
Error: rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
File: 834325D3983126D2D723BBC6EC0C6196882A6196.mft (raw, json)
Hash identifier: 4gUDHHg3K6nzGwyXN2pRvj9UUs3mNEpchwnZLpgKOLk=
Subject key identifier: F6:FE:0C:BC:6F:01:13:7C:03:09:DF:77:15:C7:48:54:64:AC:D9:40
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Certificate issuer: /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial: 573537DC32EFBCAF5C8CF4C9032E8E565462E43C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
Manifest number: 03CB
Signing time: Mon 24 Aug 2026 05:20:59 +0000
Manifest this update: Mon 24 Aug 2026 05:15:59 +0000
Manifest next update: Tue 25 Aug 2026 07:26:59 +0000
Files and hashes: 1: 3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (hash: hd1pP278w63N1IRyJlRJVGjbWfpCQLn3VEk8JPrF/eg=)
2: 323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (hash: EOmtlBeeWZknhQW4AE3sw4WJfOLn280GQVnbdfSEE7k=)
3: 834325D3983126D2D723BBC6EC0C6196882A6196.crl (hash: SSs8+J2nLyvZfuWWYDsGFeVpWt/lDrYqtbpJ29Bs5U4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 06:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:35:37:dc:32:ef:bc:af:5c:8c:f4:c9:03:2e:8e:56:54:62:e4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
Validity
Not Before: Aug 24 05:15:59 2026 GMT
Not After : Aug 25 07:26:59 2026 GMT
Subject: CN=F6FE0CBC6F01137C0309DF7715C7485464ACD940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:a8:ac:e7:10:76:ac:16:e6:0e:e4:2b:a6:
4c:25:42:ac:74:c1:ce:5f:67:f2:11:cb:43:4d:84:
80:77:f4:52:b6:01:68:7c:64:e3:24:02:4c:aa:bd:
24:27:ee:87:d4:a7:13:72:8c:cc:67:11:91:cd:30:
3c:87:b6:57:f5:46:32:0d:7a:52:6e:6c:96:90:3d:
1f:4e:3c:a0:e5:40:e3:bc:ea:b4:08:07:ab:cb:d0:
6c:36:1f:8f:2c:ef:74:ff:3c:8a:97:2e:d5:e6:c4:
ed:91:bf:e1:88:9e:90:02:07:9c:6a:9a:aa:f9:d4:
07:c9:3f:52:f9:f4:ef:ed:2b:b0:72:8d:be:89:51:
a2:ac:85:88:c9:b9:9d:6e:c5:dc:e8:15:6b:d4:d3:
fb:d9:dc:cf:f0:b9:0c:0d:0a:5a:f8:30:55:39:3c:
74:b8:ee:05:07:05:bd:e2:ec:ff:99:e3:19:b1:12:
68:8d:ee:8c:1d:eb:6c:99:ef:1f:e0:af:b6:11:ac:
eb:fb:a7:0f:0a:d5:41:33:9b:be:6d:b7:1a:32:45:
45:48:4e:54:01:ec:c2:06:0f:80:15:06:8e:5e:cd:
de:7a:b7:9b:2a:e9:72:85:c4:cb:df:f4:16:b1:87:
99:38:70:6b:c2:2d:e4:76:92:86:f6:c6:1c:14:65:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:0C:BC:6F:01:13:7C:03:09:DF:77:15:C7:48:54:64:AC:D9:40
X509v3 Authority Key Identifier:
keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8d:fe:ae:a9:87:f9:7f:02:60:dc:4d:14:6d:87:54:6c:c4:
36:96:d6:fe:4c:bf:15:c9:9d:41:6e:cc:53:f5:93:92:ec:a0:
73:7a:78:70:9c:e7:d4:9a:2d:7f:15:05:4e:7f:cc:c3:3b:46:
3d:33:1f:8b:6c:49:fc:1d:3b:28:39:f4:6d:44:33:4b:69:df:
6a:35:e0:4e:83:9b:e6:1e:01:ab:bb:a8:0c:17:d4:ca:c7:77:
11:32:0e:60:8c:83:4c:5d:8d:3d:c7:d2:65:b0:68:40:0a:2a:
b1:87:78:a3:5a:a4:e1:19:8c:7b:74:c2:f0:3f:f3:aa:4c:39:
84:2c:4d:e8:8e:d0:f2:23:e6:1e:f2:9a:9b:ac:71:26:bb:22:
cb:b1:fb:3c:9b:3f:76:e9:c4:de:9d:9a:60:da:a9:4d:f6:9f:
1b:b1:57:c1:0b:66:53:ad:4e:45:ad:9b:20:15:2b:14:19:9d:
5e:f7:42:24:59:4e:74:0e:a9:c3:77:41:ce:72:38:e9:c7:de:
e8:76:29:8d:12:07:8f:ec:3c:8f:1f:dc:a2:0d:f2:9e:ba:0e:
16:84:7e:56:d4:4e:c2:22:09:a4:26:ed:cf:c6:01:49:31:26:
96:92:0d:53:13:1a:6e:70:be:0f:f3:3f:cc:69:cb:95:d4:a8:
b4:5f:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:53:19 2026 by rpki-client