
Error: rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier: ZT3Y1PwDsuhFsMKaG8b1qzkwMu3X4SzK45hGSnxwibA=
Subject key identifier: C3:99:76:3F:A9:35:2A:C7:43:C3:A1:EC:EF:48:AC:B7:73:E5:A4:5A
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial: 338AE0CB1F4B94122544F1CA4368D186258F43D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number: 0491
Signing time: Sun 23 Aug 2026 22:39:07 +0000
Manifest this update: Sun 23 Aug 2026 22:34:07 +0000
Manifest next update: Mon 24 Aug 2026 23:52:07 +0000
Files and hashes: 1: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: jZvkEDQ4L4NQB6OjKFb6W9aA3aDtz8Q6n2rEJg4Z9p4=)
2: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: zEuZSqn5bZ8xb1825r2MOOLgbSmhE1/+gK04rIH8GSc=)
3: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: L9B5MGzXntZcLyq4LuTm3Q9UeS6i4pvrYrQJyD6CNVE=)
4: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: 6J/Woy2uRK1B2dNQ2tt84/6O9ugNLPe6HwJN4LKAnpQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 23:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8a:e0:cb:1f:4b:94:12:25:44:f1:ca:43:68:d1:86:25:8f:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
Validity
Not Before: Aug 23 22:34:07 2026 GMT
Not After : Aug 24 23:52:07 2026 GMT
Subject: CN=C399763FA9352AC743C3A1ECEF48ACB773E5A45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:e7:bb:15:4e:42:5c:8d:e1:0a:3d:2a:00:
bd:32:f8:e7:17:d7:09:96:29:83:71:8d:c3:19:e8:
91:61:8d:81:c9:aa:f1:34:20:1a:90:bd:57:7e:49:
a0:0c:0f:91:e0:2e:04:9a:e9:f3:1c:c6:3b:44:0e:
10:a0:37:50:ad:c4:56:cc:56:86:8d:30:b4:ed:2f:
44:38:99:e9:3d:5f:60:54:01:d7:55:c0:db:b9:c2:
13:92:64:6e:5f:e4:31:da:cf:79:8f:c0:6b:35:e5:
7e:39:0e:2b:b7:39:4f:e8:e5:61:8e:1e:71:54:8f:
83:f9:a8:87:95:2a:06:b7:31:a8:79:a2:20:f9:8e:
da:f8:86:a8:dc:5e:d8:e2:a9:d0:fa:5d:a1:4d:3b:
21:13:ce:60:81:75:ae:9b:3c:d3:80:34:ab:37:62:
a8:a3:17:39:38:2b:a9:36:23:de:5b:ca:af:03:3e:
9d:8d:e2:c4:96:3f:40:24:2a:9e:12:c4:73:2f:64:
8d:2b:48:41:6c:47:b2:4a:2c:5f:37:75:9f:b5:1a:
f4:1c:c4:e4:78:93:10:70:32:28:35:d1:7c:58:17:
54:bf:5c:40:b6:c1:26:3d:47:cb:17:e0:a1:74:2c:
88:4f:a6:bc:e6:1f:64:73:2f:2c:00:a1:57:c7:bf:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:76:3F:A9:35:2A:C7:43:C3:A1:EC:EF:48:AC:B7:73:E5:A4:5A
X509v3 Authority Key Identifier:
keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:f9:a0:e1:0f:d8:d5:5d:d6:23:b5:8c:6a:b8:0a:ed:e1:
6a:5a:2b:23:ff:dd:71:23:ef:db:66:0d:76:77:2c:ec:76:09:
11:82:59:0c:6a:32:12:15:73:c5:e2:06:b4:69:aa:3d:58:26:
31:26:8f:7c:ac:8e:b0:af:d8:b6:03:f0:54:8d:e8:53:38:89:
58:16:a9:ef:97:72:5e:80:e7:8d:ab:ed:2e:0b:ea:3c:43:92:
41:2c:83:0b:6f:86:28:c9:a3:51:82:6f:74:09:01:83:b0:ea:
c7:9e:32:5b:83:b7:90:d3:29:38:15:a3:66:f8:36:1c:ee:e9:
fb:64:eb:ce:d8:ef:aa:a8:69:8b:84:b8:f8:ec:56:e3:ba:00:
18:44:59:63:01:fd:ff:1a:69:2d:d2:b0:0c:28:65:bf:19:3b:
ee:4d:ef:35:81:a9:36:09:36:aa:d5:f4:22:b7:66:07:ff:fe:
ae:ed:1b:8a:80:4d:68:07:77:09:71:8e:98:24:bc:c2:92:a1:
19:74:45:9d:23:90:b4:3c:8b:55:4b:a6:7b:3a:a4:df:1c:eb:
6f:94:38:12:b0:31:83:91:45:f3:40:71:86:ea:71:37:09:a0:
f0:95:d2:21:76:b1:4e:2c:2e:9e:05:d9:63:a7:4a:c0:82:a5:
1b:6f:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:05:07 2026 by rpki-client