
Error: rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier: IiaPF4W2h0XuqOVAeRcaol6hMet8s+Jw+y3MN7kT5sY=
Subject key identifier: DD:EA:32:60:E1:6F:6A:A0:5E:53:81:44:09:29:6D:5D:97:50:07:E8
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer: /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial: 6F34AAED4012A67F6125E24F7ADC76A90E5195AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number: 0566
Signing time: Sun 11 Oct 2026 01:00:00 +0000
Manifest this update: Sun 11 Oct 2026 00:55:00 +0000
Manifest next update: Mon 12 Oct 2026 01:00:00 +0000
Files and hashes: 1: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: Lo8PbrecpCoK0GBUm97e5EPmV/3YQQ/fzWOGICbdPxM=)
2: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: R9L/kMmN7S/9lZVlWx9nyQOiSYfk/inspmGIL6RrUsQ=)
3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: oXImqFM1YmQ4+SVCOSPIg7UK/SRrA0MAPE6GrVjOnDY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:34:aa:ed:40:12:a6:7f:61:25:e2:4f:7a:dc:76:a9:0e:51:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Validity
Not Before: Oct 11 00:55:00 2026 GMT
Not After : Oct 12 01:00:00 2026 GMT
Subject: CN=3082010A0282010100B07CFB08DE9B884BBD6B1BC72FAA52ADC644D2ADDE14DE5B10BEAE81EE98FB8134EC9EFF37995856E1906CD5D2C42AA80F971FDBC776CCEF86D2A8BEDBDBE8ED8E504BBC625D7CB3F721170C15D124FDE646406B08232983CA5D9156DEFF41ABC8E82F05553FBDDA237FE03806B9B1664269939E25E899CB12EE6DF85BCB5EE487DB5EC44DA1C361F9C8486DE777BCF430F79D8FA5EC0B6BA4029D9B1D4A402FF3A33885EA451F050F8BFA3377F2413CEE1812FC4D7D2B523ADE0492D8A8E771E518BEE41C349AE2834E40E5F9B03E4F92F997A06541593224341C138512B24BAC5D7950FD39B129EAAF7D55E69834CC5C9227DAC0D600DFCC9920AACC25DB030203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:fb:08:de:9b:88:4b:bd:6b:1b:c7:2f:aa:
52:ad:c6:44:d2:ad:de:14:de:5b:10:be:ae:81:ee:
98:fb:81:34:ec:9e:ff:37:99:58:56:e1:90:6c:d5:
d2:c4:2a:a8:0f:97:1f:db:c7:76:cc:ef:86:d2:a8:
be:db:db:e8:ed:8e:50:4b:bc:62:5d:7c:b3:f7:21:
17:0c:15:d1:24:fd:e6:46:40:6b:08:23:29:83:ca:
5d:91:56:de:ff:41:ab:c8:e8:2f:05:55:3f:bd:da:
23:7f:e0:38:06:b9:b1:66:42:69:93:9e:25:e8:99:
cb:12:ee:6d:f8:5b:cb:5e:e4:87:db:5e:c4:4d:a1:
c3:61:f9:c8:48:6d:e7:77:bc:f4:30:f7:9d:8f:a5:
ec:0b:6b:a4:02:9d:9b:1d:4a:40:2f:f3:a3:38:85:
ea:45:1f:05:0f:8b:fa:33:77:f2:41:3c:ee:18:12:
fc:4d:7d:2b:52:3a:de:04:92:d8:a8:e7:71:e5:18:
be:e4:1c:34:9a:e2:83:4e:40:e5:f9:b0:3e:4f:92:
f9:97:a0:65:41:59:32:24:34:1c:13:85:12:b2:4b:
ac:5d:79:50:fd:39:b1:29:ea:af:7d:55:e6:98:34:
cc:5c:92:27:da:c0:d6:00:df:cc:99:20:aa:cc:25:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:32:60:E1:6F:6A:A0:5E:53:81:44:09:29:6D:5D:97:50:07:E8
X509v3 Authority Key Identifier:
keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b1:3b:99:fb:64:b5:a5:54:f7:54:be:35:e9:e1:f4:06:86:
2a:fc:f9:02:1c:82:fa:b9:da:c4:19:13:9a:7c:ad:7e:e5:d2:
94:75:cc:0f:00:1c:4f:11:f6:1f:b4:b7:99:e1:e5:2e:49:1e:
1c:47:b6:9c:19:aa:fb:6f:c8:f6:bb:49:3f:8d:24:7f:d1:19:
f6:63:0d:92:a6:01:d2:c6:01:32:56:0e:6c:f6:9e:2e:95:db:
47:72:aa:c6:7f:12:88:f7:bc:5a:d5:f5:08:51:5f:01:ff:23:
8a:41:e5:b0:07:25:eb:ae:8e:17:96:6e:da:6a:a3:86:a5:87:
f4:d6:9e:92:9a:19:d8:47:d6:8e:00:20:0a:7d:51:c2:6b:85:
56:fc:63:8b:15:86:08:0f:fb:86:60:2f:34:4b:4a:1f:8c:0b:
d8:c0:db:ac:89:fc:67:e9:c5:93:36:9d:81:39:9d:34:6e:56:
aa:b2:9d:cf:29:d0:b1:3a:07:b5:b3:15:c7:34:db:36:9a:a5:
8d:a1:39:a1:ec:9e:a7:8d:91:23:5d:1f:84:2b:08:be:cb:06:
64:2e:2c:bf:bd:f1:e3:d0:80:42:3d:b3:78:aa:31:5f:99:03:
55:7f:c4:0b:1a:6a:b4:48:42:0d:a9:80:8b:d5:a6:e3:e9:a7:
3f:a5:a4:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:22 2026 by rpki-client