
Error: rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
File: 3E3635534C5268C5F8F31D910454018D21BBA954.mft (raw, json)
Hash identifier: qsJYJOmVm3U+kGOBuSJrZvD919sHSbFbeuQblyi/ieY=
Subject key identifier: 21:03:C4:D4:D1:2F:77:E9:A5:4A:E1:6C:44:85:D1:BD:91:89:E8:21
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Certificate issuer: /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial: 516CE9D9273ED84066F7CC9C2145F13DB275364B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
Manifest number: 0570
Signing time: Fri 16 Oct 2026 04:20:00 +0000
Manifest this update: Fri 16 Oct 2026 04:15:00 +0000
Manifest next update: Sat 17 Oct 2026 04:20:00 +0000
Files and hashes: 1: 323830343a323730303a3a2f33322d3335203d3e20323633383639.roa (hash: jZxhJTQqmwny21y8m5P5/HKateUCwxPl8xRM7krjfJ0=)
2: 3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (hash: RoQfLojjxs4Go9NvVNqCM4tyg/i/cKgZvazNzDuKazE=)
3: 3E3635534C5268C5F8F31D910454018D21BBA954.crl (hash: jud/dq4OMCmGNI4kkOxmsWK5m3ED7fr8Ar2r06+TWxA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 04:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6c:e9:d9:27:3e:d8:40:66:f7:cc:9c:21:45:f1:3d:b2:75:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
Validity
Not Before: Oct 16 04:15:00 2026 GMT
Not After : Oct 17 04:20:00 2026 GMT
Subject: CN=3082010A0282010100C49770A00A8EDE02C8B70078822254EDD20F090678DE4D0974FA248CF460BEAF395D998D08C6AB4932E98D754D6E8BC0187D196D2DF8C7A53A2BAAA00E0904EC370C8336C5588BD9094479E243C65DF4B8852BC7A9FC83DCE2D308D039457CF705D93218A0D10030729F3AC553A98F4FA56AAA6E1703E062BC46F8150BAAAC1CD4C909007E05B4F36EC75872636FA68C471750C2D5C0367D0DDCD4B70D04EA41C4C9B2BC2869D4DD3797360FB0A18997C84433BD6B794DD28FBE6CCEC8F7E30ACEEE5D013648047263B1E75F02EF839FD61CD0C7AF2A5707E8BB77F9EA62AFBD40CB9DEA47382045CEB9A832AB8A2884FF5EA44D82EFDE4B0B160E5F7E2EE0450203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:70:a0:0a:8e:de:02:c8:b7:00:78:82:22:
54:ed:d2:0f:09:06:78:de:4d:09:74:fa:24:8c:f4:
60:be:af:39:5d:99:8d:08:c6:ab:49:32:e9:8d:75:
4d:6e:8b:c0:18:7d:19:6d:2d:f8:c7:a5:3a:2b:aa:
a0:0e:09:04:ec:37:0c:83:36:c5:58:8b:d9:09:44:
79:e2:43:c6:5d:f4:b8:85:2b:c7:a9:fc:83:dc:e2:
d3:08:d0:39:45:7c:f7:05:d9:32:18:a0:d1:00:30:
72:9f:3a:c5:53:a9:8f:4f:a5:6a:aa:6e:17:03:e0:
62:bc:46:f8:15:0b:aa:ac:1c:d4:c9:09:00:7e:05:
b4:f3:6e:c7:58:72:63:6f:a6:8c:47:17:50:c2:d5:
c0:36:7d:0d:dc:d4:b7:0d:04:ea:41:c4:c9:b2:bc:
28:69:d4:dd:37:97:36:0f:b0:a1:89:97:c8:44:33:
bd:6b:79:4d:d2:8f:be:6c:ce:c8:f7:e3:0a:ce:ee:
5d:01:36:48:04:72:63:b1:e7:5f:02:ef:83:9f:d6:
1c:d0:c7:af:2a:57:07:e8:bb:77:f9:ea:62:af:bd:
40:cb:9d:ea:47:38:20:45:ce:b9:a8:32:ab:8a:28:
84:ff:5e:a4:4d:82:ef:de:4b:0b:16:0e:5f:7e:2e:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:C4:D4:D1:2F:77:E9:A5:4A:E1:6C:44:85:D1:BD:91:89:E8:21
X509v3 Authority Key Identifier:
keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c7:1b:f0:f4:0a:9c:d1:8e:bd:0d:91:2f:fb:7a:32:c3:c9:
80:31:1c:41:cd:c0:94:a1:ed:6c:71:6e:60:27:85:d0:03:b5:
23:57:f1:ba:21:61:34:88:e7:db:74:7b:c1:0b:d2:bd:1e:a4:
2f:df:73:25:79:39:7b:53:c4:ec:ac:01:ca:a4:11:ae:40:07:
f2:bf:12:76:ba:8f:f3:92:3c:58:23:c7:51:f5:43:60:15:07:
db:39:57:9e:81:4a:5f:ae:2d:2f:af:30:89:f9:5e:0b:86:e7:
fd:9d:f5:4b:47:31:34:ba:4f:bf:76:7d:0d:45:49:af:13:69:
b4:05:0f:b4:a3:00:b3:68:c8:1d:55:f0:a5:79:2f:39:ae:72:
29:d3:2c:9c:cf:56:d0:4f:d6:26:ea:09:95:0e:b7:d9:bc:10:
ec:ba:a8:9c:09:38:f8:eb:e5:23:46:16:a8:e6:86:14:6e:12:
3c:2d:52:8a:d2:e2:2a:02:16:a3:92:63:d4:29:ff:86:bc:54:
64:97:4b:2e:1f:8d:76:4d:dc:03:2b:76:a4:7b:9b:4c:5c:76:
53:9e:09:1f:b7:8f:aa:cd:b6:b9:8c:79:c0:19:f7:d7:15:00:
fa:e5:0c:2c:fa:2a:29:b4:02:a7:c8:db:97:e0:d8:f7:a9:32:
20:08:c7:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 16 10:03:07 2026 by rpki-client