
Error: rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
File: 0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft (raw, json)
Hash identifier: HOEQY8VVvd4QdUQX5mlCWLdwtZ9azEver4eU71+razs=
Subject key identifier: AF:D1:CE:37:90:C7:82:42:DE:2D:5D:6E:F1:2F:58:F1:98:EC:BB:9E
Authority key identifier: 0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7
Certificate issuer: /CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
Certificate serial: 42B2D372300B07C072B0CCE7007FAC7E3D40C191
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
Manifest number: 3F
Signing time: Sun 11 Oct 2026 14:00:10 +0000
Manifest this update: Sun 11 Oct 2026 13:55:10 +0000
Manifest next update: Mon 12 Oct 2026 17:26:10 +0000
Files and hashes: 1: 323830343a373739633a3a2f33322d313238203d3e20323731313839.roa (hash: ttIN3goA8GnAWL0gcSQB+o8dz/J9nNZCt+cCcaBjCRI=)
2: 0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl (hash: NYHQtr715Mlu1qj34CEqnVfTwliTaN/CXsJQBd32uA4=)
3: 3139302e3130372e38382e302f32322d3332203d3e20323731313839.roa (hash: 73wfLZ6nJyyCyrYzyb6ovvK8T9wL6TJ+ADfWACLQsQY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl
rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 17:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b2:d3:72:30:0b:07:c0:72:b0:cc:e7:00:7f:ac:7e:3d:40:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A964427D4213D4E03FCAA84837EAABAF7B964D7
Validity
Not Before: Oct 11 13:55:10 2026 GMT
Not After : Oct 12 17:26:10 2026 GMT
Subject: CN=AFD1CE3790C78242DE2D5D6EF12F58F198ECBB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:8a:88:de:99:bf:43:fe:91:a5:b8:3d:b0:
e1:d0:3b:2f:71:ba:5f:3f:4d:4f:1c:0a:d1:d7:15:
e7:c5:57:2e:e2:96:24:2f:7c:ad:87:2e:8f:62:d3:
f7:9d:f1:8e:5b:80:44:55:26:07:ea:ed:7e:84:14:
2b:05:2d:7b:bd:be:36:05:e6:36:61:96:4a:7d:dd:
63:43:f0:a8:94:4f:48:96:89:b1:10:c4:a0:22:ad:
80:4c:a9:20:44:0b:58:f7:98:40:7f:d5:db:95:a3:
7b:c9:61:40:9d:df:a0:d7:63:a6:31:86:8e:cb:6f:
f5:95:3d:4c:cd:d3:31:64:68:92:83:a5:2b:c3:64:
c8:f4:cc:ef:40:e0:09:11:6c:d8:8f:e5:c5:78:c0:
5a:e0:4b:8d:61:08:bf:e5:97:84:73:99:b5:3f:83:
1a:0a:e3:25:60:9b:24:66:04:e3:59:f9:a6:92:cd:
3b:5c:96:a7:9f:0b:15:07:00:33:e4:0d:0c:44:b0:
c9:54:98:0e:68:59:94:34:80:17:c8:1a:ce:9a:e7:
50:71:54:a2:f3:8d:e1:7c:84:5b:45:98:03:7d:46:
b2:71:32:e4:fd:1f:d2:8b:f3:b2:bd:59:34:47:13:
4e:99:ba:a3:99:18:a4:49:1c:48:82:d6:20:2f:83:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:CE:37:90:C7:82:42:DE:2D:5D:6E:F1:2F:58:F1:98:EC:BB:9E
X509v3 Authority Key Identifier:
keyid:0A:96:44:27:D4:21:3D:4E:03:FC:AA:84:83:7E:AA:BA:F7:B9:64:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A964427D4213D4E03FCAA84837EAABAF7B964D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/0A964427D4213D4E03FCAA84837EAABAF7B964D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:d0:77:60:b8:c7:98:c8:ef:5e:90:a1:58:31:d6:a9:5c:
41:ce:d8:a6:ff:a7:7c:93:fc:ad:0f:c0:b0:61:6f:b2:4b:09:
e3:b9:88:47:48:93:d2:06:0a:32:44:df:fa:3a:1f:01:df:f1:
9d:8f:84:8f:c6:3d:78:1b:02:ce:9c:84:4c:28:58:0d:08:78:
ba:8d:27:57:99:e4:f9:7d:3e:3a:26:79:22:ca:85:f0:7d:ab:
76:34:9f:d5:05:98:c8:e8:db:2d:dc:56:c1:91:28:a3:97:a4:
e2:39:d4:b4:08:e1:c7:46:6e:b2:22:4c:59:6e:e6:48:62:24:
75:ef:83:47:b3:34:bd:d4:3d:7e:90:78:5c:8e:22:89:69:4f:
bd:06:cf:e0:be:a6:62:26:f0:0f:85:9b:5d:9f:98:ae:f0:f5:
cb:7f:f4:a1:3b:0a:1a:a2:26:f9:45:b2:f3:1d:04:bf:9d:cc:
90:60:f0:8a:14:1c:3e:8b:85:80:a8:88:f3:9d:c3:f3:b5:6b:
a8:4e:e6:eb:ab:a9:9e:b9:7d:33:f3:ce:69:0e:9a:d1:71:18:
6d:8a:02:03:20:20:fb:68:df:e4:1f:bc:bd:18:31:1e:b1:e8:
16:03:ae:cb:87:ec:59:14:67:ef:c9:4c:a2:4e:86:b7:c7:6c:
84:62:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:57 2026 by rpki-client