
Error: rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
File: 14192F81BFB80609F9E95DD8D288AEECE7B52938.mft (raw, json)
Hash identifier: nSFjqlG3/tuvLE3s6Gpxqc1oWKPYvPme/iMRGsQlcxk=
Subject key identifier: 91:87:3A:3A:AB:0F:C8:16:5E:D2:2E:FD:0E:58:16:E0:24:0E:76:BD
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Certificate issuer: /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial: 5E429B636986FE578B19190E44559F3753BCB35A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
Manifest number: 01A9
Signing time: Wed 26 Aug 2026 05:17:21 +0000
Manifest this update: Wed 26 Aug 2026 05:12:21 +0000
Manifest next update: Thu 27 Aug 2026 05:22:21 +0000
Files and hashes: 1: 323830343a326639303a3a2f33322d3332203d3e20323634383939.roa (hash: DCxuag5uxR5m9JNd0s9wPTbpAChA2rnAmrDYXGf4iKU=)
2: 3136382e3232382e342e302f32332d3233203d3e20323634383939.roa (hash: +jOrRaBj3DbjkySuyKQ7WRccSbco2X6KD88MQ4mcpsI=)
3: 14192F81BFB80609F9E95DD8D288AEECE7B52938.crl (hash: sAHS97ugoisU/R46FB3YMDXsfecxiaD1ax9PvQJXWNA=)
4: 3136382e3232382e352e302f32342d3234203d3e20323634383939.roa (hash: ErOJo9YPovrQJtUrw0azeHhFPZnQbUayp6IvIKjlB58=)
5: 3136382e3232382e362e302f32342d3234203d3e20323634383939.roa (hash: MhqWKxQ8zmXnU3Q37+iUbKSiM/3ORaLawK6Kbv1nxBE=)
6: 3136382e3232382e362e302f32332d3233203d3e20323634383939.roa (hash: 7OQjmmQzsveaBgIguRiJaDFiPWevd18QvzX81NjX9Cw=)
7: 3136382e3232382e372e302f32342d3234203d3e20323634383939.roa (hash: 64eC0ByMQUhJowB9tjMnvjfPD/0J57tLB5Fz/cqnxsM=)
8: 3136382e3232382e342e302f32342d3234203d3e20323634383939.roa (hash: vCHnjRdU0BYB/3m8PivRx3Qzsc6f6pwMV3m34HOXzkI=)
9: 3136382e3232382e342e302f32322d3232203d3e20323634383939.roa (hash: Y7zML/Juukvp/KZGtYsNtJButjMEmU5eoBcxWXIV14s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 05:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:42:9b:63:69:86:fe:57:8b:19:19:0e:44:55:9f:37:53:bc:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Validity
Not Before: Aug 26 05:12:21 2026 GMT
Not After : Aug 27 05:22:21 2026 GMT
Subject: CN=91873A3AAB0FC8165ED22EFD0E5816E0240E76BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:10:16:ee:77:c5:9a:cb:3b:e7:fc:37:0f:
2c:e2:fc:6e:26:a7:d6:09:99:b9:c4:68:93:b6:90:
f8:52:11:8e:ce:63:b4:2e:57:1c:a1:f1:c6:20:a3:
52:d2:4f:9b:7f:68:06:50:40:77:e8:da:f0:88:aa:
84:73:fb:98:47:30:d0:a2:bc:c1:78:1e:87:76:e5:
76:92:4a:b0:9b:b6:30:9a:9e:72:90:96:4b:dd:7f:
05:0a:c4:eb:9a:5b:2e:92:85:69:bc:83:5d:06:c8:
78:28:42:ce:54:3f:5c:83:b8:5f:13:48:24:74:da:
37:a7:4f:21:25:a6:41:ae:09:d0:83:ba:84:3c:d0:
26:3c:b3:51:21:10:db:b9:04:9e:e3:60:ad:a6:bb:
ea:20:4d:b5:fd:b7:cf:80:72:08:e7:94:d1:95:47:
0c:91:2c:72:0a:f4:bc:69:a1:ad:e4:ec:24:b3:c8:
d3:09:ce:33:57:2d:9d:9c:12:49:01:4d:5a:0a:31:
c1:c7:f4:88:2f:cc:ec:ad:54:f4:99:cd:ec:29:65:
62:3e:bd:16:52:f2:7a:50:8b:5f:a7:5d:72:30:b7:
f8:fb:ca:fd:98:e7:89:40:f0:2a:c7:ca:83:9c:66:
55:ed:f8:51:e1:44:75:31:83:8a:eb:fc:39:9e:27:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:3A:3A:AB:0F:C8:16:5E:D2:2E:FD:0E:58:16:E0:24:0E:76:BD
X509v3 Authority Key Identifier:
keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ce:9e:35:b8:86:d3:61:26:a0:1a:c1:60:58:0a:31:f5:2e:
72:ec:a1:24:6b:74:38:8f:fa:64:c6:6e:26:41:be:60:0d:b5:
fc:54:89:30:7a:bd:9d:8a:e6:00:32:bc:40:7b:ab:03:01:40:
ca:ab:f9:0e:44:d5:a4:bb:28:cb:dd:6b:c1:0a:94:15:f0:d1:
f5:fc:6e:c0:f3:df:b7:4c:80:67:ac:18:d4:b8:b8:c0:da:ea:
6f:71:9e:1a:e0:54:45:bc:2e:c5:c9:fc:9b:de:a1:fa:0f:a2:
da:9c:e2:c8:3a:01:9a:b5:e1:71:9a:c7:82:5d:95:5f:04:77:
21:67:d5:f7:1f:fb:72:e0:0f:40:52:f8:fb:49:c1:a1:8f:a0:
9c:45:72:f7:8c:f4:c3:48:25:92:47:dc:8d:ee:62:de:8c:52:
cc:2a:3b:2a:63:c9:d6:e5:07:87:03:55:35:80:2b:f8:4b:b2:
8a:12:49:60:ef:a7:5c:ea:64:9f:80:d0:7a:65:92:ec:c6:ba:
ed:d6:b5:d0:62:80:d7:34:71:54:94:d4:d8:1f:10:c6:05:29:
a0:32:68:27:5f:e3:44:54:90:af:ac:0c:ed:f1:65:75:42:3a:
63:44:57:ae:a3:b1:1f:10:48:5d:96:32:04:53:0a:3c:6a:a8:
0a:7e:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:16:14 2026 by rpki-client