
Error: rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
File: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft (raw, json)
Hash identifier: dNAhkMZ8MOw0uUlwOAbZrR5sP0bsI/pIoGowtN8i040=
Subject key identifier: 75:B0:0D:18:13:70:1A:46:A9:FE:8D:63:6B:C7:AC:D4:AD:10:9C:68
Authority key identifier: 9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0
Certificate issuer: /CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
Certificate serial: 231115C9BC1C7D49B58F11EE3962697FEEFC6C9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
Manifest number: 04C0
Signing time: Wed 14 Oct 2026 18:07:16 +0000
Manifest this update: Wed 14 Oct 2026 18:02:16 +0000
Manifest next update: Thu 15 Oct 2026 22:06:16 +0000
Files and hashes: 1: 323830343a313334303a3a2f33322d3438203d3e20323633353234.roa (hash: dUeLoznzRyIC83MIcHHfdJV+cHR06wYV/UilJQkHWXY=)
2: 9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl (hash: 0PJ0seShuk44xlBfeNZU5Ghip6oju+w+KGgimNZRDSs=)
3: 3139312e3235332e32342e302f32312d3234203d3e20323633353234.roa (hash: ZZSxO1ITmI166O5+psgOiMmV3lXEBAvqKox8NAFyIw0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl
rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 22:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:11:15:c9:bc:1c:7d:49:b5:8f:11:ee:39:62:69:7f:ee:fc:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E4DE6ACE0DBACA81C5367421F71989019428FF0
Validity
Not Before: Oct 14 18:02:16 2026 GMT
Not After : Oct 15 22:06:16 2026 GMT
Subject: CN=75B00D1813701A46A9FE8D636BC7ACD4AD109C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:75:22:a0:54:bd:2e:08:cf:55:8a:2f:ab:
e4:00:bc:e3:04:f1:0b:64:3f:b8:a1:38:a3:d6:f5:
5e:d4:bf:3b:ba:a6:e8:57:10:bc:40:81:ba:44:34:
4f:ed:9a:05:78:8c:72:bf:b6:9b:6e:d0:dc:c4:3d:
6e:16:c6:78:30:f1:5a:ca:df:24:85:9a:2e:31:76:
36:7a:62:e0:a5:7e:d8:17:aa:c0:70:64:2f:fb:0b:
b2:1a:f2:bf:48:56:46:8c:f8:80:b1:6b:88:0f:0e:
df:5a:90:39:df:eb:85:22:06:a5:ac:cc:88:ae:8a:
18:16:8c:9a:87:3e:d8:bd:4f:40:c2:ce:14:4e:2e:
0e:68:e6:a3:ab:aa:eb:d7:28:b4:fa:48:44:15:5c:
dd:f4:6c:78:35:f3:53:50:14:7c:b1:36:0b:ef:10:
82:cc:3b:c5:95:26:39:06:a6:b9:c7:32:3c:46:12:
4c:32:88:9b:78:a7:d9:d0:b6:97:a0:01:1e:0f:47:
5d:75:df:38:33:12:3c:dd:ff:49:56:1a:80:a1:c1:
8b:fb:c7:46:5f:5f:af:80:57:82:57:81:2d:55:5d:
84:25:10:a5:aa:39:e3:0c:5e:d2:43:d6:42:3d:cf:
c2:23:51:2f:7c:e9:d2:aa:8a:3c:86:c0:6b:7b:a9:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:0D:18:13:70:1A:46:A9:FE:8D:63:6B:C7:AC:D4:AD:10:9C:68
X509v3 Authority Key Identifier:
keyid:9E:4D:E6:AC:E0:DB:AC:A8:1C:53:67:42:1F:71:98:90:19:42:8F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/1/9E4DE6ACE0DBACA81C5367421F71989019428FF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:bc:3e:ff:d2:d3:c1:d5:c6:e6:4b:71:1a:0b:e6:50:02:
5b:92:1d:3d:7e:fc:59:43:34:80:81:b3:94:a5:2b:f7:46:a2:
cb:72:30:96:72:1d:51:95:13:0d:52:35:d8:2b:c0:4d:3d:00:
90:92:73:25:ed:60:9c:fb:33:ed:fd:e2:83:5e:57:17:7c:52:
b7:e4:a7:e6:72:cf:16:cb:e8:ac:ad:fb:ee:77:86:ad:6c:c8:
18:27:c1:01:52:0e:25:e1:a4:27:b6:6f:2b:fe:f2:a2:68:f0:
2a:7a:52:8d:c4:03:1f:05:37:73:54:77:71:1e:42:17:77:d9:
aa:92:0c:73:10:77:ac:ac:dd:66:7c:9a:67:0c:54:e3:78:4e:
a1:38:78:77:d2:81:1d:b9:b3:33:d9:6f:9e:01:6b:2d:0a:be:
9a:dd:38:ca:57:4b:77:fe:b4:20:66:87:6e:1f:6c:33:a6:ce:
f0:ad:0d:62:69:e8:ce:a5:5c:f7:f1:2b:8c:1a:3a:bc:8d:30:
49:77:e3:6e:c3:c8:4f:64:86:d9:bc:76:79:af:dd:65:5a:f9:
10:ef:cc:16:f4:e0:59:e2:c7:c9:f6:e7:a1:d5:d7:ab:96:8b:
f8:d1:f5:93:c3:e4:6a:49:9e:c9:ee:18:11:16:52:0d:22:8a:
69:b7:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:46:58 2026 by rpki-client