
Error: rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
File: 9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft (raw, json)
Hash identifier: eiI+Eg6gxOJgGcHzPKSWP/YiQ62EoGGqLlTASrSIPyw=
Subject key identifier: 36:19:C9:A6:B7:3F:5A:69:6E:3F:D7:55:3B:AA:AE:15:EF:2C:EC:FD
Authority key identifier: 9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A
Certificate issuer: /CN=9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A
Certificate serial: 5E5C64D9E4925414FD25DD198A54F594D316DCFC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
Manifest number: 0143
Signing time: Sun 23 Aug 2026 22:54:12 +0000
Manifest this update: Sun 23 Aug 2026 22:49:12 +0000
Manifest next update: Mon 24 Aug 2026 23:25:12 +0000
Files and hashes: 1: 323830343a66633a3a2f33322d3434203d3e203238313432.roa (hash: gxGUwYInU/cXPo6FO0uyxM7uQv7CVsTZQeYEamU41Ag=)
2: 9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl (hash: 1+ukSJQmy8M8OHGW/OSQVRPVKi9PYZLIv9w/4MHA2SY=)
3: 3138372e34392e38302e302f32302d3234203d3e203238313432.roa (hash: zUBlq/x68COuA46XVnFl7rB5ge8LpylXACnDY8q6ZZM=)
4: 3138362e3232342e36342e302f32302d3234203d3e203238313432.roa (hash: 6rf3efBbL3ie0sy6t4smXhivWZKrVcJU6V+vkYVmhgk=)
5: 3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa (hash: JVQm+LZke8TFKoh/uROt4QuB+jj2NewE+tDWC5pJHyo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl
rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 23:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5c:64:d9:e4:92:54:14:fd:25:dd:19:8a:54:f5:94:d3:16:dc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A
Validity
Not Before: Aug 23 22:49:12 2026 GMT
Not After : Aug 24 23:25:12 2026 GMT
Subject: CN=3619C9A6B73F5A696E3FD7553BAAAE15EF2CECFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:54:53:4f:c8:cb:97:a0:83:4d:9c:39:f7:
67:6f:12:1a:e9:43:cb:45:54:fe:11:97:72:4d:3f:
40:96:da:72:6f:01:06:af:19:4f:a7:76:7e:84:d1:
3b:7a:56:b7:e2:2b:75:0d:43:a3:5c:12:c6:75:02:
0a:35:a9:54:fb:11:82:ef:bd:ec:58:df:97:08:24:
48:dd:a8:df:ad:d2:91:31:63:19:ef:41:4b:fb:01:
1e:70:c1:dc:33:ec:0d:23:f5:43:3c:86:97:96:0b:
8e:a6:32:ee:a4:b8:cd:6f:c5:d7:c4:3b:02:ff:88:
ae:e6:fe:a9:44:60:98:c3:04:6c:8c:9b:82:99:08:
94:b8:01:e7:a7:08:5f:8b:f2:03:98:96:ea:b0:5d:
ab:29:94:f4:df:0a:6a:55:c4:71:fd:b5:1e:d2:a0:
9e:84:5a:08:d7:b0:ce:b8:c4:c4:e9:77:4a:44:16:
9f:3a:8f:c0:37:2c:fe:a1:07:e6:ef:d4:93:fc:78:
05:f8:d9:21:dc:ff:4a:ec:f2:b9:92:ea:ee:98:d5:
22:1b:8b:4a:03:cb:4e:16:88:79:6e:ac:b7:d1:32:
d2:d8:c1:d2:e9:2a:b3:a0:05:15:6d:11:c8:c5:2d:
b4:d0:a9:8a:12:3b:de:71:67:8e:90:3c:96:bb:fd:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:C9:A6:B7:3F:5A:69:6E:3F:D7:55:3B:AA:AE:15:EF:2C:EC:FD
X509v3 Authority Key Identifier:
keyid:9C:E8:F2:4E:E4:AE:8A:06:DA:EC:AD:7A:04:94:6B:88:E6:A9:14:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/9CE8F24EE4AE8A06DAECAD7A04946B88E6A9146A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:ac:f8:7e:7e:06:07:1e:b4:f9:b4:84:5b:24:b4:3e:f9:
ad:6e:eb:10:31:91:ae:5b:e4:14:32:82:ec:34:52:99:f6:df:
3f:2e:77:18:54:ed:9f:27:d3:77:bb:70:93:cb:31:ea:d2:13:
f5:29:4f:b8:5f:26:5b:a2:60:0c:8c:5e:98:a8:ad:84:49:ed:
c7:37:36:8f:27:bd:df:fe:6c:e7:a3:f0:fc:6f:b3:ed:78:b1:
6c:97:97:df:68:5d:28:b2:c2:59:31:9d:8e:78:c9:36:9c:c6:
19:10:89:4a:f7:d6:f5:6a:d9:11:a3:e7:9c:1b:4c:7e:66:d3:
f1:83:2a:d4:09:91:4b:cd:56:71:bd:d2:ee:87:88:ef:61:b5:
c8:29:36:fb:41:0d:de:6e:68:b4:dd:70:f7:76:77:93:f3:11:
34:46:af:ae:c2:8e:7e:8c:0c:94:f4:d4:16:2d:22:3b:ad:a9:
c0:65:a3:b2:1f:4e:63:11:e8:93:33:1d:a7:65:7c:2c:74:b7:
95:f2:fd:68:9b:7a:e4:48:29:b1:42:55:7f:1f:0a:5e:97:fc:
0c:79:ba:ea:86:05:2a:aa:c1:c0:5a:b4:09:6c:f1:50:92:3a:
4b:4a:33:cc:b9:72:f3:08:1c:2f:1d:d3:27:75:f6:28:82:17:
b1:71:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:18:25 2026 by rpki-client