
Error: rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
File: 03981ED1B457034CCBAC00F384454B3A021E294E.mft (raw, json)
Hash identifier: QJw5/Rdh5mkEtPIMc/B1/TnjH4X/lm7fKmSDRdE191Q=
Subject key identifier: C3:50:01:BC:2F:B3:BC:16:77:08:94:12:F9:BF:0E:0E:C9:03:FD:C4
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Certificate issuer: /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial: 219F70FD855F5685FE14442103FE410FADD562DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
Manifest number: 04CC
Signing time: Thu 15 Oct 2026 07:08:10 +0000
Manifest this update: Thu 15 Oct 2026 07:03:10 +0000
Manifest next update: Fri 16 Oct 2026 10:02:10 +0000
Files and hashes: 1: 3133382e302e3139322e302f32322d3234203d3e203238313331.roa (hash: OACuBlgvFeqrBl97DicWFUeheJzjkdOGiOjtroPLZ5I=)
2: 323830343a3137303a343430303a3a2f34302d3430203d3e203238313331.roa (hash: YarjLwp74GvKEpvklDqG1T64wh6amwHEuMmWpqvvJq8=)
3: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (hash: Fmo1lRJNHUfGTyasn32GwoOYVRilCNBAF1aLdF0hFUo=)
4: 3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (hash: UbyQMrHUKwbLKtTgseFNC4d0CqNtWevhcDvEeIFUG3I=)
5: 323830343a3137303a373330303a3a2f34302d3430203d3e203238313331.roa (hash: 50WUIjJD62uBTFKdvO8JYXX0xVMF6TQAnzCm3fj1Sx8=)
6: 323830343a3137303a343830303a3a2f34302d3430203d3e203238313331.roa (hash: EyMabbVYF1bzjaG1ZBT7tRW1hKqTrTOL5NdD9Xetxg4=)
7: 3137302e302e3234302e302f32322d3234203d3e203238313331.roa (hash: Laz4YLFFtezeErlvJGMgRFBNQ7RKM38W+k6IxZ/xDtM=)
8: 3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (hash: fKWd8WgiDa5Ht7tMgQGvC3xQxvgcY8MSZHBzd2JuTbI=)
9: 323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa (hash: uwLHAHP6eVKIN9LSKU3TNLOMyTdKyxGBMYJqGnjOPts=)
10: 323830343a3137303a3a2f33322d3332203d3e203238313331.roa (hash: GY0Bf7ArPtlQCU8Tv5LuGbvbjvTLddtcfk/sbRMlEXo=)
11: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (hash: dwF2FE0Vl3l8gNCaYi1/Ukn+N0wvFAJnEu/faprf2Ww=)
12: 3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (hash: kKqwDCUTpgJeSqQ4PZVZHVIC0pnPUWAEDt5PFTxRhn0=)
13: 03981ED1B457034CCBAC00F384454B3A021E294E.crl (hash: 4W/E0AmYdjUUvsWwmEfRmSJdiEWgBqPdYYQxfSjWb6c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 09:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9f:70:fd:85:5f:56:85:fe:14:44:21:03:fe:41:0f:ad:d5:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
Validity
Not Before: Oct 15 07:03:10 2026 GMT
Not After : Oct 16 10:02:10 2026 GMT
Subject: CN=C35001BC2FB3BC1677089412F9BF0E0EC903FDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:43:d5:52:a6:70:8e:7a:6f:b1:4d:dd:cb:
73:12:76:fb:74:98:6d:1d:2b:78:d5:7f:77:9d:aa:
3b:ba:43:7c:6e:c4:15:18:19:a3:ff:e4:52:b3:d8:
82:a2:5e:e9:b5:75:ce:9c:1b:e5:f7:31:56:8a:9b:
7d:eb:b0:71:b4:15:c9:48:63:c5:03:b2:df:dd:ea:
4c:ec:e1:7f:92:ab:4a:c9:14:4d:32:ab:66:9d:e5:
6d:79:26:c5:99:23:37:40:d4:f0:a0:71:f3:33:e1:
b3:b7:16:b4:a7:a2:ab:c4:41:15:c6:8b:2d:68:96:
68:70:f1:bc:a5:98:26:78:33:44:33:3c:06:5f:05:
a4:e7:fb:f8:3b:f8:8e:76:94:33:a3:79:8f:b3:d5:
22:87:44:7e:87:a1:7d:af:99:ab:6d:08:50:06:04:
49:a3:44:42:71:14:65:86:9c:54:e0:ba:1b:b0:8b:
ea:3e:54:c8:e5:38:46:31:16:2f:45:6e:b8:6c:38:
11:f5:6c:e3:bf:37:bd:77:01:81:11:1f:ca:4d:a7:
85:ec:e6:09:4a:e6:38:bf:35:60:3c:19:b1:ef:96:
da:02:6c:a0:1c:6e:f6:22:24:32:81:99:7b:90:1b:
e6:97:08:90:4f:3e:4b:4f:5f:b0:7c:68:64:83:c0:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:01:BC:2F:B3:BC:16:77:08:94:12:F9:BF:0E:0E:C9:03:FD:C4
X509v3 Authority Key Identifier:
keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bc:7e:c7:29:8d:de:7f:6b:36:e9:6f:ad:23:4d:a1:79:05:
b9:e0:4d:0a:eb:2a:fe:78:84:ec:a5:d8:02:22:13:f5:a7:9a:
55:54:7d:8e:9a:76:e2:0a:bf:f1:12:05:fb:be:ba:b4:40:5a:
67:11:69:cc:e9:76:21:68:7a:da:b7:95:50:ed:43:d1:8e:55:
00:e4:9e:fc:1e:9c:49:3e:25:da:06:a4:56:2c:31:2d:34:39:
ff:d7:ba:e1:c7:2d:54:bb:c9:88:9a:c3:ab:3e:7c:ef:63:3d:
48:5a:fe:f6:38:ca:39:45:c8:e7:d4:7d:33:f7:22:d6:6d:aa:
9d:00:0e:60:70:69:0e:f3:d0:bf:d4:5e:85:d2:f9:1e:11:e3:
0b:3c:e5:ca:f1:c3:64:9f:f2:89:a5:ef:0e:f9:67:4c:78:ec:
6d:f1:a9:af:5d:b0:2a:e8:9d:c0:df:b3:7c:74:ef:b7:c4:c9:
18:b6:4a:e5:40:5b:1e:cf:20:3e:f4:43:84:4e:48:eb:26:da:
47:50:4e:f0:cc:a1:04:38:4c:35:7b:fd:20:a5:3a:74:11:99:
d0:03:fb:0c:bb:3c:b1:ff:af:89:09:6c:99:fe:ea:d8:22:09:
0c:6c:91:6b:fd:bd:f8:35:64:e8:b4:9b:00:d7:50:94:d3:f3:
e2:21:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:04:12 2026 by rpki-client