
Error: rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
File: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft (raw, json)
Hash identifier: WPRX3UD0wWXeUOJPV45gjLF4GIBjNhj7se0b3ZE0XYM=
Subject key identifier: 17:3A:17:48:EB:8D:D0:03:77:59:7F:AB:04:15:AD:A2:6A:48:D5:C9
Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
Certificate issuer: /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Certificate serial: 0A8184BC63B7A72F4FB3ADCDEEB9DDADE97D7C59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
Manifest number: 0185
Signing time: Sun 23 Aug 2026 03:37:46 +0000
Manifest this update: Sun 23 Aug 2026 03:32:46 +0000
Manifest next update: Mon 24 Aug 2026 07:13:46 +0000
Files and hashes: 1: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (hash: bK7PGcHgX1HaW/F1Gj0KQEL/uAEuTpfC9DPIZsI1xVE=)
2: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (hash: ikLxmZRq9GA7l9gUwQ8KsYLPiZHYK560PCzWPT+AsQc=)
3: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl (hash: 3af9M/5oVpwjqZS4TvsJtNIps958WDbpE5PQITLp5ac=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 07:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:81:84:bc:63:b7:a7:2f:4f:b3:ad:cd:ee:b9:dd:ad:e9:7d:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Validity
Not Before: Aug 23 03:32:46 2026 GMT
Not After : Aug 24 07:13:46 2026 GMT
Subject: CN=173A1748EB8DD00377597FAB0415ADA26A48D5C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:f5:4e:2f:4a:94:34:b8:8e:ad:54:f5:11:
fb:ed:57:80:21:41:aa:f1:cf:ea:74:5c:66:7a:d8:
85:01:06:bf:a1:05:c3:57:a6:2a:7d:42:e2:22:9c:
58:cf:9e:79:8b:6f:66:7c:41:45:32:bf:4d:0e:aa:
d1:93:3f:56:a9:e6:b1:f3:dd:c4:c8:ae:0b:b2:b7:
b2:00:f2:2d:9f:9a:2e:82:3f:67:b4:a8:35:f4:8b:
ec:dc:41:d0:36:d8:11:47:7f:3a:1f:63:81:e4:8c:
3d:17:de:19:0c:15:d0:5f:ea:e4:76:ab:66:23:c2:
b3:88:18:61:87:97:be:0d:87:ba:22:f6:92:44:65:
95:2c:15:5b:8a:fe:ae:0a:0c:78:9d:f4:d1:fc:a9:
4f:62:dd:e8:25:bf:01:ba:cb:bc:ec:b3:d4:dd:70:
1e:fd:00:ce:b7:f3:96:08:d2:5a:49:68:02:2f:b2:
a3:f0:ff:58:aa:47:a6:40:2f:2c:e2:19:c9:3c:41:
28:37:e4:c0:07:da:9a:40:be:a1:84:c5:16:1b:3c:
e4:c2:a4:33:c6:f4:93:99:31:cc:99:ba:7e:97:ca:
ee:2b:f7:ac:86:69:92:da:b6:d1:8b:38:d8:82:37:
5e:8d:f1:dd:fa:4a:b2:14:c5:5a:7f:c2:0e:c4:8d:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:17:48:EB:8D:D0:03:77:59:7F:AB:04:15:AD:A2:6A:48:D5:C9
X509v3 Authority Key Identifier:
keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5e:fe:3b:c6:72:c2:3a:09:15:25:a8:e0:a9:b6:14:1e:63:
4b:94:b5:ca:5b:37:4e:dc:ff:e0:5e:ae:e3:f5:db:2f:2e:a6:
9a:5c:58:c8:83:c8:18:db:a9:b9:b9:38:02:64:c2:5c:d1:2e:
23:39:29:9e:77:4c:9f:87:9c:fb:6a:00:e9:62:e6:19:31:f6:
f6:dd:bc:4b:b2:35:2b:fd:f5:f6:7c:d9:96:83:e2:4d:a8:75:
23:65:48:ec:58:38:63:0f:58:51:53:d7:4d:64:97:86:31:b9:
db:d7:6a:49:78:e3:6b:be:de:4b:e2:b9:d6:15:82:c0:82:4f:
f2:f9:f5:66:dd:1d:e8:e2:6b:74:22:2e:d7:34:a8:1f:c4:be:
83:f8:fc:6d:9d:61:2c:ce:b0:6d:eb:6e:b7:ac:35:31:2e:c0:
c0:de:e8:3a:60:a4:f5:83:e4:cd:3e:c7:fe:4e:85:26:7f:32:
66:9b:39:9f:ea:90:34:db:e0:a1:b3:be:86:2d:b7:e9:ab:14:
74:03:ee:4a:67:52:87:c1:17:02:41:97:44:9b:f4:e3:80:97:
61:b3:d3:eb:97:ed:a7:fb:8a:5d:a0:5b:c4:b8:16:1d:04:1f:
1f:21:ce:a6:7b:66:57:62:a9:59:8a:f0:a8:d1:27:6a:b3:01:
cf:34:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:02:41 2026 by rpki-client