
Error: rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
File: BC4626991569184D81CCF322C25715DD37F1D01B.mft (raw, json)
Hash identifier: 8xvI6VQek3wu9FpaRO/HmeteXlKO5+eLBk00W4wmDSc=
Subject key identifier: 35:27:95:84:7C:A8:7A:8E:19:16:C0:13:EC:41:22:E6:64:28:6E:23
Authority key identifier: BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
Certificate issuer: /CN=BC4626991569184D81CCF322C25715DD37F1D01B
Certificate serial: 368D2B1DC67F35C78483A70912F56ED842C3A4CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
Manifest number: 058A
Signing time: Tue 03 Nov 2026 03:00:00 +0000
Manifest this update: Tue 03 Nov 2026 02:55:00 +0000
Manifest next update: Wed 04 Nov 2026 03:00:00 +0000
Files and hashes: 1: 34352e3137392e38382e302f32322d3332203d3e20323639303730.roa (hash: tbDqUC9/XHrOLP4+5hos2AWihZViPkV4+9bGr742+wo=)
2: BC4626991569184D81CCF322C25715DD37F1D01B.crl (hash: gCSYEyyittCBgAg7xfrxh/hCpae1UGXIYE0NlTn+dUQ=)
3: 323830343a356630303a3a2f33322d313238203d3e20323639303730.roa (hash: 6uu975bsToD06Tj7+sYQDdzdaOEn5RxQJ0V3+i9YA3M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl
rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8d:2b:1d:c6:7f:35:c7:84:83:a7:09:12:f5:6e:d8:42:c3:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC4626991569184D81CCF322C25715DD37F1D01B
Validity
Not Before: Nov 3 02:55:00 2026 GMT
Not After : Nov 4 03:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:e8:df:38:5f:7d:63:f2:aa:c6:f7:d6:43:
4f:dd:0d:0e:d1:b7:17:43:69:c3:9f:23:8c:12:e5:
78:ec:f8:b8:4c:f5:58:01:bd:aa:3a:d0:e3:28:71:
51:fa:b9:ba:6b:d9:98:3c:80:03:f2:31:b3:9b:0b:
e6:0d:c2:0d:03:93:c0:6f:0f:79:21:e7:64:40:b2:
61:4a:09:4e:a9:f1:59:f4:2d:16:d2:f1:54:69:db:
a0:e3:55:c6:c2:ac:58:5b:c4:d8:77:a4:51:93:33:
dc:a5:bf:b5:1e:53:46:bb:a0:a2:9c:54:f8:be:45:
47:b4:71:8e:f5:09:94:c5:e9:c0:32:4d:14:54:ee:
cb:3e:cc:a3:87:45:40:ab:47:22:6b:11:01:f7:c8:
6c:3f:08:d1:b1:fe:a7:59:37:4a:e1:7d:73:31:68:
40:f2:b9:7f:6c:cf:01:d8:6b:f7:ab:3e:37:82:4a:
63:e7:25:70:d3:d3:73:6b:4f:ad:73:2f:9b:e3:69:
63:bd:33:41:67:a6:05:01:a7:97:6b:94:53:0b:26:
e7:0b:2b:8d:21:9c:71:7d:32:c2:e7:e5:fc:41:4f:
be:30:95:b9:a7:89:b1:b2:a9:fa:d8:c4:cc:f2:3d:
ae:5c:3e:d8:a8:89:c9:b0:15:0e:ba:86:cc:7b:de:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:95:84:7C:A8:7A:8E:19:16:C0:13:EC:41:22:E6:64:28:6E:23
X509v3 Authority Key Identifier:
keyid:BC:46:26:99:15:69:18:4D:81:CC:F3:22:C2:57:15:DD:37:F1:D0:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4626991569184D81CCF322C25715DD37F1D01B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/1/BC4626991569184D81CCF322C25715DD37F1D01B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:bb:e7:12:55:8f:7c:7f:82:f8:c6:d8:10:06:0a:bc:64:
fd:01:ba:4b:95:73:87:d9:96:0d:61:90:5b:33:b6:c8:9e:49:
50:bd:20:29:0c:a5:af:23:88:b6:b4:42:01:6f:01:b8:ed:ff:
46:7b:64:c7:d0:f3:52:06:4e:b5:0b:7f:d1:a6:c8:c8:e1:70:
87:9b:61:82:14:58:66:9a:8a:26:51:2c:01:27:85:fe:c3:41:
22:cd:c3:79:d3:9b:38:48:0c:e7:93:92:b3:fd:08:4b:e8:23:
18:c1:d0:20:64:23:04:36:ad:d0:08:bc:14:c8:40:43:5f:3a:
b3:a1:5b:52:09:7f:7b:f0:5d:d5:04:8d:de:f8:be:6c:9c:c2:
4a:1c:07:84:a3:6b:b3:91:96:53:4b:fd:c0:fa:2e:b3:4d:e1:
bd:c8:5b:05:19:10:21:03:a0:92:1d:5e:40:ee:df:55:1c:69:
5b:09:4f:64:02:43:3a:da:3e:e2:fc:e5:9c:3b:77:06:12:ef:
32:8d:e6:30:d6:5e:ff:5c:92:bb:54:99:45:8a:ac:1a:f5:a4:
5a:0a:f8:2c:3a:c1:8d:6c:c3:45:01:b2:fe:f7:22:b2:7c:18:
a6:73:74:19:d5:72:aa:fb:9a:a8:f6:47:6a:3b:f9:4c:6d:b7:
18:e7:e5:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 06:12:57 2026 by rpki-client