
Error: rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
File: E1470F370CA043FEC72078800782F80E03725DD0.mft (raw, json)
Hash identifier: +csEqf0sl30J6y34k0D5tXSmBCt0Env6VvYg5EZHqYI=
Subject key identifier: 7F:74:EC:80:02:03:4F:3C:03:69:CF:89:5D:A5:92:F7:AB:F1:E7:DD
Authority key identifier: E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
Certificate issuer: /CN=E1470F370CA043FEC72078800782F80E03725DD0
Certificate serial: 5E83AB0C608C4FAD35C5A1D0C3271FCD2C377E05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
Manifest number: 0485
Signing time: Sat 22 Aug 2026 17:24:14 +0000
Manifest this update: Sat 22 Aug 2026 17:19:14 +0000
Manifest next update: Sun 23 Aug 2026 19:29:14 +0000
Files and hashes: 1: 3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (hash: v90QYSlIRViRyhBe+zGAaBCDPdDLPp2Y3xwP8T8vlAQ=)
2: E1470F370CA043FEC72078800782F80E03725DD0.crl (hash: fVUqAuXMzcmHPUxtV6qH4oxOJzxEV48jwjysGrTwpOo=)
3: 323830343a336630303a3a2f33322d3438203d3e203532363433.roa (hash: B9VChABabdo/BLEcylidhs1gVrc5tku43bWg5SfsD7M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 19:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:83:ab:0c:60:8c:4f:ad:35:c5:a1:d0:c3:27:1f:cd:2c:37:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1470F370CA043FEC72078800782F80E03725DD0
Validity
Not Before: Aug 22 17:19:14 2026 GMT
Not After : Aug 23 19:29:14 2026 GMT
Subject: CN=7F74EC8002034F3C0369CF895DA592F7ABF1E7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:1e:c7:1a:e8:42:ad:a8:72:2f:f8:92:9b:
d0:81:7f:7a:7b:b8:1c:18:1b:8a:59:55:67:f0:73:
49:4a:ec:be:1a:b4:0f:a6:5b:f1:35:06:0d:fe:6b:
32:0e:46:92:1f:94:63:f7:b9:d4:b8:16:0f:c0:77:
ed:3b:d5:b0:d8:bf:83:a0:3c:0d:9c:4e:5c:07:8d:
94:5d:1e:38:db:f0:5e:bd:a8:4e:9b:22:b2:74:fd:
fb:ba:94:6f:c1:21:ac:04:e6:55:4a:29:35:b2:01:
74:42:00:0a:bc:b6:15:9b:d5:d8:35:d5:d4:6f:66:
4a:71:3b:ed:6a:3f:ff:d3:ab:58:00:d8:aa:19:3c:
d9:36:fb:59:3c:8d:20:e2:69:a7:93:22:73:4e:e1:
d6:57:8d:81:ba:55:3b:a1:26:7b:76:80:d0:28:ea:
19:03:40:28:75:82:ce:ea:31:71:1f:ae:ce:9e:a5:
60:5b:90:06:ac:13:a1:4d:da:56:31:5a:2a:01:12:
4f:3c:a2:52:87:9d:6a:a6:5e:82:f1:26:66:74:51:
60:9a:c7:60:cb:3a:93:e5:a0:53:cc:d1:2e:54:c5:
be:78:0d:ea:83:04:b7:25:00:60:94:f6:9e:01:15:
e1:76:b1:0d:bd:c7:28:e8:77:c5:4c:62:cf:c7:38:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:74:EC:80:02:03:4F:3C:03:69:CF:89:5D:A5:92:F7:AB:F1:E7:DD
X509v3 Authority Key Identifier:
keyid:E1:47:0F:37:0C:A0:43:FE:C7:20:78:80:07:82:F8:0E:03:72:5D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1470F370CA043FEC72078800782F80E03725DD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/1/E1470F370CA043FEC72078800782F80E03725DD0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9d:de:c6:da:7e:10:b6:07:c2:3b:4a:4f:23:b4:56:04:b6:
a7:2b:f6:28:db:92:79:00:5d:15:47:1d:ab:d6:18:f8:13:09:
06:57:32:cb:df:f7:9c:c9:6e:30:bd:c6:52:4e:73:ab:e7:92:
80:15:3c:f5:95:6a:12:e8:ad:4b:96:a3:8e:55:73:6b:25:23:
4b:e4:98:9c:7a:d1:c4:27:ac:ca:8f:a7:3a:cc:6d:93:a4:25:
64:32:51:f2:f7:41:11:8a:31:07:35:bb:b8:ed:f0:93:53:73:
55:a7:e9:4b:11:21:75:2f:e4:e0:43:41:5f:80:01:27:1c:89:
ac:26:48:54:e1:72:e2:b0:24:80:85:3e:92:f1:4d:2f:39:ec:
fe:b4:d0:c4:a1:b0:47:48:d3:9f:e6:5d:ce:4b:64:5d:10:e4:
a1:2c:8c:bc:61:76:2e:de:ff:02:84:03:96:c0:f7:d6:54:45:
14:77:8d:e8:bf:0f:33:39:9e:ca:bf:15:4c:75:01:2f:7e:b1:
8d:5e:8c:46:23:2a:9c:4d:07:fc:18:4b:11:1d:3a:67:1d:d6:
4a:af:bc:c6:c5:df:eb:c7:a6:77:bb:3a:6a:63:fa:35:3a:d9:
0b:a9:c3:e4:c9:88:3a:ac:1c:ec:f5:06:63:b1:25:60:f5:b5:
f8:e7:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:18:43 2026 by rpki-client