
Error: rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
File: 500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft (raw, json)
Hash identifier: fxB4tDbPcHIn31rhZbR/gsG80+chRMymuJrq/Xt9JSg=
Subject key identifier: AE:47:0D:BD:02:3E:69:55:C8:9F:01:1B:BB:52:91:DD:07:F0:DB:9A
Authority key identifier: 50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
Certificate issuer: /CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Certificate serial: 07CF80B9F474A853B534B5420936FB5959A50A44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
Manifest number: 0488
Signing time: Sun 23 Aug 2026 13:06:08 +0000
Manifest this update: Sun 23 Aug 2026 13:01:08 +0000
Manifest next update: Mon 24 Aug 2026 13:46:08 +0000
Files and hashes: 1: 3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa (hash: Fl4L51MnBo8Nj2nFJT2yMtW+78P2kjJD7yZnYta/7g8=)
2: 323830343a336562633a3a2f33322d313238203d3e20323636363138.roa (hash: Mvd05f87jEjT+ZtXA4vMj/31PWsW0OXzhH65bZHMeuQ=)
3: 500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl (hash: 15i/tFejKWMmUEnZAr8thgP3VddI97ppemafGezrTaU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cf:80:b9:f4:74:a8:53:b5:34:b5:42:09:36:fb:59:59:a5:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Validity
Not Before: Aug 23 13:01:08 2026 GMT
Not After : Aug 24 13:46:08 2026 GMT
Subject: CN=AE470DBD023E6955C89F011BBB5291DD07F0DB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:98:b5:b7:c2:cf:9c:05:3c:2e:8c:54:3a:
a9:a1:17:a6:51:eb:0f:4a:57:fb:b3:23:1d:7e:ab:
5f:ee:4e:21:48:9b:d9:cf:f1:6a:ae:a6:d1:69:f7:
e9:bc:3d:bd:7c:e1:2f:66:e8:5a:c8:6d:b4:3e:7a:
57:0f:2c:96:7b:ef:8e:a7:99:d6:88:40:01:d4:70:
dc:e0:46:a3:eb:98:82:db:4c:e5:58:ff:34:bd:e4:
4d:5f:e3:db:6e:a1:a0:38:83:2c:a3:ac:ec:b3:ca:
be:fa:a9:0c:5c:fe:8f:0c:4b:78:74:07:3b:54:82:
62:58:d0:8c:a9:90:02:02:f1:8b:e4:3f:59:e1:9f:
55:e3:24:52:36:98:aa:4a:ac:bc:2c:c9:46:d7:58:
a4:42:81:4e:09:87:bf:aa:c2:4a:4c:24:99:9d:2d:
22:44:4f:6c:96:98:15:65:fd:90:7a:a2:2b:9d:53:
e7:94:a9:fc:50:bc:c3:e7:58:ba:14:09:3e:51:fd:
71:1c:dc:1b:e4:fd:d1:24:56:56:b3:38:bc:f4:88:
8a:08:65:8c:21:bd:5c:9f:0e:3a:d0:ea:f3:1e:d2:
a5:51:fb:f4:86:15:ef:c1:8c:7a:f2:14:cc:c4:f0:
ee:e8:46:3d:7b:40:16:38:72:34:2c:c6:52:a8:b5:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:0D:BD:02:3E:69:55:C8:9F:01:1B:BB:52:91:DD:07:F0:DB:9A
X509v3 Authority Key Identifier:
keyid:50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a3:9f:dc:58:bf:c8:7d:7f:cd:56:2b:8f:03:07:dc:e9:5f:
3c:c8:ee:5b:95:db:66:c3:49:b2:16:c2:ae:7f:cb:1a:eb:79:
ec:28:59:00:7f:11:d9:e2:42:1e:54:c4:a7:2a:91:11:a2:07:
fa:4f:54:9d:d8:d6:39:91:eb:55:e1:d8:2c:a4:3d:f3:9b:35:
89:b8:ab:3f:9a:ae:03:b0:86:d2:b7:5e:42:41:7e:ca:b6:14:
9b:46:0b:0f:82:b5:2e:10:e2:bc:7c:92:5f:e5:87:a8:6d:16:
a4:d8:23:d5:f2:de:4d:3c:b8:43:03:14:2e:12:3f:71:ad:24:
ce:94:80:ee:25:da:db:fe:2e:08:ce:b8:58:0a:90:b1:04:ba:
72:c7:08:20:cd:b4:a5:d7:22:4e:8e:f5:4e:14:1b:0e:60:3e:
8f:54:d5:ae:3f:6f:29:3a:8e:45:53:af:34:3f:73:cf:8e:0f:
9d:9a:73:4d:dd:f3:55:b0:9c:8d:c2:56:d9:e8:53:d7:39:1d:
3e:1e:be:3b:e9:b9:80:52:c2:8d:00:c7:2e:da:df:b0:da:16:
d2:54:5d:47:e8:3f:bd:5a:db:c6:ba:b3:e5:c0:9f:59:e4:e9:
3a:aa:40:fa:e0:0f:11:d0:17:2b:00:d4:81:c9:af:33:d7:3c:
c7:7b:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:21:16 2026 by rpki-client