
Error: rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File: DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier: ZSedgaNrmVGj7hi1HAy4lL4ZKIv3/k/Owp0EzwPV5/g=
Subject key identifier: 7F:BE:13:11:05:4B:FA:05:B4:71:65:26:4D:BA:49:77:60:85:34:0A
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer: /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial: 537279C404BC973FE274AC295F08A94BCA12B50D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number: 0401
Signing time: Wed 14 Oct 2026 12:43:45 +0000
Manifest this update: Wed 14 Oct 2026 12:38:45 +0000
Manifest next update: Thu 15 Oct 2026 13:13:45 +0000
Files and hashes: 1: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: VsPJbpgMWb1Kd7oYRq5emDuXHO2+Nty+yineydrcz4k=)
2: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: 1+SfIeK6z1UFWI7iF5eYgBasI0bGmiQnX9IW1LloDvo=)
3: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: sGZZk+KCK6cosQKGNEMk4lbq2oa7M6A1kHFj0mUIepI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 13:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:72:79:c4:04:bc:97:3f:e2:74:ac:29:5f:08:a9:4b:ca:12:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Validity
Not Before: Oct 14 12:38:45 2026 GMT
Not After : Oct 15 13:13:45 2026 GMT
Subject: CN=7FBE1311054BFA05B47165264DBA49776085340A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:2e:7f:be:09:04:88:22:88:4b:c3:f2:6e:
67:8c:66:7b:1d:c4:77:ef:49:77:d4:24:fd:01:43:
fd:21:c6:f9:9f:8c:a6:35:2e:75:0b:15:8d:02:b1:
d2:cd:02:eb:b0:52:14:21:50:a7:37:0e:1c:6b:8b:
2c:29:b5:c5:09:c2:e3:14:b7:9f:fd:27:c4:61:dc:
eb:11:fc:90:26:0f:f0:9c:70:ca:e9:97:3a:1b:37:
2a:e4:e7:a7:d4:2b:ad:d3:74:ab:a8:ca:ad:8b:ca:
aa:0f:2f:7a:7e:20:81:4e:98:f1:e5:59:a8:12:c6:
13:12:77:03:2d:3b:30:d9:19:96:22:b0:3c:b9:75:
be:a1:9c:08:02:27:72:04:b1:42:1c:ff:ce:73:dc:
a6:7c:98:fd:2c:6a:ec:b4:77:cf:bb:42:e5:41:b5:
e2:2f:f8:bf:0c:24:71:d2:3e:36:33:50:68:7e:11:
48:8a:13:e2:22:3b:88:38:f5:d0:49:8d:10:e0:bf:
47:0d:2b:94:a8:67:ec:4e:cc:5c:05:52:15:06:3b:
e0:47:60:ce:5d:3e:c1:9f:81:cc:f6:c5:f1:27:4e:
af:0f:93:1f:58:21:84:11:36:a6:10:43:8f:75:51:
2a:46:eb:7e:d1:fe:71:1d:65:86:cc:b6:fa:73:6f:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:13:11:05:4B:FA:05:B4:71:65:26:4D:BA:49:77:60:85:34:0A
X509v3 Authority Key Identifier:
keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fb:9f:2b:d0:be:26:6a:58:84:31:90:31:78:7a:41:05:c3:
a7:91:14:68:0b:6e:c4:47:71:ee:56:c4:71:60:87:2d:81:81:
ff:68:62:6f:b1:b1:38:58:67:c3:0c:59:b5:5d:3a:34:3b:09:
03:eb:86:96:33:eb:1b:ab:05:3a:68:90:21:55:7e:d9:d1:f6:
9b:e2:a6:54:c2:a8:03:da:5e:82:d8:e0:8d:67:44:09:c9:c1:
34:b9:ce:a2:b2:52:5d:a5:f5:60:55:45:97:b3:73:2d:21:4e:
c4:b1:ff:13:3a:02:d4:7b:81:5f:e6:18:9a:75:14:58:a9:1b:
62:60:ef:19:da:d8:78:49:66:c9:c8:a2:fa:4b:1d:f8:c4:4c:
75:59:40:57:bd:f1:cc:a6:56:35:54:f6:3c:f1:04:db:01:3d:
22:45:65:c6:32:0a:da:31:80:08:93:f1:55:5d:cd:dc:a5:58:
e8:55:48:fa:6b:16:c9:7c:94:17:2f:a9:84:55:ea:d2:7c:7e:
7a:21:51:db:4e:41:2d:7e:3e:38:be:52:5e:21:26:55:ea:bd:
aa:f3:6c:8d:25:2e:67:73:0f:63:a7:ad:a4:ff:db:11:81:40:
3d:02:f0:fc:f4:d3:85:d4:5a:71:40:a4:24:61:b2:24:f2:69:
64:c6:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:16 2026 by rpki-client