
Error: rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json)
Hash identifier: qqPIZVeRUS50ifTXUwlUolZ7akJSe79A3ZeUvsEUNwA=
Subject key identifier: 8D:2D:92:2E:C0:F9:DB:8E:A6:F1:B8:A9:C4:04:DC:3E:4D:A1:4D:71
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial: 3DE98DD7E166D7361E70DF0817D98B8D414EDF2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
Manifest number: 029B
Signing time: Tue 13 Oct 2026 15:10:00 +0000
Manifest this update: Tue 13 Oct 2026 15:05:00 +0000
Manifest next update: Wed 14 Oct 2026 15:26:00 +0000
Files and hashes: 1: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: UWhmg/R7b1L0k0peF+umnFyeaIeECc8XS0de9i+wEOY=)
2: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: 6PShaX8h/AVJp6bPgeVzA4tURjIZtwXwMwIPwhids84=)
3: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: uJPZpGqlp2+6BM8e5FiCaFRRh4X3aiGqt7DY2Tt6jT8=)
4: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: mRoJxlUfwEBjFf9wX960FoxB74HITXgomDbH50/+HOk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 15:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e9:8d:d7:e1:66:d7:36:1e:70:df:08:17:d9:8b:8d:41:4e:df:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Validity
Not Before: Oct 13 15:05:00 2026 GMT
Not After : Oct 14 15:26:00 2026 GMT
Subject: CN=8D2D922EC0F9DB8EA6F1B8A9C404DC3E4DA14D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:f2:db:4c:3d:c0:50:46:15:34:c7:36:30:
ee:b3:50:70:61:64:c2:47:4a:4e:09:ec:15:a3:6d:
0e:37:e2:46:d9:fe:8f:fe:6f:e1:f0:4b:3c:99:ad:
cb:6f:9e:61:2e:29:e0:bf:d8:d7:33:39:26:a7:14:
79:02:fb:25:b9:f0:4a:0f:ab:5e:ac:98:b5:79:a4:
47:5e:4b:f8:b0:5b:59:fb:88:e3:31:89:90:b0:b4:
a8:42:fc:ef:fa:f0:5b:f8:fd:d3:5a:60:81:52:de:
10:64:e4:6b:8c:0f:3b:bb:e5:17:b6:16:96:59:97:
62:99:12:84:ea:be:a9:fa:8d:ea:16:58:4f:c3:84:
81:ba:7a:47:b0:5f:8d:e1:ae:33:b9:a8:4c:53:83:
44:05:b0:4e:3c:ea:0e:02:bf:15:4f:a5:af:bf:f5:
bf:88:36:2f:bf:65:60:d8:19:9b:da:2f:9b:83:fe:
ce:8d:f8:42:d9:c8:3e:6a:df:b0:0a:69:b5:d3:f8:
37:bc:07:7e:f2:52:92:55:db:1c:5f:16:35:bf:a5:
5e:fb:02:cf:93:4a:6a:12:01:d3:79:0c:6a:0d:0f:
4a:72:b4:5c:b6:97:95:3e:04:28:42:7c:84:b5:ee:
7b:0f:0b:49:0b:da:d0:b5:0f:7d:75:52:b5:9a:77:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:92:2E:C0:F9:DB:8E:A6:F1:B8:A9:C4:04:DC:3E:4D:A1:4D:71
X509v3 Authority Key Identifier:
keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7e:a9:8e:d5:4a:08:42:a9:07:59:de:b7:1d:cd:a5:05:97:
28:ee:20:41:6e:9f:95:39:99:b4:f3:53:30:a9:ca:17:f6:0e:
00:e0:fa:22:e8:6e:73:1d:f7:24:66:20:07:b8:1b:68:03:58:
6c:99:b1:9e:88:57:ea:33:15:66:fc:48:f4:4d:5e:24:d7:f4:
1b:c4:0d:56:14:94:52:81:f0:b0:7d:a6:a6:3d:de:d9:38:25:
10:99:8d:b5:e3:e8:7f:43:07:f9:76:e0:90:41:18:d2:ab:94:
50:19:f5:dd:6f:c0:32:18:24:20:5e:c2:27:15:51:0e:02:58:
03:4e:5e:6d:7e:37:78:24:f0:1e:70:a6:e1:be:2b:f4:bf:66:
ca:9f:ef:d7:10:85:1c:aa:6e:b6:14:b6:40:ec:4e:7d:bd:6a:
c8:8e:27:91:b0:93:30:c6:2f:0a:da:0a:7c:36:73:b6:9d:59:
b0:a1:ca:10:39:16:64:78:9c:18:97:cf:84:07:2e:e6:0c:8d:
43:c2:28:f5:5e:dd:c6:6c:6f:b9:3f:65:2c:43:75:20:68:fe:
93:f9:7f:76:e8:04:a0:1d:fc:8d:d9:46:32:00:20:e9:56:1b:
56:41:60:52:33:b3:57:4e:aa:e9:bd:8d:c5:2d:94:df:b2:66:
33:94:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:03:25 2026 by rpki-client