
Error: rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
File: 638087ED81E6ABF3705A6FE4584C399C4C56720F.mft (raw, json)
Hash identifier: r/rw4idhcrVImwQsrgcPjMbBmzSiGKaGS/PYRwgi0HQ=
Subject key identifier: D1:C5:80:10:55:91:92:4B:81:F6:E9:61:1D:5F:DA:91:38:67:B3:B5
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Certificate issuer: /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial: 056D15416E7F4823EFC27B51C3BB3E90C75C841E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
Manifest number: 048A
Signing time: Sun 23 Aug 2026 00:38:21 +0000
Manifest this update: Sun 23 Aug 2026 00:33:21 +0000
Manifest next update: Mon 24 Aug 2026 03:15:21 +0000
Files and hashes: 1: 34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (hash: NcX8DmYwOhidfbgXFtgECDJPrZ1DsIjYcSX1IcC6GEo=)
2: 323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (hash: 2kr5rfRzMzD1wPmAIdWvagse3SQ92MFtEsM3GOb9H6U=)
3: 638087ED81E6ABF3705A6FE4584C399C4C56720F.crl (hash: THu6ua1z1++jK4Dj3QUA5mk2VxMTcbDNYdQ2odjxfvg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 03:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6d:15:41:6e:7f:48:23:ef:c2:7b:51:c3:bb:3e:90:c7:5c:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Validity
Not Before: Aug 23 00:33:21 2026 GMT
Not After : Aug 24 03:15:21 2026 GMT
Subject: CN=D1C580105591924B81F6E9611D5FDA913867B3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:a7:ed:80:fb:51:7e:6b:54:aa:ca:74:f5:
9d:f7:44:dc:28:b7:6f:eb:bc:37:33:b1:75:27:0e:
72:3b:75:31:6f:b8:07:b3:e0:b4:22:7b:b5:4d:1b:
9b:2d:7d:a4:49:08:3d:7c:7e:c8:57:5b:b9:46:8d:
ec:64:07:14:36:04:45:2b:2b:38:94:65:a2:2c:fa:
74:f7:9c:f2:65:16:75:75:be:a6:fe:c8:b2:e4:d3:
73:04:30:37:86:e9:30:45:f1:7d:68:7c:72:40:43:
7f:dc:60:58:b1:d9:a6:a8:a1:51:59:4e:1c:d8:83:
48:0d:32:db:d5:17:9c:9a:f9:b4:83:71:e7:f1:54:
8e:5e:79:f6:19:bc:d1:78:ab:21:e1:dd:0c:f4:7c:
43:ce:71:6c:6a:cf:89:63:24:af:c4:53:19:b1:da:
ce:59:d5:bc:15:6d:88:da:97:25:99:c2:a9:ba:cf:
2f:53:0d:36:73:0b:71:1f:40:a5:67:e4:e9:54:de:
f9:e3:ce:e8:05:c8:6d:00:ac:ee:07:55:df:b4:5b:
6a:b9:bb:fe:36:9d:e3:de:ae:7d:59:78:45:55:05:
ab:34:5f:f7:68:05:b6:fe:ab:00:9f:d5:c4:2e:0f:
3f:e4:85:4c:33:24:b3:6e:0c:ad:7c:7f:c7:22:69:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:80:10:55:91:92:4B:81:F6:E9:61:1D:5F:DA:91:38:67:B3:B5
X509v3 Authority Key Identifier:
keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:46:8e:7d:8e:c2:b2:1f:9d:80:b5:25:19:26:3b:5e:8f:
f2:e4:a3:4e:3c:ba:3c:3d:39:3e:0d:b7:78:49:3d:10:e3:21:
7c:22:fe:f5:8a:f6:8f:a3:1c:10:9b:d7:f0:74:8e:3b:70:b5:
dc:50:90:f0:78:70:ec:be:b1:d1:11:bb:6f:98:3f:0e:90:af:
7b:08:8e:65:fa:44:2d:e9:c4:04:b6:eb:f8:a1:3b:d3:11:cc:
3b:82:20:1c:b3:3f:78:20:e2:36:04:9d:a9:58:00:6f:11:86:
07:75:9e:86:12:2c:f2:a2:df:ae:84:12:c7:f8:db:a5:cc:75:
15:07:68:fe:14:24:2f:43:77:ce:7a:63:d7:6a:c7:f7:51:b0:
db:ae:67:3f:56:27:6d:51:f4:9e:a8:b4:f7:d3:a4:b8:a5:14:
72:22:d1:17:cd:c7:df:8c:af:13:78:61:9d:8c:cc:fc:84:6d:
46:34:bf:83:b2:de:da:b7:39:99:93:c6:ba:91:ba:2f:02:43:
bb:5f:71:17:bf:6e:12:60:7d:c0:c1:fe:6f:9b:d4:d9:d3:ab:
af:bb:08:41:c8:14:b1:71:fd:ce:d1:29:0f:8c:12:ed:f9:b4:
dd:89:c5:f8:8f:89:b4:a2:74:9d:3a:58:8f:aa:8d:3f:4b:f4:
79:ae:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:32:57 2026 by rpki-client