
Error: rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
File: 52F741D1133813F8D309C90CA4A9389C1BF1D693.mft (raw, json)
Hash identifier: 636Y3x9Hh7XjQytAYrt4nFg/7okB2s8MrgjtCT/MhNI=
Subject key identifier: 06:B0:4F:CA:B3:29:A2:56:6E:70:EF:CB:C6:67:05:1B:24:F4:75:67
Authority key identifier: 52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93
Certificate issuer: /CN=52F741D1133813F8D309C90CA4A9389C1BF1D693
Certificate serial: 25D285CADD3F5C3819FF4B3DBB0DE37DE64FED7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
Subject info access: rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
Manifest number: 0415
Signing time: Sun 01 Nov 2026 20:16:34 +0000
Manifest this update: Sun 01 Nov 2026 20:11:34 +0000
Manifest next update: Mon 02 Nov 2026 23:37:34 +0000
Files and hashes: 1: 323830343a3436343a3a2f33322d3438203d3e20323632343331.roa (hash: ZfpZoTCHsh9g/EhiSCKSIBxMjv9S5Z9JNFK06BeCJBM=)
2: 52F741D1133813F8D309C90CA4A9389C1BF1D693.crl (hash: kEJRAW7n3YtcDCsawW1a66E/f8gaGl63atvCC8OFgw0=)
3: 3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa (hash: 4yl8L2LEhQnM9zF3UkBpB+y3Mpp8yyjb5MJoFJK64Yw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.crl
rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 23:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d2:85:ca:dd:3f:5c:38:19:ff:4b:3d:bb:0d:e3:7d:e6:4f:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52F741D1133813F8D309C90CA4A9389C1BF1D693
Validity
Not Before: Nov 1 20:11:34 2026 GMT
Not After : Nov 2 23:37:34 2026 GMT
Subject: CN=06B04FCAB329A2566E70EFCBC667051B24F47567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:bc:a7:24:f5:81:f5:94:38:00:4e:07:07:
a8:21:20:9d:61:37:c7:7c:7f:f0:a1:5e:2f:4f:0f:
0f:7b:16:e9:9d:b4:f6:47:d7:a3:b5:d8:e2:8c:51:
03:89:9a:92:a3:2c:c6:cb:80:ca:4a:2d:8d:3a:c9:
61:8c:8d:29:e8:cc:ae:5c:76:5a:15:5f:f8:ad:11:
85:70:d5:95:ab:e6:37:c7:af:c7:e6:29:21:d4:27:
97:6e:bb:da:0a:6e:47:9f:56:89:2a:21:a3:1d:a3:
48:94:ba:94:16:00:29:b8:8f:ce:e5:bb:4c:07:19:
2b:3f:e6:fb:50:51:e5:2a:09:e6:37:93:70:c0:3a:
3e:0b:9f:8d:a4:4e:61:a2:7f:be:9e:ef:f7:16:2a:
d3:81:a9:7b:7c:6f:3f:3c:3d:79:19:5f:8c:42:d3:
e9:db:96:7c:c7:cd:08:5a:09:c2:f7:03:8e:65:bd:
80:57:bd:0c:06:2d:19:07:dc:a6:77:24:de:37:9b:
a8:1f:97:6c:fd:d0:1b:93:bf:0f:a2:97:f0:4a:29:
08:76:d6:de:3b:69:da:f1:93:e3:1d:a4:36:a7:6b:
db:c1:43:40:cb:69:09:93:3c:ff:3f:ed:03:88:6d:
4e:19:69:32:04:1c:78:42:fb:cc:d0:e7:67:cc:6a:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:4F:CA:B3:29:A2:56:6E:70:EF:CB:C6:67:05:1B:24:F4:75:67
X509v3 Authority Key Identifier:
keyid:52:F7:41:D1:13:38:13:F8:D3:09:C9:0C:A4:A9:38:9C:1B:F1:D6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/1/52F741D1133813F8D309C90CA4A9389C1BF1D693.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:d8:2b:81:9a:fa:e2:74:e3:a4:12:f9:5a:9b:ea:9a:bd:
68:8c:9e:94:35:53:e4:10:87:3e:9a:16:8c:87:52:63:f0:0e:
f5:e7:a8:1d:68:49:39:27:36:f4:b4:80:d9:87:2a:bf:55:c1:
15:9c:19:15:d0:8d:67:fa:54:ae:96:03:86:37:14:46:26:1a:
01:38:7b:b7:c0:3d:73:bf:5c:d8:32:b2:b4:70:8b:db:bc:6f:
04:11:a5:ff:9b:5f:23:0a:fd:19:c8:54:38:39:e0:fa:7c:7e:
a0:8e:27:72:44:bc:78:26:2f:cb:d2:11:c8:f2:71:0f:33:cc:
15:e5:a5:0a:ec:7e:ae:94:eb:4c:b0:1a:45:9a:89:d2:7b:99:
f4:dc:4b:f7:9a:47:99:aa:04:da:23:57:b3:01:06:92:5e:f0:
84:74:d7:d8:86:d3:f8:2d:04:1b:ce:10:a0:ab:e7:76:67:a9:
eb:a8:95:58:a3:20:f0:53:47:1a:2e:2e:e8:31:ae:4c:4f:98:
c0:07:2e:95:4c:9f:29:d4:56:9a:e4:13:19:41:e6:a1:99:b5:
fb:f4:97:38:b3:57:d5:e5:43:f8:42:0d:30:40:79:56:2b:60:
55:6c:58:1b:2e:a8:4f:ac:5b:a3:9b:2d:51:95:fa:b3:5a:58:
e9:b9:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:32:07 2026 by rpki-client