:22:86:c5:a5:6f:bc:48:84:7c:63:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
Validity
Not Before: Aug 23 02:22:28 2026 GMT
Not After : Aug 24 05:03:28 2026 GMT
Subject: CN=B0014558426A3C92F17132BAC378F8DF5ECFE7AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:4c:ac:60:6e:ba:0f:45:ef:a0:c9:e6:38:
38:03:96:50:21:1d:47:f4:15:79:5a:65:1d:91:57:
24:f0:49:8a:a8:dc:16:f7:d7:63:4c:1d:06:fb:24:
cb:7e:c1:29:88:57:87:d8:be:b1:4d:13:94:11:ae:
1b:81:d6:97:ec:0a:c6:9c:b8:91:b9:e3:a3:e0:3d:
0f:f6:0b:51:11:a1:08:71:da:5b:21:ea:c8:bc:7c:
a3:fe:d5:61:d1:aa:4b:55:99:a5:8b:21:bf:67:66:
11:f7:57:1c:c2:58:38:c8:89:e0:c5:c3:99:65:a3:
13:89:2d:5e:11:e5:00:4d:11:7f:29:6b:2e:9b:e6:
aa:fd:73:01:ae:17:cc:9a:10:cf:3a:d0:cf:00:01:
05:f1:fa:11:7c:5d:a9:d3:ca:24:5a:a7:4c:17:88:
93:31:ee:e0:3d:b7:9c:da:87:05:81:76:68:f9:58:
c3:d7:69:17:42:a2:95:fc:83:90:64:a6:16:1a:19:
2a:b8:16:d8:61:26:0f:6d:8b:60:c4:64:ce:4d:ac:
09:69:45:59:23:1d:f9:56:3a:f6:ff:db:26:52:0c:
c9:83:0e:08:a2:08:55:5d:84:53:84:6e:7a:d7:1c:
42:62:7e:a4:f9:99:26:00:ab:d2:f9:44:d3:6f:bc:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:45:58:42:6A:3C:92:F1:71:32:BA:C3:78:F8:DF:5E:CF:E7:AB
X509v3 Authority Key Identifier:
keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:05:9e:40:c5:85:5b:b7:a3:5c:98:11:10:02:6a:67:d6:
7c:cd:e2:a1:41:34:95:8a:74:de:20:bd:72:c7:8a:ed:04:a6:
11:e7:9f:d7:a0:f5:e7:dd:15:9a:be:b9:35:9b:d8:52:bd:6f:
77:f5:4b:aa:5d:dc:45:34:f4:ec:91:3c:b1:6b:8d:4f:1a:d0:
e3:85:63:b2:41:2c:76:94:b3:06:b1:fc:b7:2b:7e:28:6c:60:
00:d2:a9:77:b2:04:2e:11:45:ef:fe:cb:a7:c7:08:68:ee:da:
1f:d3:9e:e3:eb:cb:20:d0:a9:01:9c:0d:ce:3c:d2:97:49:22:
fa:85:61:2b:97:2a:41:4a:98:8d:04:2e:4b:5d:d5:2e:4c:7b:
57:a8:3f:65:32:a0:b0:67:e8:3e:aa:47:5a:92:7a:eb:60:9e:
f5:10:eb:75:7d:ff:bf:b6:c2:53:36:c5:3f:87:1e:62:b4:b8:
ea:c2:ae:4e:9a:63:44:72:2e:b5:e5:28:2d:f2:51:0a:b3:32:
54:a1:ca:35:68:24:3e:72:e2:d6:6e:e8:84:18:fd:8b:62:cf:
5b:55:32:56:bd:82:db:9b:ff:47:2e:e0:b5:c9:10:33:3e:c9:
90:9b:aa:a1:57:53:60:0f:1d:8b:83:66:2e:c3:d5:9a:71:14:
6f:03:c2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:00 2026 by rpki-client