
Error: rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
File: 062347D8F4F770415633E22D794F8D58F390BA86.mft (raw, json)
Hash identifier: 3tU1jYG42FwpZ8qyL5XzDOTcqsEAZkcD1Spb0LCPvm8=
Subject key identifier: 28:BF:AB:39:61:48:EC:A1:9A:2A:B8:69:A3:73:D8:BF:78:77:00:D0
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Certificate issuer: /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial: 0FE17F9FC38E666543E238A8045764AB2C2295CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
Manifest number: 056B
Signing time: Wed 14 Oct 2026 03:10:00 +0000
Manifest this update: Wed 14 Oct 2026 03:05:00 +0000
Manifest next update: Thu 15 Oct 2026 03:10:00 +0000
Files and hashes: 1: 3139302e38392e3136382e302f32322d3234203d3e20323730333833.roa (hash: SBUrw02b1xdhOVQH1EQlyfdsqcQOVCjMZQ9TaX5wu8Q=)
2: 062347D8F4F770415633E22D794F8D58F390BA86.crl (hash: 1+ytBYHkwpq6bDYk/RrBmgDl8G+duTcscb66cynWgZ4=)
3: 323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (hash: +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 03:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e1:7f:9f:c3:8e:66:65:43:e2:38:a8:04:57:64:ab:2c:22:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
Validity
Not Before: Oct 14 03:05:00 2026 GMT
Not After : Oct 15 03:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:d0:04:74:d8:e5:12:ad:2f:d6:08:ed:20:
66:f3:f1:2d:8b:82:6a:e7:9f:87:17:b3:fd:37:58:
30:02:96:07:8f:20:7c:fa:a1:22:aa:43:b0:37:a8:
9b:ec:e0:55:bb:f2:cb:fa:65:67:17:12:5d:3e:1f:
e9:93:4b:84:d5:a9:95:01:49:e4:85:4e:ef:fd:59:
8b:2e:5c:09:82:c1:7c:4d:03:88:bb:10:19:14:28:
7d:b8:78:2b:34:49:9d:1d:ee:ae:a6:3a:b9:58:74:
16:d5:b1:2b:d3:fd:9e:0d:cf:6d:d5:67:7f:58:d0:
3a:c6:59:0f:22:4d:fc:07:b8:af:45:bd:4e:98:5d:
b0:11:84:b2:3a:9b:3a:81:43:a3:48:a2:d9:42:c9:
85:e3:1f:a9:33:b9:68:e1:dd:68:75:30:6c:ab:01:
72:89:34:43:ab:ee:ba:5a:f4:f0:10:47:8e:c7:f0:
6b:3e:ae:f3:f6:bb:0f:f0:37:6b:0e:2f:ee:f8:8e:
8e:fc:2a:e7:d6:5e:31:f9:0f:e5:7d:5a:07:8f:08:
a9:d7:3f:94:04:95:98:5d:37:a9:2a:39:a8:b5:0d:
a7:b8:fe:27:3b:c7:0d:06:83:d5:28:89:04:46:8b:
03:cd:d2:02:73:58:01:18:50:a2:0d:78:f4:e1:d2:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:AB:39:61:48:EC:A1:9A:2A:B8:69:A3:73:D8:BF:78:77:00:D0
X509v3 Authority Key Identifier:
keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:f4:24:cf:4d:68:1e:72:ad:03:f5:15:9c:a4:e2:7e:c5:
56:74:1f:50:37:12:c5:7b:54:35:b1:bc:60:2d:2c:7c:67:bf:
83:b0:72:0e:7d:47:40:13:b1:69:1c:74:f4:bc:b7:1e:59:50:
aa:17:37:23:30:5b:a7:05:30:8f:1b:f7:49:ec:5f:f4:ed:42:
af:1a:58:f2:82:68:b0:ea:4a:e3:62:93:4b:58:ad:15:82:db:
ee:9a:35:29:e1:6a:f2:1a:6e:d9:9e:88:cd:39:1f:05:4b:de:
b9:89:d8:3f:15:73:29:01:33:22:28:e6:f7:1c:0b:09:6e:77:
d2:d3:da:5c:60:cd:23:37:3c:74:e5:18:bd:d8:02:0b:e8:65:
a9:84:02:f2:2e:cd:79:eb:d7:de:76:2b:63:a5:f1:79:77:a0:
06:49:4a:86:e0:c4:3c:80:1c:f3:11:c1:ed:88:cf:84:99:3e:
71:a3:00:04:72:30:ee:7e:4a:d0:e3:35:fb:de:3b:1d:08:ed:
2a:a7:80:7b:a7:45:5a:60:78:e5:a6:1b:48:2b:55:3f:20:12:
c8:a9:64:0d:ac:4a:ee:7a:41:d8:2e:23:ae:17:64:bd:33:88:
3f:ac:22:f0:65:dc:3b:87:fe:af:23:81:10:43:1c:b3:94:89:
1d:b8:0a:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 14 09:53:32 2026 by rpki-client