
Error: rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
File: C015B32C7C5158D42E33F7D1939172DB85380C54.mft (raw, json)
Hash identifier: Nrh/zv0H2VNYOsd86KZSloY1aUpBpAFKWQ6aR+gQR8o=
Subject key identifier: F4:7A:16:2E:07:0D:45:12:F9:89:C7:C3:38:BC:49:D5:02:84:7B:37
Authority key identifier: C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54
Certificate issuer: /CN=C015B32C7C5158D42E33F7D1939172DB85380C54
Certificate serial: 3CC3EA5730599B54EE1728B88E8A982FC72F55C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
Subject info access: rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
Manifest number: 0522
Signing time: Wed 26 Aug 2026 13:00:00 +0000
Manifest this update: Wed 26 Aug 2026 12:55:00 +0000
Manifest next update: Thu 27 Aug 2026 13:00:00 +0000
Files and hashes: 1: 323830343a326431343a3a2f33322d3335203d3e20323635323630.roa (hash: webVIJ1N0vC65KAh7jvpEE56tVMzqvehaXWOEg2lUXg=)
2: C015B32C7C5158D42E33F7D1939172DB85380C54.crl (hash: fXbE3kCiAGQKTA/xJRRhqsK4cgxAjjX8oHYqMOodYdw=)
3: 3136382e302e3232342e302f32322d3234203d3e20323635323630.roa (hash: pI0lkmm/EYHfj3hooHeQ9TIB8A41Gmur7lf1u1qsjDI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl
rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c3:ea:57:30:59:9b:54:ee:17:28:b8:8e:8a:98:2f:c7:2f:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C015B32C7C5158D42E33F7D1939172DB85380C54
Validity
Not Before: Aug 26 12:55:00 2026 GMT
Not After : Aug 27 13:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:e2:65:31:da:f9:23:6a:55:e1:0d:12:a7:
db:3d:81:5b:ed:ea:e1:45:c4:da:b1:8d:aa:28:bd:
59:88:75:cb:54:e3:d6:5c:83:ba:7b:ec:62:cc:a4:
36:cc:d8:7b:8b:fa:a4:00:15:c9:89:83:b1:78:59:
93:50:1e:56:06:d6:1e:a4:d9:d6:35:b9:09:35:ff:
f0:67:4e:08:5a:78:bd:ba:93:bf:6c:fe:ff:af:83:
42:18:83:0b:ea:38:6f:19:a0:d8:64:a6:48:d5:df:
2e:c0:2d:09:d8:7d:1c:af:3c:56:b9:63:b3:82:b2:
5a:a7:67:54:98:57:6b:72:c3:8a:58:fb:98:98:c1:
70:c1:24:1b:fc:ef:fc:68:ee:7c:f3:65:da:44:17:
cd:07:72:3f:8e:e7:8b:9b:b5:5e:4a:3f:5c:ca:2f:
07:2d:92:91:2c:00:50:e9:13:c8:eb:69:2e:0a:19:
53:b6:5e:3a:bb:0f:5e:82:ff:ac:01:f4:c0:b9:fe:
d7:35:7c:4a:9b:88:48:d2:bd:13:3a:84:d3:8f:18:
35:78:6c:e5:1c:21:eb:59:20:d9:b8:4b:e6:4f:0b:
d1:59:79:d7:c4:9d:bb:eb:95:c4:68:e9:b1:8e:71:
7d:78:83:66:ba:02:bb:3e:8f:57:f7:f3:2d:4d:4f:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:16:2E:07:0D:45:12:F9:89:C7:C3:38:BC:49:D5:02:84:7B:37
X509v3 Authority Key Identifier:
keyid:C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ea:8a:4a:7c:e8:0f:9b:ca:02:22:90:75:75:98:34:61:69:
29:a6:e8:b2:1f:8d:b5:74:3f:dc:53:04:ab:93:6a:56:64:8b:
01:18:0d:6d:8c:aa:83:c9:a1:fd:e3:3d:5e:95:db:b8:a6:1e:
46:10:9a:4c:4e:46:c0:3c:09:25:fe:a4:a8:a1:15:ab:5d:63:
11:b5:f8:72:13:94:f0:a0:7c:d4:b8:af:3e:1b:1b:16:52:2e:
b7:ee:cb:69:1e:10:45:13:bb:cf:e5:8b:6e:5f:67:c3:b3:67:
d8:7c:48:3e:65:42:82:7d:c3:cd:ed:c0:41:fb:ec:8d:33:6c:
96:8d:23:e6:a4:89:8d:b4:f5:3d:f8:c3:0c:a7:4d:45:b5:86:
19:23:94:a1:b8:46:87:a4:31:eb:fc:38:1b:2c:f7:d8:61:1e:
b2:bd:85:e5:a4:83:9b:98:24:34:06:cd:83:18:ee:7d:21:36:
f1:d4:1b:13:3d:d7:67:26:37:80:e6:66:66:90:0a:ab:62:21:
c2:a8:8b:6b:aa:0f:7b:74:bc:e8:2e:7c:63:4d:1a:56:f1:e6:
f3:f3:60:ea:47:f0:a6:ae:6d:70:e5:c4:c6:03:35:31:13:96:
49:f0:88:85:32:3c:d0:18:85:c2:12:53:a3:23:2f:48:7f:f8:
60:e4:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:55:09 2026 by rpki-client