
Error: rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier: hQ4MSpRHvKTo1FAX16Dlilj3faVVH4Z3BZhRQ4w8xpU=
Subject key identifier: F9:34:69:4E:77:F1:9F:EA:DE:FC:A2:68:F9:5F:C9:DF:10:7E:BF:B9
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer: /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial: 025673CCEE6D333940927E93BE85F6433E1F9D14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number: 04CD
Signing time: Wed 14 Oct 2026 21:15:04 +0000
Manifest this update: Wed 14 Oct 2026 21:10:04 +0000
Manifest next update: Thu 15 Oct 2026 22:05:04 +0000
Files and hashes: 1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: lyj26eQt4Bfr8kQ4YIwFaRZcczNhWwdMBYwwkkGxmSE=)
2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: KlvdEYkX9e6Dm3nNfgxR5z3DLQZUvFZ0x98d6xXZtF8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 22:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:56:73:cc:ee:6d:33:39:40:92:7e:93:be:85:f6:43:3e:1f:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Validity
Not Before: Oct 14 21:10:04 2026 GMT
Not After : Oct 15 22:05:04 2026 GMT
Subject: CN=F934694E77F19FEADEFCA268F95FC9DF107EBFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:fc:12:e3:ab:ed:ff:73:28:92:3a:c5:36:
41:17:05:37:36:5e:87:45:62:b9:b5:1a:ea:c0:26:
e4:c3:10:b9:ec:ff:3a:e2:ca:a1:df:b3:3e:8a:2e:
74:96:4b:0e:f0:47:d8:7a:28:b9:4c:9b:18:ce:e0:
09:88:c8:5e:2a:c3:72:1a:d3:c0:cc:25:fd:7e:b6:
93:89:f5:07:fe:3b:c3:32:de:5b:57:4e:30:b6:c3:
b6:a6:3b:37:60:59:fb:f4:de:71:db:36:7f:44:04:
b9:ea:75:35:ad:76:35:a6:86:b3:10:1f:4d:04:aa:
e9:f0:3e:02:47:1e:8a:5e:6c:1c:4d:2f:ab:77:cf:
ba:a2:97:f8:3b:8f:26:1c:6a:29:b0:b5:99:33:cd:
0c:5f:a6:20:eb:c3:58:1e:79:b4:42:35:de:33:5f:
40:6a:c1:b0:f8:04:55:cf:9b:23:21:04:ca:d1:82:
5b:c8:c4:ce:27:15:15:c6:ed:bc:c5:e6:1c:7a:b2:
c4:2f:96:91:c7:15:ba:4d:65:63:13:42:79:55:19:
34:9a:87:2d:1f:50:b4:e3:66:8f:79:0b:a8:81:e5:
30:aa:3f:db:a3:f8:c9:38:7f:ab:92:5c:d7:07:51:
35:51:3d:0a:b5:6c:9c:76:cd:6a:8b:12:05:f8:f3:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:69:4E:77:F1:9F:EA:DE:FC:A2:68:F9:5F:C9:DF:10:7E:BF:B9
X509v3 Authority Key Identifier:
keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:78:b7:11:82:39:77:d1:75:85:1f:c6:4e:16:20:04:db:ff:
d7:62:32:d9:9d:82:1c:c0:0f:1c:fe:23:19:62:c2:4e:7e:de:
94:8f:6a:e7:cb:6b:cb:1a:83:30:54:60:d0:c4:b7:af:fe:e4:
72:fa:ce:a3:c3:40:9b:f3:40:3e:7c:dd:8a:5d:46:1a:2d:f1:
2c:8e:91:67:7f:d2:eb:a2:8d:a3:6f:93:61:75:03:c2:e2:6d:
b0:ad:6b:21:32:0e:51:2b:3e:29:ca:80:02:e0:f5:44:12:a6:
c4:35:f7:7f:bc:8f:08:95:20:7d:9b:c3:02:93:55:85:93:60:
6e:53:4c:3f:1d:57:9b:61:a7:a4:b5:c2:fb:52:23:49:11:53:
01:e3:12:eb:b3:70:15:57:5f:cb:7a:95:bc:b4:7a:73:92:94:
65:9f:0c:f5:e8:a9:b0:92:5f:b8:52:b9:2e:f4:80:de:3b:89:
42:2f:4d:5a:84:a4:4d:5c:d5:e1:68:7c:7c:a1:1a:c3:e9:29:
ca:5e:3c:3a:d4:7c:9e:cb:a6:b6:7b:1d:56:8c:7d:ec:dc:17:
92:dd:a0:da:76:dd:ee:82:d2:6f:7d:c5:e3:73:d7:f0:76:4f:
b5:d2:f7:6e:c6:76:c5:9c:f7:b8:13:4e:42:b7:25:ed:ba:85:
55:e3:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:04:01 2026 by rpki-client