
Error: rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier: Jmh0U5vOv+RzC/7J+PyKQ2/ALEi1ybkbF10uOqnsD7Y=
Subject key identifier: F6:CA:BF:4D:5A:B2:FB:2E:C2:DC:C0:C3:B1:70:D6:51:10:81:B7:8A
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial: 5D316C982DECFE96FD773B936241081CF6DC8F14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number: 03C3
Signing time: Wed 26 Aug 2026 02:28:27 +0000
Manifest this update: Wed 26 Aug 2026 02:23:27 +0000
Manifest next update: Thu 27 Aug 2026 03:54:27 +0000
Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=)
2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: +Zjr0MXxzWWfVLFqYRuj4RZzKTjUbwGahALZOKrwIHU=)
3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: Mw9wrwlp9rBBJe6ke/T542y9Rqq2VB03O7vKyLplFQ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 03:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:31:6c:98:2d:ec:fe:96:fd:77:3b:93:62:41:08:1c:f6:dc:8f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Validity
Not Before: Aug 26 02:23:27 2026 GMT
Not After : Aug 27 03:54:27 2026 GMT
Subject: CN=F6CABF4D5AB2FB2EC2DCC0C3B170D6511081B78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:1f:76:01:bf:a3:89:19:9c:97:4c:24:00:
98:da:b1:d2:57:38:da:07:9b:5a:1f:8b:45:fa:aa:
c6:4d:03:d1:ef:32:26:96:83:32:7c:91:82:ef:03:
ca:2b:50:74:84:f7:c1:59:d1:f8:b3:07:19:f7:bc:
8a:d1:79:c6:ce:0c:6c:1f:1d:f1:89:f6:9a:56:b4:
16:61:e3:4e:5e:6d:2b:a5:e5:bd:f7:72:01:83:b8:
e7:27:dc:b1:8e:5d:22:2c:43:6f:0e:61:9d:04:a4:
54:66:25:6c:a3:36:e3:2d:02:35:a8:a0:1c:04:39:
1b:d7:66:06:92:9b:77:ba:57:e3:42:d5:be:83:ee:
c2:6c:3a:b6:de:42:dc:ed:1b:80:4e:28:e1:4b:18:
c2:6c:ab:4d:ed:39:16:e3:bc:0a:ca:b0:00:d5:80:
e7:44:a5:b4:52:0e:f0:97:9b:aa:0b:4b:98:b9:7a:
8f:76:48:c2:ec:20:34:6e:52:f5:8e:4a:2c:8c:9f:
b2:23:f0:17:ef:2a:78:d0:1e:57:da:7a:41:48:e5:
16:22:6c:51:a2:ae:83:21:c2:ba:4f:15:91:31:d0:
a9:8e:4b:d7:97:61:cb:f0:77:f2:a6:32:3a:78:b3:
0a:78:70:da:e2:a5:e5:13:45:36:7d:45:b7:80:93:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:BF:4D:5A:B2:FB:2E:C2:DC:C0:C3:B1:70:D6:51:10:81:B7:8A
X509v3 Authority Key Identifier:
keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3c:48:c6:19:0c:eb:1a:43:50:49:a8:27:18:b9:b5:62:9f:
1a:2b:a0:c0:22:8b:f8:8d:40:7a:8b:7f:5b:8f:4e:a5:e4:b3:
c9:d1:28:18:af:76:d2:aa:0d:2e:0d:8b:01:01:d7:68:b5:63:
80:6f:a6:b6:c5:7d:6b:12:4c:bf:8c:c3:9c:7e:94:db:fd:1a:
23:60:0d:e8:25:d0:23:fd:b9:59:b6:38:2e:15:92:20:3d:8f:
f1:80:87:2f:4a:74:85:26:7a:c5:76:94:f6:73:c0:3c:d2:ba:
87:ce:59:23:d0:31:8f:df:4e:13:71:22:92:29:49:ef:df:10:
62:f2:46:c4:4a:01:f2:ac:48:07:88:1d:40:ea:f1:21:03:b6:
40:37:dd:68:48:3e:1b:64:7b:41:b9:9b:91:24:ff:f1:7c:44:
31:b0:8f:e5:07:f7:24:c1:30:11:4e:3e:85:48:22:7b:be:b0:
fd:2c:18:a5:4f:ba:14:8e:1c:c2:97:10:00:c4:22:bb:56:97:
ff:38:c5:f7:96:2e:80:a5:67:07:45:47:fc:4f:fa:00:41:31:
11:de:a7:04:80:3e:7a:00:e3:9c:8b:f4:04:ba:2a:7a:d2:10:
6d:23:9a:9b:e8:4a:3d:05:a7:be:2b:07:c1:42:91:79:05:1b:
67:4a:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:06:35 2026 by rpki-client