
Error: rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
File: 3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json)
Hash identifier: 1kTpo1/JAfizf7OLSV9S1Y9fRGkyfnhsRIDtoERGIJ0=
Subject key identifier: 4A:6E:E9:D4:ED:11:B8:CF:9D:44:15:59:81:75:E8:2D:A9:45:1B:AF
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Certificate issuer: /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial: 23578AF970123FFFADD2FE564803379F00393B44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
Manifest number: 043B
Signing time: Sun 23 Aug 2026 22:48:15 +0000
Manifest this update: Sun 23 Aug 2026 22:43:15 +0000
Manifest next update: Mon 24 Aug 2026 23:55:15 +0000
Files and hashes: 1: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: FXUu4U3adBchD+fWNsbxn2w+6ql0jo6WcmN2Jr0Pb3M=)
2: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: axrcKMSoK/iUiilBciKvZ91YOXMwX1ZhlOB4bEwbwn8=)
3: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: D9T1ivgCmz0SSRV8w22p1cFm3YQoo5WUWVg9SjY5HDs=)
4: 3133312e302e3134312e302f32342d3234203d3e203631383835.roa (hash: 1FFtSGCVlttR7Kby+N8YCSbMBks3xuCJNineZ8Vmhnc=)
5: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: HEAyTZ1hCKdYUVptq4q0vGjSqkgoCS1lf8/68y/lYw4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 23:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:57:8a:f9:70:12:3f:ff:ad:d2:fe:56:48:03:37:9f:00:39:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Validity
Not Before: Aug 23 22:43:15 2026 GMT
Not After : Aug 24 23:55:15 2026 GMT
Subject: CN=4A6EE9D4ED11B8CF9D4415598175E82DA9451BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:d6:ad:e0:31:33:0c:2a:d1:77:81:15:83:
ca:ea:8f:6c:3f:bb:f0:ba:21:6e:19:b1:13:a7:e0:
4a:a8:2e:36:b9:fa:8f:7e:11:83:ce:b8:d6:e4:50:
71:01:54:1e:f2:12:d7:20:3d:13:cb:8e:51:0d:25:
43:99:e2:c8:a9:e0:df:66:7d:e0:7a:94:b0:b8:8a:
31:bc:d1:eb:23:a6:85:de:25:71:27:6d:00:09:58:
cb:a7:b6:c8:36:8c:58:a2:f0:a3:00:e8:74:e6:40:
bb:5d:86:dc:b1:77:80:21:bf:06:08:74:16:29:6f:
f3:fa:4a:3d:2d:80:c9:4c:a5:dd:02:7f:d5:71:2b:
f7:8a:ec:54:8a:48:96:f3:c2:85:b2:2b:88:65:3b:
52:d8:f6:7b:bd:86:0a:10:ce:2e:23:46:a0:15:05:
42:14:ab:c5:52:83:b1:e7:d9:24:6b:8d:d4:22:d4:
1f:b8:88:de:f4:fc:83:ad:d3:71:94:8c:d9:72:10:
92:fc:cb:c8:2a:58:64:33:66:ab:6e:3f:bb:2f:5d:
9b:b4:7a:40:ba:28:de:2f:a8:bf:fb:b7:08:cc:23:
58:e3:cf:87:8d:0e:41:a5:d5:3c:6d:e8:f3:f1:1e:
f1:56:e9:cb:0b:19:10:5a:a5:00:f2:f9:8e:ce:68:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:E9:D4:ED:11:B8:CF:9D:44:15:59:81:75:E8:2D:A9:45:1B:AF
X509v3 Authority Key Identifier:
keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:3d:1a:ff:e7:24:2f:2a:07:c7:95:e3:47:9a:80:6c:22:
51:8a:ba:82:a3:6c:73:87:d7:58:31:a3:e1:6f:6e:bd:bc:bb:
e7:13:53:fb:73:f6:ce:87:a5:d0:f9:4a:e6:64:b2:ed:0f:fb:
67:07:1e:27:e4:43:ba:b9:d1:4f:39:f4:fb:d2:20:74:8a:54:
70:a9:69:33:98:20:51:ca:77:11:cd:43:12:ca:d4:9f:d8:16:
c4:e4:41:ca:3c:19:e1:1b:36:ee:7e:07:c6:1b:ca:e1:14:d0:
e9:78:50:82:43:7a:a2:c5:b0:35:b5:0c:67:cc:dd:5e:b2:8b:
67:e7:05:91:bf:1d:94:96:a5:90:64:70:4a:ba:6f:40:f6:28:
d6:b4:02:3e:a2:56:01:40:47:5c:eb:49:5e:8f:d0:0a:c0:42:
5a:d7:c1:c0:32:2b:f6:04:26:10:a6:1e:2b:e3:c4:bd:86:9b:
bb:d0:77:a6:b3:e0:2a:55:1e:b0:56:ae:7e:de:db:c7:f8:87:
f8:5c:07:ca:3f:5e:21:16:6d:b9:58:96:98:55:7f:c7:6e:aa:
db:7e:c6:c6:46:e9:97:35:ec:f7:69:26:d8:db:1b:aa:68:cd:
01:24:6e:33:47:1f:dd:4e:46:fb:ec:97:40:24:62:d8:1e:15:
dc:f3:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:21:53 2026 by rpki-client