
Error: rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
File: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft (raw, json)
Hash identifier: 038qHY1olSH/BR1DZuX6hm78NOOR79ea8bbKOk4cCeo=
Subject key identifier: 16:58:F7:29:76:E8:1E:7F:9B:68:6D:30:82:8A:7E:6A:82:3E:A6:9E
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Certificate issuer: /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial: 20D232783F1C1FB16C621C8CCD7F0209AF44CFAB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
Manifest number: 13
Signing time: Sat 22 Aug 2026 19:42:52 +0000
Manifest this update: Sat 22 Aug 2026 19:37:52 +0000
Manifest next update: Sun 23 Aug 2026 21:53:52 +0000
Files and hashes: 1: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl (hash: os2VlWh+ktAz0P44dv305cJJjmA8h/9Dxofqp4O/KOU=)
2: 34352e3137332e33322e302f32322d3332203d3e20323636343338.roa (hash: CJjrgnCCmcFCHIYqXiWS0uEONKp/FXLPf6yVQju0DbM=)
3: 3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (hash: qt8f+pcb1F31TG0ZkhKuxjLPIOjfhzeNYXgCXl86Ugc=)
4: 323830343a333764343a3a2f33322d3438203d3e20323636343338.roa (hash: TRSsrflb3DPtHM2LWcwO11g+mZjnEw/TB+FqKaNMZHc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 21:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d2:32:78:3f:1c:1f:b1:6c:62:1c:8c:cd:7f:02:09:af:44:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Validity
Not Before: Aug 22 19:37:52 2026 GMT
Not After : Aug 23 21:53:52 2026 GMT
Subject: CN=1658F72976E81E7F9B686D30828A7E6A823EA69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:48:52:ce:4b:e3:32:81:b9:da:7b:94:0b:
3e:23:97:05:c4:1e:97:62:55:7a:59:f2:45:6a:e0:
c9:64:c4:14:14:18:14:80:fb:40:ba:36:d9:bc:a0:
a4:c0:9b:f6:8f:24:d9:8b:5a:48:56:9f:02:d6:b0:
5f:14:50:79:a4:51:19:5a:b2:e3:7c:74:eb:85:10:
e2:68:56:ac:2f:60:63:d8:2e:6a:8d:67:b8:56:b0:
1a:f1:fd:b9:8f:c6:3d:79:02:7b:d4:6d:b3:06:c0:
e9:99:8d:74:7a:9d:a5:61:3d:d5:98:02:49:a7:8f:
39:8b:5f:37:a0:5e:f1:e5:9e:c2:1b:bf:6f:2a:b8:
ab:e9:a1:3d:1b:91:53:33:38:7f:a7:ce:a6:72:e3:
90:ec:e1:02:dd:9e:7b:de:0f:d1:02:da:d3:d1:d1:
b6:ec:18:68:16:95:9f:69:9b:e1:24:ba:a1:48:2f:
00:a1:5a:92:49:ce:e3:76:a7:d9:5f:e8:2d:85:75:
f8:cb:75:36:f5:f5:54:3c:38:13:77:3b:f0:59:ac:
e2:31:ca:9a:9d:b4:7c:f6:6c:b4:71:e0:fa:82:1d:
f6:a2:0d:20:3d:1c:30:58:2e:d6:28:c8:64:a2:81:
85:26:a4:b7:d8:f1:7a:c2:16:79:6d:da:a0:74:72:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:58:F7:29:76:E8:1E:7F:9B:68:6D:30:82:8A:7E:6A:82:3E:A6:9E
X509v3 Authority Key Identifier:
keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4d:b3:bd:29:16:21:c3:9f:96:d3:3f:73:9a:ce:05:e6:f0:
c4:69:54:10:4c:fe:fe:bc:0f:8d:fe:4a:7a:c2:6f:cd:08:6a:
59:28:f9:4c:1f:4e:34:49:04:ad:1a:ee:47:4f:0c:6c:e6:06:
23:09:b4:b2:ea:14:94:5f:51:b5:95:54:0c:01:48:8d:c1:62:
9c:a7:03:2f:89:70:15:8c:e5:6f:30:17:3a:0d:9b:a9:d7:6b:
71:ad:67:21:70:65:5f:65:ca:7a:0c:53:d0:2c:45:f1:a9:cb:
d0:03:6e:c9:c1:fd:3f:cb:3b:86:cb:04:4d:80:dd:d1:70:54:
a8:3d:f5:ee:02:70:d7:06:7f:30:2c:ee:50:68:94:7b:fe:3a:
72:65:40:1f:dc:5a:52:2b:4c:a6:4e:83:e1:4a:09:b0:e6:9d:
2d:14:86:fb:73:16:a8:01:4e:40:93:27:78:13:0f:37:ab:df:
cd:a6:00:f8:50:a6:97:10:b0:6e:bc:95:02:7e:79:e2:a8:c8:
13:ef:9e:62:cb:7f:49:ab:91:60:1e:5c:27:f7:b5:9f:2f:84:
0c:94:ed:f6:eb:b6:dd:90:9f:7d:de:a0:2c:6f:1c:97:c8:f7:
aa:e7:c1:5d:fc:d5:e8:87:7f:15:46:81:06:18:dd:4c:0f:c8:
76:2a:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 03:16:30 2026 by rpki-client