
Error: rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
File: 380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft (raw, json)
Hash identifier: DyLisPXZ1MiVn5vWgJanLh/tdInH+uljUHQZqvahnME=
Subject key identifier: 8B:64:A2:A7:9A:C9:E5:75:AB:2C:80:C3:51:FA:1D:D4:C1:85:6F:48
Authority key identifier: 38:0A:A2:35:F2:E5:AE:29:24:CB:38:60:78:A7:4D:1B:73:8D:2A:B1
Certificate issuer: /CN=380AA235F2E5AE2924CB386078A74D1B738D2AB1
Certificate serial: 5270D02480298D889ED000AC5C277260934019D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
Manifest number: 7E
Signing time: Sun 23 Aug 2026 06:24:45 +0000
Manifest this update: Sun 23 Aug 2026 06:19:45 +0000
Manifest next update: Mon 24 Aug 2026 10:07:45 +0000
Files and hashes: 1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: PPeZCwYYhjbntFYVe2kYlpwUP0g0LR4ZB3Xh9epZMi8=)
2: 380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl (hash: 0rhkJkxWns//Yfp0DpJwxsn3WqlU3IIAJIxZq/ugErI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl
rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:70:d0:24:80:29:8d:88:9e:d0:00:ac:5c:27:72:60:93:40:19:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380AA235F2E5AE2924CB386078A74D1B738D2AB1
Validity
Not Before: Aug 23 06:19:45 2026 GMT
Not After : Aug 24 10:07:45 2026 GMT
Subject: CN=8B64A2A79AC9E575AB2C80C351FA1DD4C1856F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:47:6a:e7:31:a6:26:01:91:1f:9e:26:f9:
70:0a:34:b1:f3:60:43:f1:e0:54:5b:f6:28:76:40:
e9:3e:28:36:00:3a:1d:2e:ef:ba:4d:22:66:b7:df:
0d:d6:5e:1e:e7:79:7a:62:51:57:a9:11:c6:5c:f4:
1d:fe:7d:3d:fc:3b:87:8b:d5:48:9e:a3:64:65:9e:
e2:3c:5a:d9:25:49:a1:18:0a:75:5c:e6:3e:f1:1f:
92:84:ca:1d:ca:e1:c6:77:8e:dc:34:0d:7c:ad:72:
67:ee:cd:c1:20:41:f9:48:a3:8a:e8:49:ee:d1:3c:
15:a8:6f:e3:a6:3d:d6:53:23:ba:e0:86:20:17:02:
b8:1d:9c:ad:9a:93:ce:a7:40:7e:2b:a1:60:91:a8:
e3:97:3f:ad:51:ba:50:f2:a8:63:b5:9d:fe:66:66:
20:91:48:69:ca:c3:c4:42:e6:60:f7:4d:ac:9a:d6:
ec:64:1a:70:25:42:92:43:ed:c8:bd:04:fb:3c:d3:
b4:06:5a:8f:d1:c2:8b:62:43:c2:de:3c:66:fa:cc:
f2:44:a3:2c:ad:8b:d5:63:cc:da:df:2b:a0:6f:15:
a5:d6:30:8b:c2:dc:f3:36:50:df:10:14:c5:f8:3f:
49:ee:e3:b6:d1:2f:ca:97:3d:47:26:9f:0c:58:b7:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:A2:A7:9A:C9:E5:75:AB:2C:80:C3:51:FA:1D:D4:C1:85:6F:48
X509v3 Authority Key Identifier:
keyid:38:0A:A2:35:F2:E5:AE:29:24:CB:38:60:78:A7:4D:1B:73:8D:2A:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/380AA235F2E5AE2924CB386078A74D1B738D2AB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/380AA235F2E5AE2924CB386078A74D1B738D2AB1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:29:0b:35:4a:c5:69:ae:87:6a:76:ca:cb:d8:e4:bb:12:dd:
55:01:6f:2c:d5:e3:c2:c7:a6:5c:7e:6b:d6:b6:a5:2b:fe:35:
ac:2f:0e:9b:e1:7b:41:5a:b8:c2:c9:0f:7b:4a:80:76:f6:5f:
3c:e9:c6:0c:d9:98:7c:13:4c:9a:a1:47:3e:58:97:09:a0:00:
46:e0:ca:df:e4:21:13:ef:34:8f:8c:93:b2:46:b8:69:3f:a8:
74:cd:88:3b:86:d1:6f:30:76:2d:11:32:78:4b:00:aa:18:74:
06:7d:39:9e:d0:01:9e:e4:aa:32:45:fa:da:ac:a3:70:40:17:
ba:0e:e5:93:66:27:1e:e3:db:47:de:81:4e:f5:05:16:64:53:
b8:1f:04:fd:37:6a:f5:49:64:5c:89:77:56:b0:69:63:36:e5:
58:75:a3:c3:75:b0:6a:7a:35:d3:51:27:21:c7:e7:ef:8c:31:
49:32:dc:be:1c:78:68:70:2d:7a:3a:b7:73:e1:87:e3:37:8b:
27:28:37:67:bc:9b:bb:86:b2:9b:74:23:2e:56:8a:29:2a:3f:
35:0e:91:14:31:36:07:96:00:49:52:3f:41:fd:9c:2a:1d:25:
5a:9b:eb:a5:7b:de:c4:4c:57:e6:17:4c:f9:83:e9:84:46:1d:
20:41:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:31:51 2026 by rpki-client