
Error: rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.mft
File: 6AE448368C78ED5682E4A33DD290326A5194159E.mft (raw, json)
Hash identifier: DuSkif2OrQEPwDaaQZ6kPfJHS5d3nps3nWKrghSol1g=
Subject key identifier: F2:59:35:39:E6:DA:5B:06:AD:B5:C9:BB:7B:51:E4:86:FD:42:40:77
Authority key identifier: 6A:E4:48:36:8C:78:ED:56:82:E4:A3:3D:D2:90:32:6A:51:94:15:9E
Certificate issuer: /CN=6AE448368C78ED5682E4A33DD290326A5194159E
Certificate serial: 07572F95C248D7F56EFF3205A4B8B80BD7E2ACC2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.mft
Manifest number: 5D
Signing time: Sun 23 Aug 2026 11:34:56 +0000
Manifest this update: Sun 23 Aug 2026 11:29:56 +0000
Manifest next update: Mon 24 Aug 2026 14:17:56 +0000
Files and hashes: 1: 3137302e38322e3234382e302f32322d3234203d3e20323636343530.roa (hash: BmoQ0ZljDZgMaPZ3h+FCcsjQzrIhrsHRLhWCJDBUpls=)
2: 6AE448368C78ED5682E4A33DD290326A5194159E.crl (hash: 6zMyVQFQXj1qFfX2UhQM4GRmRYNTOdt1FFg28KJa/l0=)
3: 323830343a333830343a3a2f33322d3438203d3e20323636343530.roa (hash: C+Rg+1B7Fjmv0PVYuclE2OodMzTq4eeRAZg8B3PADqA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.crl
rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 14:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:2f:95:c2:48:d7:f5:6e:ff:32:05:a4:b8:b8:0b:d7:e2:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AE448368C78ED5682E4A33DD290326A5194159E
Validity
Not Before: Aug 23 11:29:56 2026 GMT
Not After : Aug 24 14:17:56 2026 GMT
Subject: CN=F2593539E6DA5B06ADB5C9BB7B51E486FD424077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:52:8a:fa:54:a9:a1:fe:32:93:6d:9a:0e:
3e:22:02:db:86:eb:1f:04:ca:13:01:aa:70:16:35:
59:bc:f2:98:16:61:1c:93:d5:09:80:37:e2:ff:00:
02:d2:65:e9:f2:5d:45:38:3c:7e:af:d2:11:79:13:
0b:a3:eb:72:3d:01:90:97:cb:bb:cb:65:1e:04:fb:
5b:62:4b:a9:dc:4d:d6:bf:16:a6:6c:2e:d7:10:54:
31:2e:e7:22:cb:8d:fc:82:09:7d:ae:5b:1a:0e:10:
22:f9:e7:f8:00:e6:20:4c:83:75:81:b2:12:6a:67:
a2:54:50:aa:af:98:48:f0:8f:e1:c3:d1:ed:e1:d6:
d4:1a:49:67:27:2d:f1:73:9b:9d:28:80:45:16:9b:
56:c5:cf:a3:04:02:2e:ba:e7:73:29:72:47:b1:6f:
ed:4a:7c:0a:d4:5a:0e:36:66:24:c7:56:23:89:c8:
7b:90:63:59:8a:09:22:8d:83:83:ec:47:82:a4:2b:
ef:e6:2e:72:3d:3d:4a:48:a9:2b:27:34:93:5a:7b:
7f:74:98:b9:aa:81:65:d2:45:70:a4:7e:ed:d8:97:
40:6d:ea:b4:2c:e3:b4:bd:23:d7:98:39:65:bd:2b:
56:75:ef:eb:11:64:75:b6:ea:4d:48:ae:6a:ea:2b:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:35:39:E6:DA:5B:06:AD:B5:C9:BB:7B:51:E4:86:FD:42:40:77
X509v3 Authority Key Identifier:
keyid:6A:E4:48:36:8C:78:ED:56:82:E4:A3:3D:D2:90:32:6A:51:94:15:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE448368C78ED5682E4A33DD290326A5194159E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew9vQ2G8pRxX3hPwh3mcxrQcDDw1544b4NPCQCRLzrfV/0/6AE448368C78ED5682E4A33DD290326A5194159E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:1e:88:29:6f:84:75:3d:47:b4:57:af:1e:d8:de:01:a8:
ba:2c:de:e9:60:ef:6c:ae:04:d8:7e:4c:37:bf:9f:0d:e9:43:
71:2f:ff:e1:3a:e0:e2:18:89:86:e3:86:c6:76:78:e3:92:29:
fd:96:13:35:33:c3:fc:a4:5c:48:91:c9:01:07:44:68:8a:64:
fd:75:b6:fa:fe:a8:80:f3:03:90:c2:fa:bc:10:d9:1b:43:24:
c9:a3:f8:bc:9e:63:ca:2b:84:9b:79:2c:85:7b:20:55:de:81:
38:f5:89:6a:65:6e:33:11:16:40:0b:77:e1:9a:f7:08:ba:73:
34:39:e8:f6:b2:da:10:95:a3:9c:67:05:96:59:43:3b:39:3c:
bb:cd:a9:6b:72:b5:a5:f8:1d:e2:9d:a4:b0:c9:46:0f:d9:1c:
48:72:3c:69:8f:96:c0:bd:1d:3a:8b:27:60:2e:bf:b6:79:b2:
4f:60:f2:5e:f6:60:f8:4d:a7:56:de:88:c2:71:33:0b:e3:65:
dc:41:7f:d9:bd:0c:fc:22:0c:55:e0:55:9e:43:06:fd:0f:08:
54:e5:41:40:4d:27:6d:1e:61:78:07:38:dd:08:30:32:aa:56:
b3:5f:04:74:33:c6:41:8d:03:8f:fb:8d:af:fb:f9:b2:be:52:
68:91:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:40:26 2026 by rpki-client