
Error: rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
File: A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft (raw, json)
Hash identifier: fgdGYxqGqyNYCnujtbAduSJp5b4meDc1lokY8YsvOzM=
Subject key identifier: 76:AF:96:4C:B0:43:8F:27:7D:81:67:3E:17:B0:96:93:A7:DA:65:FA
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Certificate issuer: /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial: 08482852D669063D37BEEBB51B727A5E53BA942B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
Manifest number: 048C
Signing time: Sun 23 Aug 2026 11:05:49 +0000
Manifest this update: Sun 23 Aug 2026 11:00:49 +0000
Manifest next update: Mon 24 Aug 2026 15:03:49 +0000
Files and hashes: 1: 34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa (hash: dywGetQdE1WFQNAS2dULdvegjJOGbgfB+yYjWLIIwNw=)
2: 323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (hash: D8vmArp8i6plN5iWQ4omWzWwcZJPEUBq6Pq8sK070lc=)
3: A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl (hash: v8Lv4eAmQZ0CCTL1LqjlJx5xm9mG7888KaE17ZQ6NEs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:48:28:52:d6:69:06:3d:37:be:eb:b5:1b:72:7a:5e:53:ba:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Validity
Not Before: Aug 23 11:00:49 2026 GMT
Not After : Aug 24 15:03:49 2026 GMT
Subject: CN=76AF964CB0438F277D81673E17B09693A7DA65FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:9d:c4:f8:7c:72:58:73:a1:86:e6:d7:a6:
3a:75:39:2d:e8:1e:ee:55:b4:09:e7:15:7c:f9:99:
08:37:17:90:f3:c4:f5:3d:22:e2:b9:68:69:de:95:
98:06:45:71:eb:c8:97:0f:5f:f0:09:bb:b2:8a:fc:
ac:9e:e8:ac:02:59:79:bb:40:73:19:e0:6d:a7:f7:
ab:53:7e:9c:69:15:a0:06:79:bb:d6:84:fa:33:90:
3a:74:4e:f9:71:a2:08:5a:db:5e:1e:95:a1:9d:03:
93:5e:58:48:36:6b:ff:bb:be:2c:73:0a:1c:3f:c3:
2e:cf:d0:49:fd:a8:db:71:85:ec:f7:7b:44:4c:ce:
2b:8e:c3:68:54:9e:fc:e7:e3:be:01:69:99:cf:22:
fb:60:68:1e:6c:07:30:5c:60:bc:01:38:2a:09:b2:
f0:4f:0a:5b:07:6c:5e:66:08:c7:68:c5:4c:77:1b:
f6:f1:55:84:6f:68:eb:a9:96:ec:45:02:af:75:aa:
6d:0f:20:41:1d:26:7c:76:90:52:71:37:d5:3d:e0:
dc:4c:a2:bb:ce:cc:2a:1c:6b:78:0c:7e:c9:3c:b2:
ab:36:4d:3a:88:8c:b1:86:34:75:f9:2f:38:c3:9f:
aa:91:01:bd:18:22:62:c2:70:8b:66:87:24:50:ea:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:96:4C:B0:43:8F:27:7D:81:67:3E:17:B0:96:93:A7:DA:65:FA
X509v3 Authority Key Identifier:
keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ff:59:21:bc:87:58:9d:12:40:28:95:ac:9d:bd:c6:dc:6a:
d1:f8:ca:d4:b2:6b:09:27:d0:20:a8:50:3c:f7:30:1b:45:e7:
af:08:d5:c0:e9:69:6c:f0:69:b0:10:b3:64:7b:9b:71:ff:b0:
c0:7d:f8:07:aa:a2:37:e4:83:d0:fb:40:af:54:1d:0c:1a:dd:
b9:73:a9:48:9a:30:52:1b:e9:51:07:65:cf:73:95:db:f3:7a:
0c:8b:b0:bb:20:a9:de:0c:be:e2:65:34:08:45:ab:4e:16:0e:
d9:ed:52:68:22:a4:5a:b5:87:b6:f0:d0:57:a8:de:95:ae:2d:
91:2f:78:23:25:6c:34:51:bd:0d:df:d7:7e:39:2f:f5:7c:b4:
59:50:90:bc:ba:3d:45:96:c2:f7:06:f2:87:9d:fa:f2:de:c8:
19:da:67:ee:a7:51:bf:0b:8e:8d:24:f9:6d:55:fa:2c:fd:77:
72:88:7e:19:96:c3:d1:5e:44:9e:96:6d:40:ed:fb:d8:7d:4a:
83:9f:eb:54:97:5a:3e:38:2c:79:b7:3e:f7:f9:58:10:ec:a1:
ac:90:5c:23:f3:93:ac:91:dd:89:f7:5a:63:c5:75:2c:58:0d:
69:ae:83:9b:fd:6c:44:33:bf:a9:e8:b9:20:25:91:ad:23:10:
b5:10:a7:31
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCEgoUtZpBj03vuu1G3J6XlO6lCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAz
MDVBQUI0NjAeFw0yNjA4MjMxMTAwNDlaFw0yNjA4MjQxNTAzNDlaMDMxMTAvBgNV
BAMTKDc2QUY5NjRDQjA0MzhGMjc3RDgxNjczRTE3QjA5NjkzQTdEQTY1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4J3E+HxyWHOhhubXpjp1OS3o
Hu5VtAnnFXz5mQg3F5DzxPU9IuK5aGnelZgGRXHryJcPX/AJu7KK/Kye6KwCWXm7
QHMZ4G2n96tTfpxpFaAGebvWhPozkDp0Tvlxogha214elaGdA5NeWEg2a/+7vixz
Chw/wy7P0En9qNtxhez3e0RMziuOw2hUnvzn474BaZnPIvtgaB5sBzBcYLwBOCoJ
svBPClsHbF5mCMdoxUx3G/bxVYRvaOupluxFAq91qm0PIEEdJnx2kFJxN9U94NxM
orvOzCoca3gMfsk8sqs2TTqIjLGGNHX5LzjDn6qRAb0YImLCcItmhyRQ6owvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUdq+WTLBDjyd9gWc+F7CWk6faZfowHwYDVR0j
BBgwFoAUpU372NEG67J4C/jQMxrxIDBaq0YwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XWWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNy
LzEvQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAzMDVBQUI0Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTRERkJEOEQxMDZFQkIyNzgw
QkY4RDAzMzFBRjEyMDMwNUFBQjQ2LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dZ
Z1NadjhEVU1yWlZRWGU3d2Y4ejIyM01mTjV0SGpIcmdlYVJlNXpwM3IvMS9BNTRE
RkJEOEQxMDZFQkIyNzgwQkY4RDAzMzFBRjEyMDMwNUFBQjQ2Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Sf9ZIbyHWJ0SQCiVrJ29xtxq0fjK1LJrCSfQIKhQPPcwG0XnrwjVwOlpbPBpsBCz
ZHubcf+wwH34B6qiN+SD0PtAr1QdDBrduXOpSJowUhvpUQdlz3OV2/N6DIuwuyCp
3gy+4mU0CEWrThYO2e1SaCKkWrWHtvDQV6jela4tkS94IyVsNFG9Dd/Xfjkv9Xy0
WVCQvLo9RZbC9wbyh5368t7IGdpn7qdRvwuOjST5bVX6LP13coh+GZbD0V5EnpZt
QO372H1Kg5/rVJdaPjgsebc+9/lYEOyhrJBcI/OTrJHdifdaY8V1LFgNaa6Dm/1s
RDO/qei5ICWRrSMQtRCnMQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 21:23:33 2026 by rpki-client