
Error: rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
File: 38025C3CE376357918C078D8E62D989FFD0406EC.mft (raw, json)
Hash identifier: zQJDZQnHO1+EZo8Ib1nuYRC2ViKWdGJnibe72HhEjsw=
Subject key identifier: 94:ED:14:7D:E3:D6:49:0F:C6:DE:E6:E4:B9:F6:06:DB:7A:D3:44:20
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Certificate issuer: /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial: 6DF8F5A9F175B969C9517DF5E8AACB2DE8050940
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
Manifest number: 02C2
Signing time: Wed 26 Aug 2026 01:27:38 +0000
Manifest this update: Wed 26 Aug 2026 01:22:38 +0000
Manifest next update: Thu 27 Aug 2026 02:48:38 +0000
Files and hashes: 1: 323830343a363562303a3a2f33342d3334203d3e20323639353038.roa (hash: EDCfn6oynQT3R3yeqSoY9P+8UfblREPSkV4W/6jaqcg=)
2: 34352e3138382e33362e302f32322d3232203d3e20323639353038.roa (hash: 8Y9cwsicd7ssRYtf4GhlQl56ztU2B1sEB0hFpkHapNk=)
3: 323830343a363562303a3a2f33332d3333203d3e20323639353038.roa (hash: +A7zzU7bTLSSFQfadytsSKjUxA3nlXymDFeqIYEvMuc=)
4: 323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa (hash: gKc42cGuJIdoMc3N+Js94T/5SL6mKRzKfBof7yhAleQ=)
5: 38025C3CE376357918C078D8E62D989FFD0406EC.crl (hash: 8JtFy/eGoTbXi/mHsDU5+N2+d+jZzjVphtQP4+U8ey8=)
6: 34352e3138382e33392e302f32342d3234203d3e20323639353038.roa (hash: fQK3oZ3mYuNGJ6xh7SqVR9SDJcHeuElEfxufkEglT7U=)
7: 323830343a363562303a3a2f33322d3332203d3e20323639353038.roa (hash: JYTFsOQJtOl1NvXiYH4+OkFt5T+ylM/jbQu/PtPbS4Q=)
8: 323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (hash: TtjNtIZ4bayz+JZUWvqj5Shxs0SwuFgjrdiUBM7KGPs=)
9: 323830343a363562303a383030303a3a2f33332d3333203d3e20323639353038.roa (hash: MfA0eBS0Ez/zOP5aHJpBQztkCral33Ue8nDKh6W/5ns=)
10: 323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa (hash: /NMhI8ViwG4cNwErt817DpkBA6TCkvnrCuiHm5GWO1g=)
11: 34352e3138382e33362e302f32342d3234203d3e20323639353038.roa (hash: JiWgbhT1XyL7blsufFYXJ+JXY9ljXG3pFj8o0l+jtTw=)
12: 34352e3138382e33382e302f32342d3234203d3e20323639353038.roa (hash: MdjxpgVOMjK+A4LIEhyA181YoYxDbJdVbe3Q/sPEzKc=)
13: 34352e3138382e33362e302f32332d3233203d3e20323639353038.roa (hash: FJhOSo542cZ9owRTVr1rqR4DYzfZCAS3WD5ttBqsHlw=)
14: 34352e3138382e33372e302f32342d3234203d3e20323639353038.roa (hash: CXNIUkHVnFLzDR38hQtoFipItKJpdiIy+E/ft4RLWk8=)
15: 34352e3138382e33382e302f32332d3233203d3e20323639353038.roa (hash: l4FKAGPJY3vada7rvFyrSHGFLBex90dJPURPwEhioDg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 02:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f8:f5:a9:f1:75:b9:69:c9:51:7d:f5:e8:aa:cb:2d:e8:05:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
Validity
Not Before: Aug 26 01:22:38 2026 GMT
Not After : Aug 27 02:48:38 2026 GMT
Subject: CN=94ED147DE3D6490FC6DEE6E4B9F606DB7AD34420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:d3:ae:d3:b0:b7:42:e1:63:1a:e8:8e:ce:
06:8f:66:30:ff:53:f6:2f:66:a7:8e:e5:31:65:58:
c8:53:04:b8:f0:ad:8b:21:78:83:51:69:a9:b8:01:
cb:f2:de:f4:7d:1f:17:45:e1:16:d6:e7:7e:a0:4c:
e5:88:1c:ad:da:57:fe:b7:06:13:2e:bf:b0:dd:c6:
30:6a:12:86:e7:9a:db:69:d4:17:f7:2e:d7:55:4e:
ef:01:70:5d:d4:57:7d:22:4a:c1:81:a5:c8:de:ce:
7e:c8:ec:8e:bf:ae:50:df:c7:a2:0d:ff:44:fe:d9:
87:94:10:a7:0f:6e:37:82:7f:63:86:98:aa:ba:33:
e4:d6:c5:ad:ce:f8:d1:1f:63:23:90:5d:5e:ff:11:
fb:f8:e1:33:9a:cd:96:13:8e:d8:9f:e3:f2:ac:19:
d1:42:16:77:ca:80:c6:7e:f6:65:a0:5a:74:1e:6d:
41:1f:e9:c0:a6:b8:cb:dc:fb:e0:80:9a:5d:39:1b:
6a:7d:00:24:94:2a:d3:3d:fc:d4:63:04:88:c7:1c:
64:ac:5b:dc:a9:65:49:5c:02:9b:64:4f:62:e4:19:
53:a0:38:a1:04:59:91:80:6a:d0:0b:26:78:b0:24:
7a:9a:17:f5:c4:da:34:6b:bd:0d:11:33:1d:24:9a:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:14:7D:E3:D6:49:0F:C6:DE:E6:E4:B9:F6:06:DB:7A:D3:44:20
X509v3 Authority Key Identifier:
keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:c1:7c:90:11:0d:0f:00:94:de:6e:fd:6b:2e:28:1b:e5:
be:f1:29:08:6a:e1:78:6e:4c:10:a9:4e:30:90:98:0b:73:45:
70:52:42:fa:41:58:a5:5e:86:1a:05:c4:05:15:bc:1a:a0:23:
6f:ef:a1:81:5b:62:07:af:66:78:71:28:19:e5:85:65:19:2a:
37:d1:52:4b:7b:66:b5:ea:d3:dd:61:b3:b7:f3:cc:f1:b2:19:
6c:86:a1:8c:b8:99:f9:ad:c7:13:68:ba:07:01:8c:c3:44:c7:
9a:13:a0:60:4d:cd:51:7e:c6:a6:b2:b2:6a:6c:f3:ae:87:16:
d5:ae:25:02:1f:85:20:2c:32:17:59:49:6a:f2:d2:8e:20:ef:
6f:f5:48:47:25:31:e4:c6:98:6b:44:9f:83:46:7d:39:fd:ab:
ef:6d:26:de:a4:62:73:3a:c4:70:8e:ee:4a:59:f4:35:a6:7c:
98:6a:2f:ac:dd:0e:85:c7:e2:ee:c4:19:52:f6:34:55:5a:92:
f8:2f:37:d9:45:45:ef:0f:ff:66:ef:b4:c8:1d:49:fb:3f:6d:
3a:3c:4b:41:dc:f3:f4:24:3b:d1:e4:f2:d4:31:23:5d:b7:0e:
da:e2:85:75:b0:9d:a6:f2:61:f4:71:7a:c3:0d:95:b3:e0:9b:
29:b7:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:18:53 2026 by rpki-client