
Error: rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
File: E3A05660BB6F81841BB49DE532F64F592B23928E.mft (raw, json)
Hash identifier: NOr0IVLxhU8xh2FpGmCUa0xJuswvN+sVAUWdJciciKA=
Subject key identifier: E4:5B:B0:E0:A1:A1:A1:D0:7A:E2:8D:59:C2:B6:3A:E3:F6:AF:E3:FA
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Certificate issuer: /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial: 2B5FF5C3638FC54F220F6F4F3881FF58CB5A566D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
Manifest number: 044C
Signing time: Sun 23 Aug 2026 07:59:10 +0000
Manifest this update: Sun 23 Aug 2026 07:54:10 +0000
Manifest next update: Mon 24 Aug 2026 08:49:10 +0000
Files and hashes: 1: 3230302e3138392e34382e302f32312d3234203d3e203134323034.roa (hash: 6RqNEXlxCzioiGINKjRgfvoywpmMPp0+BQ3mMCosjPU=)
2: 3230302e3136302e34382e302f32302d3234203d3e2038303535.roa (hash: YEbbcGd5F8F3/LvKoJpQeFhF1PEVmYpwu85IyiA6ejQ=)
3: 323830343a336135303a3a2f33322d3438203d3e203134323034.roa (hash: QtgSsT14pS4faZtmy7Pa13OV3pE1gsEbo3xQGIMw5A0=)
4: 3138372e38342e39362e302f32302d3234203d3e2038303535.roa (hash: LV+/fj6k6BwWSBzwtRSHmlXlTcH9RqX5MYs/9X3JAg8=)
5: E3A05660BB6F81841BB49DE532F64F592B23928E.crl (hash: nixrJ7glxZUUFuwScgNG/VQ7b+KlytLwxf5TMusQj2I=)
6: 323830343a34633a3a2f33322d3438203d3e2038303535.roa (hash: fjPGfJEXrjy+0rwgKLyrS4lpcql9qJ/K8w20IiabxwM=)
7: 3230302e3134322e3234302e302f32302d3234203d3e203134323034.roa (hash: vmmgiIj74hcV/N3hADmGOb/CBWbt/U8pHaWzgIMb998=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 08:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5f:f5:c3:63:8f:c5:4f:22:0f:6f:4f:38:81:ff:58:cb:5a:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Validity
Not Before: Aug 23 07:54:10 2026 GMT
Not After : Aug 24 08:49:10 2026 GMT
Subject: CN=E45BB0E0A1A1A1D07AE28D59C2B63AE3F6AFE3FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d8:04:39:e5:e6:32:65:49:91:56:bd:b2:e2:
47:7b:c9:95:36:6a:0a:2d:b5:4f:66:46:bd:89:ae:
03:57:d3:61:e0:f9:d9:a1:4e:56:2f:90:ed:fc:fb:
92:2f:b4:21:b5:fb:e8:86:7d:7b:fa:04:3c:33:a2:
97:05:0e:5a:b9:4c:53:38:b1:19:20:5a:71:e7:e0:
80:cb:2f:91:ee:19:74:75:03:07:bf:13:7e:60:e9:
4e:df:d8:fb:4d:fc:f2:7e:0f:1d:87:86:f6:70:fb:
d4:8a:2f:7f:5d:b7:96:52:51:c6:5a:4d:00:89:81:
57:ab:3f:a2:d3:81:cd:fb:25:ee:2b:77:cb:25:df:
6c:ed:4a:84:fd:2e:1e:c0:d2:93:aa:78:d3:bc:c2:
d1:36:9e:a0:09:d7:61:f8:d8:eb:c3:42:82:25:be:
f3:8e:55:24:be:56:33:21:f3:0c:bf:77:a8:58:5d:
fc:8d:1a:b8:90:18:03:a3:46:3c:ce:5b:e3:f9:3c:
33:67:13:33:59:49:8c:96:ee:58:d2:a3:ae:1b:e4:
0b:60:20:ee:46:77:04:7b:53:f4:34:41:09:96:ff:
72:f8:98:ab:79:b1:fe:4b:1d:66:e7:12:d2:1e:61:
41:58:c9:8e:35:f8:4e:a8:7c:0b:a1:6f:1a:b0:97:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:B0:E0:A1:A1:A1:D0:7A:E2:8D:59:C2:B6:3A:E3:F6:AF:E3:FA
X509v3 Authority Key Identifier:
keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:2d:fb:b9:3c:30:4a:38:40:41:8d:a1:df:de:c6:8b:61:
4c:60:16:0a:ca:f1:37:c2:06:99:69:05:da:a3:dd:6a:df:50:
33:d4:7b:6a:14:ee:b5:65:15:8f:ff:bb:f8:09:0f:d5:8b:61:
09:b2:bf:9e:88:36:76:86:d0:76:95:0e:38:dc:f3:91:93:7a:
ca:d8:3c:45:ce:6b:35:0e:4a:19:f0:86:d4:77:bd:2a:51:d7:
64:a3:41:a5:e8:91:f8:56:14:ad:06:95:1d:29:89:6f:39:b6:
5c:20:50:95:32:07:c4:90:a8:ee:85:8a:96:11:f2:c8:67:09:
7a:16:50:c5:38:8a:50:ac:c6:4b:4b:17:49:2b:8a:34:b1:78:
51:b2:b6:aa:dd:a6:cc:fb:dd:bc:9f:17:5e:44:0f:3a:d7:a1:
fe:ad:ac:b9:bc:47:ea:c9:ec:db:f2:39:71:7b:a5:65:fc:5b:
d9:0f:e3:d7:e7:a2:6f:e6:cf:b2:cc:0d:6c:f9:22:9a:3e:44:
6d:74:a1:de:2a:3d:42:ed:e6:d8:16:1c:93:5a:79:46:0c:4d:
0f:b5:f2:5e:4a:cc:ca:8e:f3:1c:7e:a5:cb:c8:21:c9:7e:67:
e3:f6:22:03:c2:0b:39:b1:51:b3:77:2c:6b:a2:27:6c:5c:4e:
b2:55:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:38:08 2026 by rpki-client