
Error: rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
File: 6321913B8F265DB266263684C1BC420640061E1A.mft (raw, json)
Hash identifier: 5y1TKaRlCcan7vAD5AubMCTBLhKBO1zqsN9Q92e8q/Q=
Subject key identifier: 55:AC:06:75:0B:D4:95:9D:F8:97:30:2D:3D:2E:36:83:11:D0:85:CC
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Certificate issuer: /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial: 3881462C908A28F1FC73880E3C0AF56FAD505618
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
Manifest number: 045F
Signing time: Sun 01 Nov 2026 02:33:35 +0000
Manifest this update: Sun 01 Nov 2026 02:28:35 +0000
Manifest next update: Mon 02 Nov 2026 03:36:35 +0000
Files and hashes: 1: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (hash: TdA9895ONLIzi4qc+d1f2GAp2J5CYRUmZoT7qlO38BY=)
2: 3139382e3138342e3136312e302f32342d3234203d3e20313938393439.roa (hash: 4Z9cha3sVBOlzTrT0dVMcvNNK+EHRcrGLqWw2BwB8zA=)
3: 3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (hash: lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=)
4: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (hash: Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=)
5: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (hash: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0=)
6: 3137302e36362e302e302f31362d3234203d3e20313938393439.roa (hash: 072VEbaI7xB9Jhovu0RQAyYnQXYwsrJAt5OhwHYTOLE=)
7: 3137302e36362e302e302f31362d3234203d3e203131393933.roa (hash: Aa6+6KgZHik6+ABzhpmvLEKv4dZCz7fRMiExXTKJrRE=)
8: 3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (hash: QIRLiXgnYMfb4NQLMga6l9oGFV4HRi7LxF1Dsm3IXgo=)
9: 6321913B8F265DB266263684C1BC420640061E1A.crl (hash: l8fxVdz2TplKeKHeQd7yd/srS6FP1lGbvbmEmtJbz2Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 03:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:81:46:2c:90:8a:28:f1:fc:73:88:0e:3c:0a:f5:6f:ad:50:56:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
Validity
Not Before: Nov 1 02:28:35 2026 GMT
Not After : Nov 2 03:36:35 2026 GMT
Subject: CN=55AC06750BD4959DF897302D3D2E368311D085CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:12:b0:3b:06:7e:c9:40:73:d0:a0:aa:c5:
03:1b:b4:90:d6:b8:40:fd:88:6f:0f:0b:60:1c:c1:
0a:23:2a:94:3f:1b:72:e8:94:64:d2:9e:fa:40:2d:
0f:c9:da:fa:e2:83:35:12:07:67:f2:1f:ca:55:ab:
d1:eb:cc:90:8c:54:c7:9c:75:d0:d0:db:be:01:60:
0a:c7:99:62:ac:d6:65:9c:14:b1:77:c4:e3:b7:04:
9d:a4:e0:99:91:0e:37:aa:1c:db:62:ed:92:ce:08:
50:08:07:6b:4a:83:de:d3:bb:1e:eb:c8:bb:09:b6:
de:f6:b0:43:5c:d2:45:02:44:9c:47:5f:e7:49:0b:
c8:52:a3:0c:33:e3:1f:35:f6:ac:af:30:d4:40:dc:
a6:db:be:07:a4:8d:3d:c2:51:ec:e3:f9:b6:9f:6a:
7e:68:68:45:d8:2c:92:2c:2e:bc:e7:8d:e9:f5:c5:
38:3b:00:9e:54:ef:55:6d:80:c9:fc:e7:54:4f:02:
27:72:98:95:84:6d:3b:08:d4:3d:a4:ba:d0:50:71:
4a:2e:00:fa:9a:cd:d4:86:1b:18:d0:a2:5c:8b:9c:
17:6b:9a:a5:78:b4:71:67:78:1a:25:67:c6:1e:22:
e6:56:d1:f5:47:b5:b1:a5:cc:1a:b6:46:a2:36:9e:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:06:75:0B:D4:95:9D:F8:97:30:2D:3D:2E:36:83:11:D0:85:CC
X509v3 Authority Key Identifier:
keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:23:1e:d7:f1:da:22:f1:6a:e6:bd:d6:1e:81:8b:1f:b4:68:
a6:67:b8:ba:bc:2e:89:d5:d3:b9:1c:c6:ed:37:ab:0d:38:85:
15:4a:3f:f5:2a:04:2a:88:24:87:85:c7:8b:87:4a:f9:a6:18:
4b:e2:ef:ff:76:11:ca:58:3e:86:96:cc:3f:73:c9:c8:e6:fe:
81:84:56:04:4b:b1:6d:a8:ff:81:b5:b4:99:5f:04:ac:6c:7e:
ff:35:5b:c2:22:15:23:b0:a8:76:b1:39:38:b9:2f:b8:1d:d0:
c8:9c:13:72:b5:6e:6f:ca:58:34:a9:59:05:95:db:32:b7:59:
93:db:86:06:be:b0:16:2f:4a:d9:64:e4:1b:27:37:b2:7f:b0:
6c:7a:82:09:f5:78:57:b1:6f:1e:38:88:77:34:65:f5:31:53:
d6:bd:01:ae:19:8e:a0:96:aa:d2:9b:7e:cd:b5:e8:67:19:f9:
29:37:c3:d6:46:7e:48:a9:4b:4f:14:7a:6e:bc:ba:96:7b:db:
a6:0d:6e:d8:9b:28:d4:ef:4b:d6:b3:b3:30:35:7d:e1:cd:94:
b2:a8:ac:3a:15:f5:86:a3:a0:12:aa:c9:15:b3:a5:eb:44:b1:
54:18:6f:20:4a:aa:66:b8:c8:cb:49:2b:77:46:23:8b:0c:62:
09:e4:51:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:29:58 2026 by rpki-client