
Error: rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
File: F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft (raw, json)
Hash identifier: pdwmRs7btxNM1wAARD7OVVFcznbi6ckCyrS6W3wrYlI=
Subject key identifier: 22:C2:B8:BA:8F:EC:2E:16:E1:00:8B:E7:20:DA:63:62:1D:D3:A2:0B
Authority key identifier: F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
Certificate issuer: /CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
Certificate serial: 07B92178CA66828D44FC3EE496FA39B327AD519F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
Manifest number: 02BF
Signing time: Tue 13 Oct 2026 03:37:18 +0000
Manifest this update: Tue 13 Oct 2026 03:32:18 +0000
Manifest next update: Wed 14 Oct 2026 04:52:18 +0000
Files and hashes: 1: F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl (hash: OiY/nrZE+K3SjAWsayAoPq2HF9IjKi9H/ArecIMHZio=)
2: 323830343a363062343a3a2f33322d3335203d3e20323639313835.roa (hash: rF3Vrl+EVzFJNDq4xP1eJ4xT3n9T2WH2xuL2DRSrX4c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl
rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 04:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b9:21:78:ca:66:82:8d:44:fc:3e:e4:96:fa:39:b3:27:ad:51:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E
Validity
Not Before: Oct 13 03:32:18 2026 GMT
Not After : Oct 14 04:52:18 2026 GMT
Subject: CN=22C2B8BA8FEC2E16E1008BE720DA63621DD3A20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:ff:55:76:a4:c7:11:9d:aa:b1:ed:aa:04:
70:72:46:4c:b1:b2:4d:ba:41:b2:60:04:f2:49:d8:
64:41:bc:02:17:73:ac:9c:1c:88:89:9c:af:a5:59:
9b:89:80:c0:bb:35:a3:25:ac:b4:98:e3:b3:0c:c7:
f6:f4:9b:1e:96:d1:82:ce:9d:c2:17:be:d1:5b:1d:
fd:f7:03:fb:3b:da:fd:4a:e8:c5:43:51:4c:54:52:
a7:b8:1c:51:bc:ce:ce:5c:19:5e:43:e5:1a:28:a4:
64:07:87:7d:f3:72:bc:b5:6c:20:1d:1b:4a:c9:3c:
f7:1e:a2:c0:5a:11:a6:76:b2:a4:aa:ee:f9:f6:c4:
3f:1e:92:57:4b:9b:a0:12:b6:9b:fe:92:57:95:91:
f3:5d:06:bc:55:eb:07:d9:24:4e:88:68:6f:db:42:
9a:41:9d:e6:e3:a1:dd:10:7e:8b:75:86:ac:b6:a0:
37:7b:77:78:53:b6:38:1c:3a:0e:00:ff:88:39:b4:
f1:26:4f:3d:c3:15:6c:1c:c0:e2:da:01:f2:a8:1e:
88:d7:47:e5:22:e3:24:8d:a7:d7:3e:31:3d:98:47:
5d:6b:45:12:74:2d:45:64:1c:87:02:cd:17:3a:ec:
0a:9c:38:2f:7e:d6:04:ab:ab:60:fd:b1:37:54:4a:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:B8:BA:8F:EC:2E:16:E1:00:8B:E7:20:DA:63:62:1D:D3:A2:0B
X509v3 Authority Key Identifier:
keyid:F0:EF:5A:E4:94:31:89:7F:FD:D3:75:9A:B5:AC:D5:D5:F9:D5:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33wsswsjEF1KVEGfEEMQuXEHHvMvmCgXd2XAmm9QYVzW/0/F0EF5AE49431897FFDD3759AB5ACD5D5F9D5CB3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:09:75:77:0c:e5:37:5a:09:b4:ca:95:de:e7:02:39:09:12:
7c:0b:10:25:56:7a:df:d3:ad:24:84:ce:b1:f1:ce:d8:49:bd:
22:42:7e:12:9a:2b:d0:ea:a4:47:51:82:cb:82:3f:f1:1a:86:
76:48:5c:75:aa:70:4f:04:0f:1d:48:da:c4:df:3c:65:cc:14:
f6:82:45:6c:08:cf:fd:85:e9:6d:03:d6:24:a1:01:60:46:7f:
02:2f:5c:9a:06:c6:d3:de:38:01:22:67:2d:40:f5:45:32:e0:
9d:ae:46:23:0e:d7:5b:01:bb:77:88:37:4a:b6:72:60:61:96:
82:40:d0:23:77:24:4a:24:da:f2:b1:e7:35:73:9e:65:0a:4d:
a7:fd:39:40:1b:54:0e:bd:74:cf:4d:8c:49:24:78:99:66:58:
88:4c:ea:80:d8:48:19:70:9b:bf:47:b2:be:51:76:b6:be:16:
bb:b0:13:18:d5:82:9d:a5:62:08:53:29:cd:ec:af:ed:4f:96:
41:75:a4:bb:1d:a8:5f:c8:4b:70:92:81:c6:14:41:12:6c:da:
3c:ef:8a:8c:26:ce:f5:d2:fa:7c:16:52:fc:75:60:74:5b:aa:
2e:e7:8b:a6:69:06:93:20:06:3d:f9:a0:d2:92:e1:b2:2c:5b:
54:22:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:13:04 2026 by rpki-client