
Error: rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
File: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft (raw, json)
Hash identifier: 10cULdqOOe7jY01ADjGS2H+NEwAdrGyHvDd4a6y/0fw=
Subject key identifier: 65:3A:A1:9C:68:C8:2C:5F:9B:B6:38:CF:FC:3B:48:10:69:37:EC:2F
Authority key identifier: 1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
Certificate issuer: /CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Certificate serial: 58E3EE433433F99062D09C875FBD80BC9A1D2AB0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
Manifest number: 04CE
Signing time: Wed 14 Oct 2026 14:05:27 +0000
Manifest this update: Wed 14 Oct 2026 14:00:27 +0000
Manifest next update: Thu 15 Oct 2026 16:58:27 +0000
Files and hashes: 1: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: ZeqWuGQFJx8ldPNGW+dlUZV2TRaUohk9bhBS6J3P+Nk=)
2: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl (hash: Hgm3MyyUPZq0NuWUA/5E2feApcK8luQiDFwzwmty5rc=)
3: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: 0AyEG0mudKFyVV0DXiJWdb7/XM3F/6N+s6UR/6ttaHA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 16:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e3:ee:43:34:33:f9:90:62:d0:9c:87:5f:bd:80:bc:9a:1d:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Validity
Not Before: Oct 14 14:00:27 2026 GMT
Not After : Oct 15 16:58:27 2026 GMT
Subject: CN=653AA19C68C82C5F9BB638CFFC3B48106937EC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:a3:c3:bd:bd:e1:03:3e:9c:34:97:9d:d6:
93:82:eb:b5:65:e2:0e:29:ae:da:10:aa:b5:21:38:
f4:04:b9:c7:8e:a7:5c:8d:25:bc:90:be:db:43:22:
f5:52:0b:4a:3f:dd:0e:0b:bb:9c:ad:bf:2b:9d:64:
18:95:7a:78:77:17:ce:28:f6:46:cd:01:b8:23:83:
c4:06:d1:55:a6:3f:1d:1d:3b:87:ae:8e:77:46:3c:
0e:d7:06:05:06:25:a2:21:17:14:11:93:03:ee:0a:
f0:af:b2:d0:61:3d:ed:c8:c5:3a:23:9b:8d:80:4e:
df:e9:86:87:3e:22:85:58:b9:34:61:d4:e0:b4:a1:
31:a6:34:5c:a6:1b:17:f9:51:fa:21:e6:35:aa:18:
5e:65:1a:1d:80:07:2a:79:e8:e1:e6:d2:6c:cb:19:
6d:26:12:4d:25:b2:7c:64:49:8d:1e:6e:21:10:8d:
68:72:85:d8:a7:80:16:3f:0d:0f:16:c0:1b:6c:68:
87:c0:a9:fe:97:4a:9b:16:58:16:01:30:9c:26:f3:
2c:84:89:5f:f6:f3:d6:52:30:0f:88:e8:81:06:7b:
9b:7a:36:37:9e:37:a1:5e:e0:a1:df:db:b3:b1:d0:
ac:3f:4b:f8:30:a9:ac:97:b2:d9:e5:f9:13:6e:5c:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:A1:9C:68:C8:2C:5F:9B:B6:38:CF:FC:3B:48:10:69:37:EC:2F
X509v3 Authority Key Identifier:
keyid:1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7c:92:09:75:11:9c:37:a1:a6:cb:5e:57:3b:c1:16:de:61:
6b:2d:6e:56:d6:54:11:7a:62:a1:84:de:ed:e2:d7:2c:29:72:
40:41:48:d0:61:c2:47:39:84:42:d3:e4:de:f6:d6:72:14:d0:
48:43:11:0c:ae:7e:bd:61:91:55:06:fa:9a:dc:c8:f9:c2:9f:
89:f2:b5:b7:fe:a0:6e:92:3a:ef:8f:fe:6c:6f:dc:23:49:d9:
e4:75:82:2f:f0:ad:60:01:2d:48:72:27:2f:ab:92:aa:58:d0:
86:6f:3b:1b:62:9a:c8:8c:3c:aa:3c:b8:eb:62:06:07:62:a3:
35:ef:ff:4d:79:cb:43:c4:18:03:c5:cc:2d:89:ce:b1:ab:f8:
90:f3:ee:77:e3:fa:d1:d8:84:3c:f9:7e:6b:6f:38:2a:69:c0:
c9:d5:a8:f9:11:f5:dc:25:af:18:4f:af:0a:33:d8:b3:b5:13:
64:37:76:88:fd:b7:69:ea:51:b9:4c:c6:12:2f:8f:0d:11:97:
0f:bf:d5:23:12:76:2f:ac:29:04:c7:57:4a:a8:37:1a:4a:09:
12:37:b7:44:89:0e:e5:25:58:20:ad:de:c3:9d:50:cf:55:f4:
70:68:de:ef:96:67:3d:69:6b:1b:c7:34:ac:48:26:8d:dc:1d:
93:a6:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:55:59 2026 by rpki-client