
Error: rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
File: 824E306D67C40D73D502C221E4F1A4CFFC71485A.mft (raw, json)
Hash identifier: JAdhbeynfWBcrSQktT3I5mnWcd0FRaeDqILtXvDfYtQ=
Subject key identifier: 0A:78:B0:8D:2C:29:77:A4:09:AE:0E:0D:62:46:35:FF:04:F6:8A:14
Authority key identifier: 82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A
Certificate issuer: /CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
Certificate serial: 3F50057164A1074205AF060D15EFD167DE6AF535
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
Manifest number: 5E
Signing time: Tue 13 Oct 2026 07:26:40 +0000
Manifest this update: Tue 13 Oct 2026 07:21:40 +0000
Manifest next update: Wed 14 Oct 2026 07:32:40 +0000
Files and hashes: 1: 3139302e3137312e38342e302f32322d3234203d3e20323731323630.roa (hash: Fq5P2Pq5d7tfWM4rnQ58/Ke6FtzMqN484d7AKlL1fB8=)
2: 824E306D67C40D73D502C221E4F1A4CFFC71485A.crl (hash: yBsMmk61Vd4+pDpDGYMtq00bkq1Oi0oIqwNEXN3EEOw=)
3: 323830343a373862343a3a2f33322d3438203d3e20323731323630.roa (hash: NJluVR5LwLr0AMMNNbPRGRGpM84MelSrKC4L3ONMETY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl
rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:50:05:71:64:a1:07:42:05:af:06:0d:15:ef:d1:67:de:6a:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
Validity
Not Before: Oct 13 07:21:40 2026 GMT
Not After : Oct 14 07:32:40 2026 GMT
Subject: CN=0A78B08D2C2977A409AE0E0D624635FF04F68A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:81:4b:c4:9e:f3:b7:bc:70:76:5d:01:76:
f3:00:37:e2:8d:79:b4:af:2b:9d:26:80:d5:28:21:
a5:14:f3:79:ef:4a:30:60:84:21:ad:42:6a:35:ca:
b2:8d:cb:c6:8d:0d:6d:19:6f:68:2d:25:ff:10:52:
fb:3c:82:9f:1e:f6:85:0f:c5:4a:11:67:91:0b:7e:
8a:80:49:1d:88:c9:93:ac:ef:9a:19:b0:dc:50:97:
8a:85:cb:0e:4b:a5:11:28:59:f0:a9:d0:ac:67:c2:
d9:95:67:76:6d:38:06:39:d0:e0:bb:30:41:36:bf:
7b:ba:69:c7:e4:95:21:01:fe:d2:9d:90:e4:8b:cf:
e0:6c:08:ed:dd:66:29:fc:ca:aa:5e:22:20:8a:db:
fc:74:fc:91:a8:f7:be:a6:3f:b9:31:13:82:d0:d9:
ea:8c:ca:aa:0e:64:c1:91:d6:e8:e4:c2:47:57:0d:
71:b9:4d:46:da:88:bd:84:04:20:5b:83:b8:de:d0:
03:32:f8:72:71:c8:5e:35:e1:73:35:55:9d:d6:f6:
f4:fd:2e:4d:eb:96:96:1d:b0:05:c7:ff:8a:51:2d:
16:10:dd:99:94:b3:a6:bb:96:52:8c:25:93:26:f4:
af:41:c7:7d:8b:70:be:ab:29:10:7e:a1:9f:c0:c2:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:B0:8D:2C:29:77:A4:09:AE:0E:0D:62:46:35:FF:04:F6:8A:14
X509v3 Authority Key Identifier:
keyid:82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:c6:ee:8d:b4:2d:46:87:fe:41:fc:49:00:94:6e:2f:03:
af:7d:74:41:4a:10:b3:0d:b5:50:4f:6a:08:4c:af:06:cb:b4:
eb:33:92:70:2e:d9:1c:c3:ae:09:c0:3c:e3:3e:02:92:0f:97:
6c:6f:52:f2:83:a0:81:1a:f0:68:b5:88:50:0b:21:c1:80:70:
36:44:df:84:e8:8d:08:d5:4b:c1:68:bb:af:89:b1:cf:1f:a7:
96:ed:7f:9f:e8:70:2f:a6:8c:7f:97:32:46:9a:7a:6d:d4:88:
23:05:e4:fa:74:ee:ed:6f:d1:1d:20:0c:dc:59:0a:12:67:3e:
82:2e:66:86:3c:e1:85:37:14:fe:bb:b2:8b:37:68:d2:38:6e:
2a:75:f1:ee:0e:9b:17:23:ba:4a:ca:89:c8:69:e0:53:5e:0e:
45:5d:b7:0b:de:94:41:83:c7:d0:0f:22:4e:c2:50:2d:72:a7:
2f:6d:03:78:d0:e2:d1:db:74:f9:c2:c4:6a:b6:89:58:a5:1f:
66:b6:1a:34:78:96:d9:ba:70:34:04:a7:38:bd:26:ac:18:5c:
e0:0e:37:7d:ec:1e:2c:47:a3:e6:91:94:fa:4c:ba:32:d6:1d:
fd:1e:84:69:cf:0f:e6:80:9e:ab:4a:c0:54:cd:ac:44:02:d6:
ca:e6:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:45:12 2026 by rpki-client