
Error: rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
File: D477F47EB674BB270E21D1DF467090789AFE23F1.mft (raw, json)
Hash identifier: 7pXpEGmZawinr0vgXEAlkBR7HV0LZW4bxZpJZcY0goI=
Subject key identifier: D1:11:61:FC:1C:DC:AF:CA:61:D4:30:3C:37:BA:C4:67:44:73:90:3D
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Certificate issuer: /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial: 2948C92602ABB147E5408AD19EFF885A1DA2932A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
Manifest number: 0574
Signing time: Mon 19 Oct 2026 12:00:00 +0000
Manifest this update: Mon 19 Oct 2026 11:55:00 +0000
Manifest next update: Tue 20 Oct 2026 12:00:00 +0000
Files and hashes: 1: 3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (hash: FzCGLrNvevqPx8mrdMdwtN3D84F7sXonIqpUijTk29g=)
2: 323830343a373931633a3a2f33322d3334203d3e20323731323835.roa (hash: pRLO03E/pKtp6Fgxs8x8CbPOUhPrdIrrVnmcqJGIwKc=)
3: D477F47EB674BB270E21D1DF467090789AFE23F1.crl (hash: H7b1tx26XEE2c9Q/qnYg6/NJvdJ3Qw17EjZL2Z1ejcI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:c9:26:02:ab:b1:47:e5:40:8a:d1:9e:ff:88:5a:1d:a2:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Validity
Not Before: Oct 19 11:55:00 2026 GMT
Not After : Oct 20 12:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:b5:e9:84:8d:66:06:69:72:03:a0:8f:4b:
76:11:2b:90:06:b1:22:ca:ec:4a:2e:26:d0:ae:a6:
1d:f7:13:f5:c6:cd:e6:b4:0e:2d:cd:49:a3:b3:36:
db:2b:3f:9e:31:0e:28:b9:4f:ca:71:94:fb:9f:6c:
1e:80:fd:5a:c1:28:b7:7a:66:fd:ac:2d:f7:79:a9:
0f:0f:16:80:0a:0f:be:40:98:cc:9e:a6:c7:05:ae:
ad:62:ca:0f:1d:0f:62:07:95:be:63:88:cb:96:05:
fe:72:08:9b:be:72:db:99:d8:55:8f:0b:06:c5:8d:
ea:97:25:3c:f4:62:3b:4a:5f:ff:21:74:12:16:3a:
74:bd:a4:8e:3a:cb:59:8d:77:10:3e:f4:fb:bf:53:
0b:4a:eb:71:ab:3e:08:38:80:9a:63:00:5c:ba:f5:
4a:2a:6b:dc:ac:b6:c1:c1:5d:53:eb:dc:65:19:8d:
6b:6e:14:c5:61:5f:6c:aa:a6:bb:5b:fc:1e:c4:3f:
f9:6a:19:2f:d5:8a:cc:ac:e9:1b:bc:94:92:0b:4b:
db:d2:9e:5d:21:5a:54:3e:26:3f:d3:f8:39:2b:d0:
74:21:8d:89:3e:c0:fe:01:12:9b:8f:65:d3:6c:72:
f7:01:ac:81:af:14:f4:42:f2:ee:34:39:2e:bd:79:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:61:FC:1C:DC:AF:CA:61:D4:30:3C:37:BA:C4:67:44:73:90:3D
X509v3 Authority Key Identifier:
keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:f4:b4:f4:ab:a9:06:41:96:09:a8:a1:10:6c:d4:15:3a:
03:41:11:11:00:b0:63:10:64:d4:28:81:6a:27:0e:40:be:ef:
b9:29:8c:6c:ac:5b:8f:7b:61:6c:45:4e:6e:0b:5b:a6:4b:a8:
31:1b:af:e2:96:e9:b4:34:a5:ac:9d:55:30:47:df:a1:b4:99:
39:2b:5d:18:56:b5:c4:06:b7:1d:ab:44:6a:b4:b8:01:aa:62:
01:98:94:a6:35:07:a2:c6:5e:b7:c1:4e:d4:78:d4:e1:c6:29:
f2:44:8d:cd:ec:a9:29:dd:27:38:98:47:82:67:75:c4:b7:a4:
6e:92:b5:92:4c:ad:f8:8a:db:b0:17:b8:14:b4:43:d2:9e:16:
b4:2e:88:be:13:9a:50:62:86:d8:72:2d:f8:8f:87:18:63:c7:
4b:f7:68:74:15:0e:bb:0c:65:4a:12:0f:29:a6:3d:1d:01:60:
c6:3c:73:0d:fe:e3:19:ba:ca:57:d3:cf:60:b7:85:57:4c:3d:
b1:d2:4a:e6:8c:e5:33:c3:5c:02:fb:6d:f2:38:fb:92:80:b9:
ab:14:64:c0:6a:24:92:6d:eb:43:af:72:c1:df:e3:0e:b7:65:
ab:5f:28:fa:03:32:d2:3f:e8:bb:f6:fe:ca:53:4a:ec:b7:ff:
ad:8e:f2:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:09:58 2026 by rpki-client