
Error: rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
File: 4273B563259728F1EFD6BB3011E0F26828FB113D.mft (raw, json)
Hash identifier: ykD+7zPYl130bv0nsEGbpAccDXlq5nuMZLSgFmSvU0I=
Subject key identifier: 3B:9F:5A:68:3F:89:2F:F8:7D:F2:C9:5F:6D:AF:4F:41:3C:E4:5F:24
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Certificate issuer: /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial: 0DD10C86713136055CFB003247D38CC57012536D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
Manifest number: 056F
Signing time: Thu 15 Oct 2026 06:00:00 +0000
Manifest this update: Thu 15 Oct 2026 05:55:00 +0000
Manifest next update: Fri 16 Oct 2026 06:00:00 +0000
Files and hashes: 1: 323830343a343938633a3a2f33322d3335203d3e20323637313930.roa (hash: AgrA3Ni5baNVHFwTL1tXJ6G715CiJgHh3Tpnxrl2ACQ=)
2: 34352e3233312e39322e302f32322d3234203d3e20313938393439.roa (hash: +T6qH57SM5Z/wq/3+vDDBD9BRyGBZ8ggxgNHgA9JaeE=)
3: 34352e3233312e39322e302f32322d3234203d3e20323637313930.roa (hash: v91tPCzoUsfGE/DGWzuL53FfSaVv01NfGQMNf6NsRMM=)
4: 4273B563259728F1EFD6BB3011E0F26828FB113D.crl (hash: zw5Orh1Qtqn6+0hQXIrgsdkdkltlJP1y3pNsva7PUpg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d1:0c:86:71:31:36:05:5c:fb:00:32:47:d3:8c:c5:70:12:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Validity
Not Before: Oct 15 05:55:00 2026 GMT
Not After : Oct 16 06:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:16:ab:aa:96:92:47:6d:85:82:26:11:23:
d4:08:e2:d9:0d:60:7a:c6:de:e7:ac:ac:93:65:a7:
50:7f:ae:d0:21:14:c4:e6:27:03:f1:d2:1a:b7:cc:
52:89:b2:06:08:cf:7e:2b:cc:04:53:d7:21:1a:68:
24:5e:63:f9:49:e4:f3:52:8f:02:2a:8b:71:fb:1d:
0d:19:25:55:cc:08:02:2a:df:19:4e:2b:b1:3b:c3:
45:b8:36:53:82:4f:49:61:bb:ab:fb:79:8c:05:53:
af:92:14:cc:e3:45:0f:69:3e:07:a0:1e:b4:79:aa:
b9:28:d9:fa:7c:90:42:2b:74:44:52:34:b2:5e:37:
bf:99:f7:e6:bd:30:ee:35:11:b8:66:30:49:89:94:
9d:35:a3:b7:9a:2a:ea:80:98:05:09:dd:3a:0c:b9:
a1:8b:cd:b0:f1:d9:be:53:b2:8a:74:fa:4a:5c:31:
b5:cd:b1:8d:32:c4:60:8f:24:91:76:d8:4d:b5:4b:
28:00:3f:2c:fa:7b:ff:4f:9c:ab:8b:f2:ae:69:b3:
cb:ef:1e:1d:fb:34:7b:21:8d:8a:d3:ce:ac:d8:d3:
05:8e:a8:ec:96:06:a5:bd:aa:a2:a3:ea:df:d7:ec:
e5:60:90:ec:5c:77:b0:a8:6e:06:f3:0d:d8:12:56:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:5A:68:3F:89:2F:F8:7D:F2:C9:5F:6D:AF:4F:41:3C:E4:5F:24
X509v3 Authority Key Identifier:
keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:65:d9:1e:a3:d0:eb:e2:c6:54:d9:6d:a0:fc:4e:75:7d:
57:7e:51:77:d9:8e:e8:53:fd:4e:ae:3e:dd:5c:4e:79:f2:db:
76:b9:b8:b3:ec:19:ba:b4:17:89:5a:72:11:52:86:ae:44:32:
11:bb:81:be:28:d3:8e:4d:b6:1a:e3:f8:cd:9c:40:fc:52:2d:
87:df:f7:74:15:6a:3b:12:7a:5e:8b:06:73:e1:43:38:bb:03:
39:39:24:98:dd:15:d1:aa:56:95:fe:6f:31:38:af:17:de:72:
bb:b1:23:0d:d5:30:fb:96:5c:f5:cc:be:2a:88:66:fa:86:34:
06:e4:00:e1:aa:0a:83:d1:14:05:50:ff:dc:0e:2a:19:83:b9:
ba:9a:57:30:27:8f:27:7b:57:5e:ce:a9:ec:ec:79:c3:0b:15:
99:11:0b:a2:c4:23:6d:bf:21:f8:1d:23:e3:4c:20:f2:c0:bc:
84:b5:0d:21:08:83:e7:2c:53:23:4c:0d:35:2e:53:80:a6:e1:
c6:9a:b2:26:8b:01:2a:72:6a:c4:1e:ac:27:3b:05:95:05:fb:
51:4e:bf:52:23:35:95:a3:d2:5c:3d:8e:70:60:70:0e:f9:f6:
cd:d6:ef:e9:2f:e7:bb:58:56:95:fe:85:79:22:8b:2f:97:2a:
19:1b:0d:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:08:55 2026 by rpki-client