
Error: rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
File: 561575F60242E48030BC35A771871EB47C6EFF55.mft (raw, json)
Hash identifier: XMAxu9eznpuNUIwG6TkZw9PnYyO4Hw/G4XmqyLMOsoU=
Subject key identifier: D2:E4:5B:01:3B:59:76:10:F1:E0:E8:C1:6B:FC:E1:9E:FD:C5:D8:20
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Certificate issuer: /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial: 434FE14AEF3D4B5079CA583CED69B6EB65FB11FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
Manifest number: 0344
Signing time: Wed 14 Oct 2026 07:43:20 +0000
Manifest this update: Wed 14 Oct 2026 07:38:20 +0000
Manifest next update: Thu 15 Oct 2026 09:10:20 +0000
Files and hashes: 1: 3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (hash: 4H+CxB+EpINq2RjZT91EYiq/DtDn8cQlc/74NWiOQwU=)
2: 3137372e3133362e37322e302f32342d3234203d3e20323633363036.roa (hash: 0p5oJNW1u7sbcdTmM4zJyxU4ZM7NUKqBR1aXh8tF8Ps=)
3: 3137372e3133362e37352e302f32342d3234203d3e20323633363036.roa (hash: nuck+0kAF3Zd6pXyFdvnR29Zkxz9c+G8kbnTC7qgamU=)
4: 3137372e3133362e37342e302f32342d3234203d3e20323633363036.roa (hash: XWBGDS6q88+5UVkXGYmDHRa7wfxLNTeJHNiLkIHR6ec=)
5: 3137372e3133362e37322e302f32332d3233203d3e20323633363036.roa (hash: Ltzfx3YxVW1Pa4cq6whSf/IcB1Vnx4DNecq6eVchHTo=)
6: 561575F60242E48030BC35A771871EB47C6EFF55.crl (hash: laXbGVmvGGuMfXjDvrJjo8okQEM+uxZNyfCP9e7Zl84=)
7: 323830343a6664343a3a2f33322d3332203d3e20323633363036.roa (hash: Yo271OiucLB/aigZDCLUq3cAGSPHW0PFSAiLJnTJVo0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 09:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4f:e1:4a:ef:3d:4b:50:79:ca:58:3c:ed:69:b6:eb:65:fb:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
Validity
Not Before: Oct 14 07:38:20 2026 GMT
Not After : Oct 15 09:10:20 2026 GMT
Subject: CN=D2E45B013B597610F1E0E8C16BFCE19EFDC5D820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:d3:10:65:02:7a:b4:58:69:d4:80:e6:8c:
13:9e:9b:e6:cc:3a:b5:5e:96:8a:94:bc:83:6e:a2:
51:0b:ff:cb:b2:29:41:b0:a3:fa:b6:d3:ec:52:ee:
5b:17:00:e6:56:bd:c2:16:0c:1e:11:6e:5e:0e:79:
c2:60:fe:bf:49:8b:2e:3d:18:59:a3:78:fb:5b:2e:
66:21:eb:fd:6d:9e:49:f0:0d:56:1d:dc:be:df:ae:
da:68:e0:21:9b:bb:c5:9d:46:ae:7f:13:ff:10:c7:
aa:c5:2c:44:63:bd:ac:db:58:c6:a3:b9:11:8c:e1:
c4:fd:5a:e4:d9:7a:a6:49:e9:68:91:60:f0:99:d6:
71:1b:2f:2a:b5:93:55:c4:37:b8:3b:69:19:94:de:
a2:c1:59:fe:34:55:5e:62:ec:a8:80:2f:5b:05:97:
f9:c0:f9:56:df:6e:2f:fc:ff:0f:a8:2d:2d:63:a2:
39:1f:7e:9c:79:02:06:0b:cf:05:4d:41:f8:05:2c:
f5:a2:48:13:0e:29:09:b3:f7:8c:70:30:6a:ca:8b:
44:b5:bb:b5:55:23:ad:62:af:87:9e:e0:57:92:50:
20:62:fe:66:d8:9e:09:1c:19:12:37:ff:25:37:3d:
67:5b:42:66:eb:33:ab:f8:18:4d:a4:29:10:6e:be:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:5B:01:3B:59:76:10:F1:E0:E8:C1:6B:FC:E1:9E:FD:C5:D8:20
X509v3 Authority Key Identifier:
keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8a:de:87:8e:16:ea:6e:b2:bc:23:51:5d:04:3e:4c:60:a1:
44:ca:91:32:ac:f0:cb:a4:be:08:54:90:b2:93:19:3f:5e:e3:
74:6b:80:95:3a:d3:e8:15:14:bf:66:19:ab:a7:93:27:93:ca:
b6:04:e7:c6:9c:ee:7e:60:da:bb:75:d4:d9:f9:a5:67:a0:59:
a6:f3:61:70:30:94:07:2e:e0:f0:8f:8f:1e:27:81:b1:84:8a:
e0:46:93:65:f1:b8:18:19:d6:85:57:98:6a:10:81:15:e4:60:
f2:71:c8:c0:50:b5:31:1e:bb:de:1d:4a:37:91:34:76:11:7e:
40:7a:5c:fe:d2:74:5a:e6:84:ac:61:ad:45:38:fb:ef:e1:53:
32:ce:06:0a:d0:93:6c:28:85:3a:87:fb:95:cf:ed:95:37:ad:
0e:67:0b:3e:a5:0c:2d:df:e0:8d:10:57:6c:67:a9:bc:1a:74:
f5:11:79:b6:c4:ef:1b:92:2c:3c:0f:14:8a:72:24:76:65:f5:
6f:1d:93:56:71:d0:53:ed:ca:9a:ce:42:76:9f:e5:d5:35:c5:
de:f7:43:99:ca:96:32:6d:81:1e:6e:b5:6e:79:15:d4:7c:d4:
0a:d7:70:3b:32:ac:93:d1:c2:19:d8:bc:fb:15:18:9a:e4:a9:
19:e8:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:06:47 2026 by rpki-client