
Error: rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json)
Hash identifier: K0DQvHkf/6pB7/vRoUKUnidW0PTBwyeX7E0HwN7d19k=
Subject key identifier: C2:60:6D:DB:8D:D8:F6:BA:78:C2:BE:8B:1D:E7:21:D5:45:F6:20:0D
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial: 56E410521831613417E109C6D9D120821C24A4D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
Manifest number: 03C2
Signing time: Thu 08 Oct 2026 23:48:30 +0000
Manifest this update: Thu 08 Oct 2026 23:43:30 +0000
Manifest next update: Sat 10 Oct 2026 02:03:30 +0000
Files and hashes: 1: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: fKU0AXEbitPYTeXMHx6/CsA3UkV6EfGEOb7N/3JfXes=)
2: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: WmIoG3ZiCBPo0f37hrIssWzwdCa8lb/aeZNuCVApMNI=)
3: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: O82PiKdF1gUPCyrGtYkmyjcXYRuPKQYjkqJN0ZWDbDw=)
4: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: csMQFNEL9b4SfyavTShogP9Qmi/oOULAbfbp+0HpWnw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Oct 2026 02:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e4:10:52:18:31:61:34:17:e1:09:c6:d9:d1:20:82:1c:24:a4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Validity
Not Before: Oct 8 23:43:30 2026 GMT
Not After : Oct 10 02:03:30 2026 GMT
Subject: CN=C2606DDB8DD8F6BA78C2BE8B1DE721D545F6200D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:0b:0e:c3:3e:e2:8e:f8:bf:5c:e2:ad:22:
ec:79:b8:d9:28:05:7d:b4:08:11:2f:fd:b1:75:5f:
9d:de:95:d5:3c:61:23:77:a5:9b:f9:3f:79:4b:5b:
cc:99:79:1e:ed:b5:ba:c2:2e:fe:c5:9c:f0:ff:4e:
51:ab:34:dd:e6:ea:41:c3:bb:4c:8a:6d:d1:72:af:
b3:37:2b:8e:70:39:01:a5:27:26:1b:76:6f:2d:45:
1d:56:4e:b2:93:7c:dd:00:f5:ab:37:37:8c:2e:1c:
83:43:07:66:8a:da:c9:16:33:0b:f2:29:7a:3c:1a:
9a:1f:69:cc:04:e8:97:ac:c5:26:2f:c0:a2:a2:78:
21:c9:71:41:b5:79:42:71:ba:5f:d6:ed:af:78:a3:
bd:61:32:33:d6:4c:75:8b:40:20:95:bc:18:b1:3d:
96:53:6f:62:f3:e1:0d:fd:a4:49:aa:f8:5c:b2:fa:
49:16:e9:4a:69:21:99:5b:d7:99:a2:d6:0f:0d:70:
ba:69:00:70:a9:9a:40:04:2d:75:5b:d5:b3:c3:d4:
ce:6a:39:aa:82:f5:14:48:17:cb:fb:02:50:06:f2:
59:d2:6c:16:e3:26:99:c1:36:8d:32:15:0c:88:50:
73:91:15:e5:22:d3:fa:c9:dc:58:48:b9:3c:48:fe:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:6D:DB:8D:D8:F6:BA:78:C2:BE:8B:1D:E7:21:D5:45:F6:20:0D
X509v3 Authority Key Identifier:
keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:70:ce:81:b4:16:39:bf:5a:23:5f:56:2b:53:52:f2:01:7a:
38:ca:8d:a5:8a:77:d5:36:40:f7:05:e1:55:5d:19:7f:10:b9:
21:86:32:b7:77:6a:0b:9d:c0:f4:2d:0a:4e:0f:f6:b9:6b:79:
e2:c0:d0:2a:99:2d:1e:80:43:7b:8d:ba:e7:c6:47:f2:24:3a:
7e:e2:68:e3:bb:44:13:83:59:88:22:2e:06:72:bd:6d:b6:c9:
7b:a5:b1:b1:ea:0d:ac:85:2f:a7:d1:4f:1c:02:61:b8:ed:18:
f6:be:59:77:17:ab:ee:1f:1f:e1:e5:9d:02:0b:3b:fa:fa:ce:
1c:53:9d:84:8b:2e:fa:6e:00:2a:d0:ce:76:e9:cc:62:c1:71:
ef:e5:52:46:53:17:43:47:09:ff:8d:65:23:8c:92:a0:88:73:
7f:36:55:36:e6:23:03:1a:e0:25:4e:2f:58:25:62:0e:19:0c:
ce:16:29:9f:8f:d4:01:5d:d1:4e:18:75:51:7b:17:d7:74:e5:
5c:14:2e:f5:65:d4:61:01:c9:6a:66:53:d5:53:58:4e:ab:5b:
32:4f:5d:ca:ac:01:e8:30:24:58:e8:1a:3f:77:98:ff:16:0e:
20:51:8b:cf:6a:33:b6:a9:24:b1:fa:a7:8a:3e:6c:12:2e:44:
04:20:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:58:07 2026 by rpki-client