
Error: rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
File: B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft (raw, json)
Hash identifier: c6MYYlfY4FR8taRtBBOSBzAubJDbgfWCKbzIty3Zcac=
Subject key identifier: 4E:8C:0A:E2:95:EC:93:FC:E0:75:08:16:BF:75:F8:A4:7D:3F:C8:FC
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Certificate issuer: /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial: 426CC92F73EC4B803D3CF7BBF2FE1E6A317D719B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
Manifest number: 04C9
Signing time: Mon 19 Oct 2026 15:00:00 +0000
Manifest this update: Mon 19 Oct 2026 14:55:00 +0000
Manifest next update: Tue 20 Oct 2026 17:22:00 +0000
Files and hashes: 1: 323830343a376530343a3a2f33322d3334203d3e20323731353937.roa (hash: ERY7fX2dsrKpFlE8bq7J/GcWuqcAKTCxzmCk9TGWSMo=)
2: B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl (hash: CTP32DWqS5wSN8sGGWQXq1rb7SLRJMQ8p4VOUJQyBBI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 17:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6c:c9:2f:73:ec:4b:80:3d:3c:f7:bb:f2:fe:1e:6a:31:7d:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Validity
Not Before: Oct 19 14:55:00 2026 GMT
Not After : Oct 20 17:22:00 2026 GMT
Subject: CN=4E8C0AE295EC93FCE0750816BF75F8A47D3FC8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:c7:44:d8:35:9a:6f:bb:66:e1:91:e3:3e:
5e:40:54:d6:03:c7:2e:c0:7f:90:a2:70:65:c6:29:
89:25:92:97:38:4a:25:48:c8:bb:66:a5:e9:33:e0:
99:5a:15:e2:33:63:ab:42:4b:b9:44:99:62:01:cc:
6c:7a:7f:a5:cc:c8:39:f7:8b:15:d3:74:0f:71:30:
a1:3a:79:82:c2:e4:b6:b6:80:1a:0d:f8:77:46:09:
67:af:f0:e3:d8:18:d4:7d:93:fc:8e:e0:45:f6:92:
50:a4:53:22:df:0b:01:3c:5a:0d:92:46:50:19:bb:
b1:b7:e9:f4:c9:47:33:9d:19:b8:e0:3d:89:05:94:
e6:15:10:3d:87:09:32:41:f4:e7:b9:fb:0c:dd:50:
25:37:1e:41:4b:48:24:13:86:99:7c:0e:56:81:3d:
8b:14:0a:ce:c8:3e:81:2c:29:40:2a:93:9a:4f:95:
c3:35:8c:0f:8d:f8:8c:6e:64:df:e4:a7:40:bc:91:
21:3f:06:70:24:67:0d:99:88:24:52:bc:1b:f5:c0:
de:fb:c3:13:4c:b8:59:16:06:9f:19:72:04:43:c9:
49:8d:74:f2:12:f6:9a:be:7c:8c:8a:b8:73:86:d3:
52:b9:91:34:d4:8a:db:d0:5b:53:c9:02:71:cc:65:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:0A:E2:95:EC:93:FC:E0:75:08:16:BF:75:F8:A4:7D:3F:C8:FC
X509v3 Authority Key Identifier:
keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:db:10:e5:a5:a7:f7:8d:42:39:06:50:fc:cd:13:52:c8:1d:
88:24:87:16:b5:64:98:fa:30:4f:8b:a6:49:9d:c8:67:87:0c:
3d:06:14:98:d6:19:9d:55:90:e9:34:0a:76:a5:97:4a:7e:77:
3a:c6:16:93:38:5a:ac:1e:6a:4a:d3:27:5a:4f:ae:63:cd:79:
ca:cd:01:3b:ed:49:2c:70:3f:24:e3:75:29:35:94:3a:95:8e:
26:e6:d0:b1:df:52:10:f8:ed:73:8c:5f:1c:39:68:21:36:47:
44:d6:77:e7:76:5d:49:a6:50:fa:9c:33:b9:32:ed:8d:cf:f9:
47:2c:3a:ad:c1:44:f6:05:33:43:4f:96:cf:95:c8:92:85:12:
f6:de:30:38:48:6f:66:47:3f:56:c8:87:1c:42:3f:e6:f1:48:
1d:80:d7:76:2e:12:8d:a9:4a:1a:69:63:57:f0:61:dd:88:68:
90:72:52:15:ff:34:b1:d5:24:8c:c3:17:d5:bb:3b:32:96:47:
35:7e:3b:62:a5:b8:59:b9:a6:bb:60:3d:e6:fa:06:9b:50:07:
c5:43:3c:fe:c2:df:06:08:1c:ae:fb:39:ff:1a:7a:a5:79:ac:
a0:19:9e:73:dd:9f:6b:ef:ec:67:10:86:90:22:76:13:a0:4f:
b4:28:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:22:59 2026 by rpki-client