
Error: rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
File: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft (raw, json)
Hash identifier: C11BInAyDUHDQPJ58oV4gX/LphkkOMtAYsV/Ren+B5Q=
Subject key identifier: 63:4C:2E:CF:D8:40:58:55:3F:84:29:E7:69:DB:13:7E:30:3C:39:43
Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Certificate issuer: /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Certificate serial: 20FFA46A97703C7A39B1EC1938F70D03025655A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
Manifest number: 04C0
Signing time: Wed 14 Oct 2026 22:25:50 +0000
Manifest this update: Wed 14 Oct 2026 22:20:50 +0000
Manifest next update: Fri 16 Oct 2026 02:09:50 +0000
Files and hashes: 1: 323830343a373463343a3a2f33322d3334203d3e20323731303032.roa (hash: XRfaZAGE2aiRPQDDDaWCkaGtRgdQwQaglXpduY15+84=)
2: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl (hash: nAd81TF2b13/kLajVs1te8CttwMsCXvZJmclvrGQJ94=)
3: 3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (hash: 1JjvDk48vxUfG8AKAqXTTRZ9oqfMLXbHB5O7sxtDrKQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 02:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:a4:6a:97:70:3c:7a:39:b1:ec:19:38:f7:0d:03:02:56:55:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Validity
Not Before: Oct 14 22:20:50 2026 GMT
Not After : Oct 16 02:09:50 2026 GMT
Subject: CN=634C2ECFD84058553F8429E769DB137E303C3943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:04:bb:2c:f2:6f:8a:ed:2e:5a:4b:bc:c1:
57:cf:0e:21:9e:11:4a:d3:9d:0f:fc:71:2f:f5:8e:
99:9b:ab:81:19:fe:7f:56:51:ee:64:cb:de:f1:21:
56:3e:94:f4:dd:55:c8:98:9a:89:33:25:c7:f7:49:
bb:b3:cf:8d:6d:08:e4:1b:13:44:62:2d:f2:1c:bc:
e2:e4:a8:46:80:1d:f1:f4:1c:a6:9d:1e:a0:f8:0b:
72:16:02:88:bc:03:cb:2a:d6:01:29:67:68:8f:65:
86:1d:94:76:b5:34:10:d0:c8:56:a2:66:58:9e:9b:
af:b9:d2:88:89:c0:a4:d8:21:c1:cb:93:93:3c:21:
2e:5d:b9:e5:79:dd:aa:33:91:89:1a:ab:a9:8a:46:
13:14:01:43:c6:09:bb:09:78:cd:70:03:85:8c:ab:
53:a5:2d:be:05:d5:9b:e5:b4:fe:76:6b:87:6b:e5:
f0:fe:cd:7b:58:c5:99:aa:4d:c2:ff:d8:aa:38:17:
1c:51:4c:08:48:06:5c:94:ec:aa:8a:68:08:ac:35:
f0:35:27:95:a2:0c:a6:61:77:ae:75:0d:58:7c:c8:
15:1a:2a:08:d3:6f:75:9c:4a:4b:12:5c:17:fd:9e:
5c:c3:aa:64:44:9b:c4:6e:57:f9:9c:db:a7:3f:cd:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:2E:CF:D8:40:58:55:3F:84:29:E7:69:DB:13:7E:30:3C:39:43
X509v3 Authority Key Identifier:
keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c1:b2:86:a1:33:8d:42:94:99:63:cf:a7:28:6d:b9:21:3a:
41:08:65:10:30:26:28:c8:00:e3:ed:bf:44:eb:d0:e3:4f:05:
2d:41:75:87:03:25:3b:da:1b:f2:e2:4e:2b:15:54:32:a1:77:
ef:c8:e7:68:e9:3e:ce:51:3d:d7:1a:f5:6b:61:ed:25:27:82:
e8:da:59:f6:52:47:8a:72:fd:01:2c:19:f0:b6:20:ba:6b:c2:
e6:97:db:de:2f:53:61:26:07:80:ce:cb:39:b8:12:b9:33:bc:
a1:51:3e:84:55:61:36:60:d7:71:4f:3a:e6:ba:2d:8a:41:24:
c3:e3:c4:d7:bb:8f:31:e9:2c:80:ef:ab:83:bc:e6:49:a6:28:
bf:79:b0:5d:71:d7:93:d3:00:8d:0a:cd:56:ae:d4:66:bc:b5:
82:03:34:8b:55:ab:01:66:2e:3f:17:ed:91:1a:38:ec:d0:ba:
44:ba:7c:7c:86:2d:73:85:e4:70:86:da:20:38:06:91:0f:52:
7d:30:8c:a7:f1:ab:91:14:f6:f1:76:04:b0:40:9d:f5:90:99:
95:23:86:39:af:76:bf:58:b3:76:df:c9:68:7e:67:aa:19:71:
75:ae:43:44:29:51:a5:d1:98:76:8d:86:58:bb:35:de:5b:cc:
70:58:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:49:05 2026 by rpki-client