
Error: rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json)
Hash identifier: N6oa1CVsFw04fM96lN9fEtcPO73bHPdDt3byY1O9wZc=
Subject key identifier: C2:74:89:97:6D:2F:5E:03:51:3C:B2:1A:AE:39:07:55:C3:9A:07:D1
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial: 41B36F4875D92583910B6D86C53C813296AB1645
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
Manifest number: 04D1
Signing time: Wed 14 Oct 2026 00:41:22 +0000
Manifest this update: Wed 14 Oct 2026 00:36:22 +0000
Manifest next update: Thu 15 Oct 2026 00:41:22 +0000
Files and hashes: 1: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: iqjR4QocHvc+kc0AhCb7q1uRtCnbvMGdQiYZrUH75I4=)
2: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 1jiPLN7k23pfp303XMfvHpUfO1fnwC1H4dxKN6JZTRI=)
3: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: ashwnlAibbNwSgP5vRGNo5jGaiBT/0Chbnd873TTeT4=)
4: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: Rz4oEJOP6UvkBFjPK3ZuyT7m869P08DDJ4ho0q7tOSo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 00:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b3:6f:48:75:d9:25:83:91:0b:6d:86:c5:3c:81:32:96:ab:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Validity
Not Before: Oct 14 00:36:22 2026 GMT
Not After : Oct 15 00:41:22 2026 GMT
Subject: CN=C27489976D2F5E03513CB21AAE390755C39A07D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:93:0f:e0:3b:93:6e:44:bc:d3:6c:9c:de:
9d:f1:bd:3a:e7:0e:c3:de:5e:c8:90:84:cc:fa:3f:
4b:d8:2b:c3:50:2c:61:ec:e7:a7:8f:9c:7a:2b:8b:
6b:23:fc:c1:7c:54:77:c4:12:c3:59:10:00:9f:9b:
70:40:69:dd:53:9d:68:1f:d5:80:c3:57:b9:97:24:
9a:eb:8d:31:1f:68:e0:4a:dd:62:b7:35:23:f7:54:
de:44:f1:74:0a:6f:8c:ca:a9:53:4f:df:22:cb:37:
51:e8:ef:6d:cb:eb:dc:6d:c3:48:75:3f:fb:c6:1e:
97:8e:28:ab:f6:fd:49:9e:4d:70:2a:cc:42:04:12:
49:5f:bd:54:2c:69:5b:11:82:73:ac:fc:4a:95:77:
fb:96:07:04:d4:84:82:71:17:01:8e:a9:ad:b5:e4:
b2:a4:46:79:72:76:b2:58:a3:23:64:69:79:7c:23:
66:76:27:ba:86:75:49:43:18:47:3d:c8:5f:7c:81:
a9:bb:b9:d2:3c:8b:22:26:fd:2b:68:71:fb:34:68:
2d:7f:7b:d4:de:c1:bc:6c:f9:54:6a:a1:9d:5b:f9:
9d:0f:5b:03:00:de:28:94:9c:58:5d:bb:fa:47:a6:
c6:b6:96:4e:61:cd:49:26:5e:01:e5:48:53:a9:b9:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:89:97:6D:2F:5E:03:51:3C:B2:1A:AE:39:07:55:C3:9A:07:D1
X509v3 Authority Key Identifier:
keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:07:fa:30:3e:58:a5:ef:71:42:d1:d9:46:22:24:01:59:
30:97:ba:ef:e6:d1:df:38:36:86:e5:5c:0a:96:b7:3a:13:ca:
68:c4:c7:f8:a7:78:e2:99:64:54:d9:f0:b0:5e:69:2f:f3:e2:
bb:c7:7b:89:91:86:81:ca:52:35:4c:5f:22:b6:a7:f6:c1:7e:
b6:9e:04:8d:95:26:8f:e5:0e:91:24:7b:f5:ff:0b:20:36:8d:
f3:3c:7e:6e:dd:49:98:8d:a3:38:d7:2c:58:e3:ba:1b:10:96:
15:28:45:6a:af:07:71:84:c0:05:f6:21:84:c0:7e:cd:f3:aa:
a3:59:43:31:c7:cf:05:1c:57:80:78:29:c3:cb:47:e7:39:51:
b5:05:fb:bc:57:22:b6:16:68:0d:a6:0f:9e:15:d3:e6:1d:35:
95:95:4f:a3:c1:6e:9e:b6:e2:ee:f1:e2:d5:c2:59:d2:d8:f0:
32:7a:e5:dc:ab:32:0f:0c:4b:4b:04:35:7f:1c:44:be:39:58:
01:38:50:34:6f:eb:4b:1a:40:47:55:3b:33:5b:35:48:5c:64:
96:59:e9:6d:33:4a:ae:a5:08:11:9d:6b:3a:9b:01:a4:97:4b:
36:46:1d:68:94:20:b5:4f:3b:9e:ac:6a:76:c7:d7:9c:fe:e7:
dd:82:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:51:34 2026 by rpki-client