
Error: rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
File: 7A509BA48E79904F69690722D65AADB9AD3A47AB.mft (raw, json)
Hash identifier: T6f0drdVjL/cQIhccgzZmuQlZokjYTuEi/yWWUAJpmE=
Subject key identifier: 46:5E:A1:9B:49:F2:6B:F2:A2:68:7C:13:59:7D:14:AF:A9:3E:6F:26
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial: 2FD4AF066073726A9A9B1F141B42DD77EE6A7048
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
Manifest number: 048A
Signing time: Sun 23 Aug 2026 10:40:00 +0000
Manifest this update: Sun 23 Aug 2026 10:35:00 +0000
Manifest next update: Mon 24 Aug 2026 12:51:00 +0000
Files and hashes: 1: 7A509BA48E79904F69690722D65AADB9AD3A47AB.crl (hash: WbHRFcmTt8F4oaK+Nw623nDo0z7m30AFi1pVkugrxgA=)
2: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: aM6n6LxePrreI7fzZ1QEFaarrtUwigzRl0yF7ieliBE=)
3: 3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (hash: qnh7T+eJAR/MJugLJSGGvmqc3Mdc/ozgEo6SBeIon3k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 12:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d4:af:06:60:73:72:6a:9a:9b:1f:14:1b:42:dd:77:ee:6a:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Validity
Not Before: Aug 23 10:35:00 2026 GMT
Not After : Aug 24 12:51:00 2026 GMT
Subject: CN=465EA19B49F26BF2A2687C13597D14AFA93E6F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:5d:cb:d2:a4:35:1f:53:13:fc:d8:c8:51:
19:f5:02:6c:eb:14:c1:11:5a:ae:d6:67:43:cb:c4:
07:e5:8b:a6:bb:b6:00:3a:1d:4a:a5:f3:68:ad:ee:
fc:6b:e0:af:e9:f7:0e:a4:d7:b7:96:8f:3b:c8:57:
0b:ed:4f:3d:d2:93:b5:93:78:c2:75:93:fe:27:76:
0d:35:7d:21:a0:91:18:6f:79:4b:19:e2:1b:fd:d7:
8d:e5:d3:b1:c9:59:7b:c8:00:8e:ec:f4:ab:d2:4e:
40:80:f1:8d:41:97:51:c5:e8:ea:fa:80:bc:b2:c6:
e6:2b:d9:fb:f5:77:12:4a:8c:2f:43:26:27:9b:de:
ce:76:43:eb:10:41:1c:06:3e:4e:42:e2:3b:63:11:
c8:59:27:b4:35:8a:d6:84:3e:80:6d:46:38:fa:ca:
0c:81:38:ae:b1:dc:b9:25:f7:44:19:dd:3d:57:26:
8c:08:1f:73:a0:88:15:56:c9:b0:4d:88:dc:ef:4b:
51:9c:04:51:d5:ff:9f:bb:82:fb:8a:a3:42:7e:db:
a0:fc:2d:d1:59:f7:cb:1a:89:02:39:32:0f:80:41:
39:2d:5b:b2:4d:5f:a2:fb:d1:ad:84:7a:45:e2:c7:
c5:79:7d:57:7b:58:2d:fa:30:bc:2d:99:7d:1e:c5:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:A1:9B:49:F2:6B:F2:A2:68:7C:13:59:7D:14:AF:A9:3E:6F:26
X509v3 Authority Key Identifier:
keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:42:df:89:42:49:95:1f:91:ef:e5:01:fe:97:de:3e:43:
36:99:37:55:79:1c:0d:d2:38:93:d5:a2:34:98:ff:02:24:4a:
ae:8c:fb:6d:a3:5f:20:cf:60:46:db:20:7f:28:b0:d6:bf:12:
d5:12:cb:00:59:a1:93:ab:e0:e4:d8:7f:72:24:40:db:14:df:
a9:a5:31:13:1d:a0:30:53:ae:a5:cb:4e:13:aa:78:ae:ed:6c:
81:e7:a6:ce:7d:b8:31:31:2c:a7:e8:f2:ea:fb:8e:0f:72:3e:
eb:88:48:c2:86:2b:38:d9:e0:47:b8:dc:84:a5:7c:54:41:c0:
e4:a0:8e:dd:9d:a0:0e:d4:e3:67:36:c7:e9:e2:54:7e:2d:67:
3a:3f:53:3a:d9:21:5d:48:7b:71:e1:49:2b:12:da:0a:a8:f6:
69:e7:93:a2:24:75:29:b1:12:3f:42:a3:60:7b:01:75:6e:95:
7f:7b:fa:ca:eb:b3:42:69:30:df:79:ab:f0:23:36:8c:6c:68:
92:c6:cf:ec:ef:0d:a2:6e:42:34:b8:a6:72:02:69:c9:2a:46:
00:ab:e2:93:25:16:58:8a:77:67:3e:1e:3f:ad:03:ab:63:63:
3b:9f:28:97:6f:5c:27:dc:06:ba:7b:64:9f:2a:f7:1c:89:af:
80:b8:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:50 2026 by rpki-client