
Error: rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
File: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft (raw, json)
Hash identifier: zICLoelchg9waK7GJ+XTwqqgRWRIfCM7Vh0M0BIRQes=
Subject key identifier: 9A:CE:AD:FE:71:EC:32:87:18:86:79:33:B3:5F:B4:35:02:49:B6:50
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Certificate issuer: /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial: 48C4466505FE883F754CA5701EE0071F87D97971
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
Manifest number: 048B
Signing time: Sun 23 Aug 2026 23:49:59 +0000
Manifest this update: Sun 23 Aug 2026 23:44:59 +0000
Manifest next update: Tue 25 Aug 2026 01:52:59 +0000
Files and hashes: 1: 3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (hash: taUthDkXb559JFkuYYUIjfPQojbwy6bDjriNa6ge/y8=)
2: 323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (hash: NRvkX7IEEwE6eVFepi0Bg0vTFbpt/3Mqhz4YmkSq8+w=)
3: 8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl (hash: E4RiJJQ/j5JaLi4iDG625VZXrctFIRESNFVgU79icCk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 01:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c4:46:65:05:fe:88:3f:75:4c:a5:70:1e:e0:07:1f:87:d9:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Validity
Not Before: Aug 23 23:44:59 2026 GMT
Not After : Aug 25 01:52:59 2026 GMT
Subject: CN=9ACEADFE71EC328718867933B35FB4350249B650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:20:dd:02:6f:72:8b:3e:c4:13:1a:1d:af:
8a:54:30:d4:18:90:cc:e8:3e:fc:2f:07:53:94:3e:
24:b2:73:19:bd:89:54:a4:13:54:97:ff:67:bb:d5:
2b:96:08:55:9a:86:18:d4:2c:2a:b3:6a:0c:4f:3e:
37:a6:d8:b8:6f:b9:25:c8:0a:22:2c:fc:f1:82:df:
29:64:51:4a:d4:eb:b2:1b:dc:cb:47:7c:06:d7:88:
29:20:63:19:25:71:29:1c:41:0b:42:88:a8:58:38:
76:d0:12:0f:a9:eb:63:22:a0:55:bb:95:f2:73:98:
4a:3d:48:78:89:c6:65:45:6a:f9:2d:95:b8:1a:87:
77:69:1f:d6:77:59:17:f0:5e:41:6d:76:1f:60:77:
b0:e4:ed:33:73:18:f3:38:ae:d3:1f:1e:d4:2d:16:
42:e1:93:07:31:ad:cd:36:84:70:ac:3c:90:d8:e8:
f9:be:db:73:1a:b1:f3:c7:32:27:60:16:9d:94:8c:
3d:2c:a1:9f:32:51:e7:61:f5:a8:0c:b3:d8:e4:4a:
ed:c3:c3:34:14:47:ab:f3:5f:0a:db:c4:25:e8:a6:
8f:17:25:80:48:ed:73:c2:ac:14:4f:69:f0:45:81:
1a:15:e1:3d:f9:0f:c8:21:86:fe:0f:de:1d:a4:8e:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:AD:FE:71:EC:32:87:18:86:79:33:B3:5F:B4:35:02:49:B6:50
X509v3 Authority Key Identifier:
keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a9:12:c3:5e:c1:5d:01:ae:2a:a0:aa:c6:2b:cc:40:6f:ce:
c9:ec:21:70:79:e8:50:52:6b:e6:56:33:6e:65:41:d2:41:2b:
a7:ae:16:f7:73:36:2c:58:c3:df:92:ef:f9:e6:f1:ae:29:af:
6c:dd:21:16:37:0a:7b:2f:b9:f7:b9:85:ab:17:2d:1a:a4:de:
e1:07:2d:42:e1:af:d8:c3:71:41:12:20:a6:4e:3d:50:15:84:
15:1c:4a:99:74:3f:60:8d:b4:4b:49:ac:ff:f2:39:c9:c6:cb:
f3:52:5c:95:8d:c6:ab:60:b3:77:1c:34:3b:a1:fa:e0:95:55:
96:dd:71:1f:29:10:ed:fb:fb:d3:a6:76:c0:a4:13:1f:0f:79:
8d:df:54:c4:35:38:3b:51:4a:1e:1b:bf:2a:59:02:46:58:61:
37:16:e8:b8:b9:c3:cc:75:53:40:cb:04:91:aa:03:1d:01:5b:
b8:d7:69:38:34:ec:aa:d7:d0:db:63:cd:51:17:f3:af:5c:45:
f7:3a:0b:ec:66:a6:ee:0e:0a:76:4e:14:e6:d7:5e:f1:6f:38:
e1:75:bd:3b:5b:f4:89:3b:73:08:8b:84:f1:9e:cd:20:7a:e6:
98:3c:0a:04:ba:20:8a:93:d9:db:f8:83:1a:e6:bc:c0:59:eb:
ae:53:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:17:48 2026 by rpki-client