
Error: rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
File: 02741E68C58D644A904E506F841B4EE63616349B.mft (raw, json)
Hash identifier: UAJ+ZvmL424DfzKcA0k4udCgVA+opTqOYZuVvran4eg=
Subject key identifier: 28:F9:C8:D2:A3:89:CF:97:31:6A:FC:FC:F7:BC:67:35:D3:80:5C:6E
Authority key identifier: 02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B
Certificate issuer: /CN=02741E68C58D644A904E506F841B4EE63616349B
Certificate serial: 1F435447A0CEFBA3A7C9699DB444F7FEAA864DE5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
Manifest number: 03E3
Signing time: Mon 24 Aug 2026 06:49:45 +0000
Manifest this update: Mon 24 Aug 2026 06:44:45 +0000
Manifest next update: Tue 25 Aug 2026 07:04:45 +0000
Files and hashes: 1: 323830343a333064383a3a2f33322d3334203d3e20323634393736.roa (hash: lYeiFL3XPtrZHi7s6EX5+xR5yson2oF3X/R4Z/MOTXs=)
2: 02741E68C58D644A904E506F841B4EE63616349B.crl (hash: CDDcp7FlxSsy0kwZzGS9lPfItULkkJ3l4ljbCSfUork=)
3: 3137302e302e37322e302f32322d3234203d3e20323634393736.roa (hash: wgrK0zi5amjsMvZaszs9JsRDNBMYXJRtWpKHUnC9sQo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl
rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:43:54:47:a0:ce:fb:a3:a7:c9:69:9d:b4:44:f7:fe:aa:86:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02741E68C58D644A904E506F841B4EE63616349B
Validity
Not Before: Aug 24 06:44:45 2026 GMT
Not After : Aug 25 07:04:45 2026 GMT
Subject: CN=28F9C8D2A389CF97316AFCFCF7BC6735D3805C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:81:29:a2:d9:69:69:0d:29:03:e8:c9:f0:
52:e9:90:11:7f:61:5e:cc:43:e0:6d:e3:46:3f:1b:
8c:f7:ba:c6:e1:de:24:8a:c0:a7:0d:01:bb:0c:15:
17:5e:0a:1a:fc:68:76:b9:1a:8e:89:31:25:d5:93:
f7:4f:13:a5:aa:10:aa:e4:24:cc:83:9d:74:7d:06:
28:29:bd:b7:b5:4a:6e:90:31:97:55:74:a6:65:d3:
5a:59:1f:d9:91:a9:88:6d:c1:1f:b0:ae:d4:b4:d4:
0c:c9:f4:3b:a0:d2:5d:c8:64:3a:8a:d1:89:c0:2d:
bb:c7:dd:b5:40:44:c2:e8:27:26:1e:8f:cd:b8:e0:
0a:9e:68:19:f4:50:1d:af:64:dd:01:5f:04:62:c3:
d4:d8:12:09:02:36:fc:4e:82:05:0d:ee:46:90:ed:
6c:34:36:68:6c:45:48:67:8a:44:aa:9d:3e:8f:db:
a2:0d:ff:0d:14:81:82:84:53:cd:86:97:cb:98:3c:
e5:a7:b0:da:70:cd:2d:06:34:17:0a:74:06:ec:12:
ab:12:02:95:66:aa:bd:d1:f7:fe:75:7a:ab:8e:39:
72:af:6c:b0:e3:a9:af:90:ac:c2:36:11:d6:07:23:
0a:2d:fd:06:b1:cd:5d:69:77:14:3e:49:f2:e6:c8:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:C8:D2:A3:89:CF:97:31:6A:FC:FC:F7:BC:67:35:D3:80:5C:6E
X509v3 Authority Key Identifier:
keyid:02:74:1E:68:C5:8D:64:4A:90:4E:50:6F:84:1B:4E:E6:36:16:34:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02741E68C58D644A904E506F841B4EE63616349B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WjC2kN2a2kKoSjPCG2YFmwVmaXFEoVPfpEqoAWUnxit/1/02741E68C58D644A904E506F841B4EE63616349B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1a:95:7a:03:c3:3d:f7:5d:4b:bd:bf:94:56:0e:27:60:22:
cb:a3:ba:e2:40:7b:13:2a:03:ab:3e:20:b6:db:dd:87:ca:9e:
12:f0:69:f6:74:bf:76:ff:85:06:f0:82:d4:e9:54:e1:1a:0b:
5a:35:19:81:6a:58:3b:be:1e:90:48:5f:df:d5:ec:82:77:e8:
32:3a:0b:f4:27:97:b5:a9:3d:6d:37:05:8f:af:38:10:7d:17:
ec:71:ad:2b:3f:0e:a5:3b:5c:67:62:b3:ac:1b:a3:fa:fe:91:
c4:3c:8d:cf:35:70:d2:6a:74:7f:cf:ce:69:44:1c:4a:46:f7:
22:a0:a0:cf:94:97:51:8d:d4:f7:7b:0f:66:43:e6:21:b1:ad:
55:e7:98:8d:5a:9c:82:de:88:34:e4:65:1b:ac:a5:5c:ad:7e:
d9:b0:0c:3d:1d:3f:6a:80:74:b8:87:a9:c5:69:83:88:5d:89:
09:e3:44:97:a7:cc:be:61:63:36:7a:2d:2e:c4:61:68:61:99:
6f:06:92:97:f2:84:d8:c6:79:d8:3e:28:c3:c5:00:a0:6c:23:
c8:3f:6f:cd:dd:02:07:0b:7d:96:82:e7:78:b9:04:bc:a0:68:
81:a7:2e:25:34:13:31:9c:e9:da:29:7d:fe:35:19:b1:34:09:
46:9f:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:44:55 2026 by rpki-client