
Error: rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
File: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft (raw, json)
Hash identifier: +rIl922xzM/GiAqX1ujdt1hD6zkMbSOKneabTCB/pgI=
Subject key identifier: A8:05:CE:5F:BE:A6:E0:B8:FC:96:E0:9D:4F:1F:DF:F1:EC:99:97:8E
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Certificate issuer: /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial: 5C6DAE64A116588FC9D353E71FF14F9E2AF2F218
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
Manifest number: 048A
Signing time: Sun 23 Aug 2026 10:20:03 +0000
Manifest this update: Sun 23 Aug 2026 10:15:03 +0000
Manifest next update: Mon 24 Aug 2026 13:34:03 +0000
Files and hashes: 1: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl (hash: kcRXVZTbQjcKGZdpJsesu2BJxgwGfHRNINgazGxaFGY=)
2: 323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (hash: g6OZSpwen1cePyDlND9tKg+HeJctA2FCr4CbcxbWtE4=)
3: 34352e372e35322e302f32322d3234203d3e20323733333435.roa (hash: NiZJYVVGZ0ftfwXmx9j8c/iOChmGAdbQaXcJVtzmGF0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6d:ae:64:a1:16:58:8f:c9:d3:53:e7:1f:f1:4f:9e:2a:f2:f2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Validity
Not Before: Aug 23 10:15:03 2026 GMT
Not After : Aug 24 13:34:03 2026 GMT
Subject: CN=A805CE5FBEA6E0B8FC96E09D4F1FDFF1EC99978E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:e6:2d:d4:d4:07:00:cf:21:86:f9:79:de:
9b:57:4b:53:f4:2c:5f:dd:2d:fe:3c:12:5c:36:22:
f5:8b:04:66:1b:cf:82:55:b0:ab:18:de:32:47:63:
42:44:18:59:b2:c6:d7:83:65:09:ce:93:c1:36:20:
26:7f:42:82:59:98:da:1e:a4:0d:ec:de:fb:e9:04:
f9:91:ff:f0:e9:e1:6a:09:77:28:df:fb:f1:c9:6a:
f2:d6:cc:ea:9e:fa:47:c8:00:cf:8f:82:1d:83:dc:
db:d6:d8:32:44:e7:82:92:a2:48:32:ca:44:d7:39:
53:da:e7:66:cb:e4:e4:f8:10:06:f4:8c:c1:58:2b:
be:14:49:47:ad:51:be:bd:40:bd:77:dd:04:1f:a7:
a8:3d:4f:68:14:a2:7f:11:05:2b:84:d2:eb:8e:1f:
96:ba:86:02:4a:15:10:65:3c:39:d6:e3:d1:c5:ef:
04:88:f5:2a:1e:63:79:25:ee:95:66:af:e9:47:2f:
67:2c:8b:16:c5:e5:fa:05:0e:ff:af:43:4f:68:2c:
c4:07:f6:3b:b3:bb:4b:ad:9b:fe:ce:47:95:6e:42:
a2:13:d7:97:bf:d3:fd:3c:75:ad:a7:80:85:45:9d:
06:f6:00:f9:4f:ba:ab:57:43:6b:be:a3:bc:1a:b0:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:CE:5F:BE:A6:E0:B8:FC:96:E0:9D:4F:1F:DF:F1:EC:99:97:8E
X509v3 Authority Key Identifier:
keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d1:71:5d:bb:e5:02:4a:17:d4:73:fd:b5:19:a2:4d:b9:5d:
59:93:33:70:0d:27:ff:34:d2:7e:e8:ee:a6:25:1c:5c:6a:c5:
b7:4b:9b:ce:5b:88:b4:98:ba:60:06:bb:11:1b:e2:93:ea:d4:
4f:df:2a:0a:0c:d1:89:79:8e:a1:6f:dc:49:a5:82:d7:16:0b:
8f:b2:d6:fa:6c:2b:64:a5:39:9e:05:60:3b:85:7b:49:78:04:
48:14:fd:57:c7:ca:ec:21:84:c3:6e:f3:ea:65:ff:78:d9:46:
64:aa:de:ca:bb:c7:ac:cf:65:c0:f8:40:36:cb:7e:8e:1f:63:
a0:6a:68:50:b3:0f:3b:4b:e1:f6:9f:b4:f0:5b:86:95:30:4f:
c5:4c:00:6a:d1:7c:3f:d6:da:f7:b9:75:1b:4f:a9:26:e4:ea:
2e:26:3e:a5:82:29:bf:53:ab:7f:f5:ed:f7:ad:3e:10:fe:4f:
9a:31:dd:bc:d3:02:a5:e9:29:20:86:a4:6f:8f:4d:fb:9b:e1:
ec:6a:e5:78:25:25:8f:df:9e:c1:5a:05:ea:cd:d6:b8:aa:dc:
d6:32:f2:be:5b:ed:f4:f2:64:a7:1d:92:d3:92:d8:1d:cb:60:
f3:95:2d:b8:30:2d:a7:24:2c:a9:95:7b:2f:f8:14:0b:7a:04:
05:b4:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:59:09 2026 by rpki-client