
Error: rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
File: 383F00CFEBB36741056246E209D3A5BBAC5663A5.mft (raw, json)
Hash identifier: 7yOCZB4YwkEs5sv66QfqVTfwl+MIcvFjrl74CuybREw=
Subject key identifier: 19:3A:49:3C:FD:C3:7F:E4:DC:70:FA:00:91:34:03:98:98:5B:A3:92
Authority key identifier: 38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5
Certificate issuer: /CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
Certificate serial: 4C5F36ABC75C4FD75E24AEB2EC0D65407BBA1CCF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
Manifest number: 82
Signing time: Sat 19 Sep 2026 22:40:36 +0000
Manifest this update: Sat 19 Sep 2026 22:35:36 +0000
Manifest next update: Mon 21 Sep 2026 00:15:36 +0000
Files and hashes: 1: 383F00CFEBB36741056246E209D3A5BBAC5663A5.crl (hash: kxuoZ13DQ29HwqBBKEVvDZqKVm4bPrwz/1zSTorJ2Pg=)
2: 3139312e3234332e3133362e302f32322d3234203d3e20323633353037.roa (hash: hkGqrfDiL3EzFRpSHiI5yLZR2d/IMEYKVDyPxcxlbS4=)
3: 323830343a313266383a3a2f33322d3438203d3e20323633353037.roa (hash: Xy6FbPYaEBWCIbCSrhPXqPzba0+6aiz/vHDBfXK/Fhs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl
rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 00:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5f:36:ab:c7:5c:4f:d7:5e:24:ae:b2:ec:0d:65:40:7b:ba:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=383F00CFEBB36741056246E209D3A5BBAC5663A5
Validity
Not Before: Sep 19 22:35:36 2026 GMT
Not After : Sep 21 00:15:36 2026 GMT
Subject: CN=193A493CFDC37FE4DC70FA0091340398985BA392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:70:53:ff:11:00:6d:29:46:e2:6f:26:b4:
30:1b:4e:c4:c6:ad:05:59:19:10:4e:e0:8a:e3:a0:
ce:40:94:51:8f:49:88:fd:91:63:28:aa:38:a3:f5:
c2:84:9d:64:64:01:ec:91:58:98:19:5b:45:f1:26:
e1:f1:04:38:36:5f:59:ca:77:3c:c7:6b:b8:85:f6:
c4:d4:11:6e:e5:00:91:ad:f4:db:1f:7b:88:77:96:
06:27:98:dc:71:d6:b7:3b:f3:02:fe:03:86:b8:79:
c4:92:00:71:9d:91:73:08:67:42:eb:35:46:01:13:
af:57:77:5c:91:1c:ba:47:b7:bb:58:83:e5:2c:94:
83:06:b0:17:cb:23:ab:4e:1f:74:75:2c:25:ce:5a:
df:27:b9:41:18:86:4f:08:b4:2b:23:62:1e:34:1a:
38:29:9e:c6:63:66:fc:3a:ff:9f:9c:8d:d3:80:91:
9b:8d:a3:51:25:85:76:33:a0:37:e0:25:82:21:93:
44:c6:17:8d:15:e4:a2:91:8e:0e:2c:cc:aa:c0:c9:
5e:eb:10:6d:31:a5:f6:51:e4:b2:5d:76:5b:97:3d:
9f:dd:a5:0e:c6:8f:20:93:31:08:98:1d:cd:46:00:
b7:13:e8:71:aa:23:38:08:47:80:eb:9c:9c:fc:5d:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:49:3C:FD:C3:7F:E4:DC:70:FA:00:91:34:03:98:98:5B:A3:92
X509v3 Authority Key Identifier:
keyid:38:3F:00:CF:EB:B3:67:41:05:62:46:E2:09:D3:A5:BB:AC:56:63:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/383F00CFEBB36741056246E209D3A5BBAC5663A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/383F00CFEBB36741056246E209D3A5BBAC5663A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:ad:89:ca:8b:2e:b2:9d:3b:b0:fe:6c:d8:0d:df:73:e5:
52:53:21:5f:d6:b8:2b:91:03:6c:37:52:f7:a4:ef:0b:71:33:
96:91:e7:67:cd:ec:b9:cd:ed:23:11:42:67:08:59:a3:73:49:
8d:4c:1d:3c:3d:95:9c:ab:d6:ce:4d:ee:4c:9c:44:01:32:9a:
f5:a3:79:17:45:11:f7:19:aa:d4:41:0d:40:74:41:5f:0f:07:
c4:9b:d6:85:9d:de:c9:a1:19:ab:d1:28:26:c9:0c:1c:05:73:
74:61:14:3e:31:6e:20:7e:0f:57:b2:bc:6a:4f:ec:a1:fd:d6:
f6:d4:2f:c3:bf:28:48:67:b2:ce:ae:98:7c:2a:9c:a8:b9:8b:
09:16:c2:b5:32:c4:10:9a:10:b9:93:99:e7:f1:9f:36:aa:10:
6b:41:26:c6:6a:4e:c0:59:47:00:bd:16:21:cf:e4:4c:84:87:
82:87:aa:a3:2d:76:44:68:82:8e:6d:7e:f1:d7:14:79:3e:c4:
b9:d7:eb:e0:6b:d3:77:48:7d:ac:81:46:ba:b2:69:e9:a8:11:
1f:70:b4:10:c4:84:cb:c8:da:06:ec:af:00:6c:56:84:d0:96:
ca:95:67:8e:af:c2:44:87:e8:79:90:03:d3:97:ea:f4:94:56:
13:a2:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:19:38 2026 by rpki-client