
Error: rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
File: CAC1861D73EAD03007F4D16532DB191600DE2929.mft (raw, json)
Hash identifier: dU4KOMa4NUI9f0V1ErO1vPAq6KBRUGtuiA80cFSiKBo=
Subject key identifier: 1C:4C:CC:FB:E1:C7:AF:35:4F:49:34:33:CB:C1:E5:3E:BC:DD:1F:00
Authority key identifier: CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29
Certificate issuer: /CN=CAC1861D73EAD03007F4D16532DB191600DE2929
Certificate serial: 7797D015EB348594C2A82DE6CB0D6231FAB56C7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
Manifest number: 0152
Signing time: Wed 28 Oct 2026 14:50:00 +0000
Manifest this update: Wed 28 Oct 2026 14:45:00 +0000
Manifest next update: Thu 29 Oct 2026 14:50:00 +0000
Files and hashes: 1: CAC1861D73EAD03007F4D16532DB191600DE2929.crl (hash: MkT5NOrX+nrVpIwhKlmxO+mO3wyggeS7BINa4A+55ao=)
2: 323830343a383939303a3a2f33322d3438203d3e20323733363132.roa (hash: k9AjTaqn2hfxZfHYqrJw1jX18VnYCka8XY1dJe+Do5E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl
rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 14:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:97:d0:15:eb:34:85:94:c2:a8:2d:e6:cb:0d:62:31:fa:b5:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAC1861D73EAD03007F4D16532DB191600DE2929
Validity
Not Before: Oct 28 14:45:00 2026 GMT
Not After : Oct 29 14:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:fc:87:c7:56:dd:44:b3:66:dd:98:b1:09:
43:63:33:3b:ce:ef:e3:5c:62:92:b7:00:74:ad:50:
58:e2:fe:95:b8:78:b2:b9:08:d9:69:1b:e4:84:a9:
aa:ff:e5:03:1d:bb:13:b1:56:3e:f7:af:46:29:de:
bf:76:59:43:ba:92:8b:f1:c2:d1:34:a2:bd:d2:44:
b7:01:74:1f:3d:44:77:bc:4d:d8:7c:8a:9e:78:ff:
4c:17:48:59:43:75:cd:d7:1b:a3:ab:b2:67:b7:11:
b0:83:a4:a3:0e:37:bb:74:69:f6:15:34:7d:6e:73:
e1:39:4e:84:b8:12:d0:c6:60:7f:74:20:a2:9b:f0:
d3:17:80:7f:77:b9:20:5b:c7:57:32:06:c0:5f:6a:
2f:fa:12:aa:8b:c2:15:60:32:9f:82:ac:59:72:f7:
1a:54:f5:cf:c0:4c:23:db:f0:a7:15:c2:e1:0b:e7:
63:fb:38:99:40:e2:b6:a2:9a:b2:d1:89:a4:d6:24:
65:38:19:1e:ea:56:a8:a3:ee:99:05:20:1c:90:f2:
c4:24:d1:c4:be:88:be:35:39:3f:90:55:cd:d0:cb:
43:5a:18:c8:7b:4e:07:dd:0b:20:7a:0f:4d:c5:2e:
fd:15:cd:4d:8b:13:4a:23:cc:e5:7f:1f:96:be:16:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:CC:FB:E1:C7:AF:35:4F:49:34:33:CB:C1:E5:3E:BC:DD:1F:00
X509v3 Authority Key Identifier:
keyid:CA:C1:86:1D:73:EA:D0:30:07:F4:D1:65:32:DB:19:16:00:DE:29:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAC1861D73EAD03007F4D16532DB191600DE2929.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tZv6bNcboE6o25JiKyxRwd7zaPmM2RKrCmiqYEFnoXD/0/CAC1861D73EAD03007F4D16532DB191600DE2929.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:45:59:b2:e0:ca:78:da:b8:72:86:d2:6b:53:82:70:64:0e:
4e:c9:95:55:3b:59:70:fc:93:02:f8:bd:25:04:79:8d:82:d6:
2f:63:d5:cf:08:47:3c:49:e0:a2:ac:5f:a2:14:f2:4d:0f:ea:
48:87:f6:10:68:a9:6f:6d:bf:5a:53:7a:9e:90:1c:fa:de:ac:
f3:b9:9f:0e:92:81:af:e4:fd:02:b9:8d:12:6d:07:b8:aa:2f:
bd:f2:fa:60:cd:e1:5e:f1:9d:0a:53:a2:16:06:2a:54:33:48:
63:6d:4c:0a:c8:5c:50:f8:3c:04:c3:6b:ed:5d:d3:1b:43:5d:
3b:cf:e3:be:6f:7f:58:b7:53:31:4f:86:02:4d:3e:6f:71:55:
93:b4:76:f7:4a:af:e8:eb:b5:c4:d3:71:05:6b:9e:bd:70:10:
a8:ca:e8:29:8f:8f:30:ae:2e:f7:76:e5:42:e3:53:08:01:c5:
71:1a:20:2c:18:d3:60:85:6a:cc:bb:61:e1:28:85:b8:95:d6:
cb:c5:74:d3:34:8b:fd:b9:23:15:09:21:aa:7f:7f:99:e6:c3:
ee:de:b1:a0:3a:3f:9f:39:2e:be:7a:b4:32:34:25:5c:e4:a7:
e3:10:56:a4:32:51:0f:13:54:34:a1:38:c9:e3:a4:2b:3e:4b:
65:68:7d:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 20:39:34 2026 by rpki-client