
Error: rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
File: A2481D14FAE137FC69C2002900E8E133F914C990.mft (raw, json)
Hash identifier: HdNqN2CHMoscPPC6ONh5ipYt3rF+wpTnp3y2L4rHZlw=
Subject key identifier: B5:A7:54:FC:79:47:B5:5F:C8:32:CE:52:70:AF:64:96:00:FA:DC:E5
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Certificate issuer: /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial: 2002967695ABA4CC08A1FB8512FBEED8BBBD766D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
Manifest number: 045F
Signing time: Fri 30 Oct 2026 07:48:30 +0000
Manifest this update: Fri 30 Oct 2026 07:43:30 +0000
Manifest next update: Sat 31 Oct 2026 09:39:30 +0000
Files and hashes: 1: 34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (hash: qZcD+SdGxEDDQ7deoplsrKdOcEm+RGgBPv6nIEdE/2I=)
2: A2481D14FAE137FC69C2002900E8E133F914C990.crl (hash: FktHE4VQ6CTNP91eA8jKbWNTGNyfSmETU7kX3pHm6zA=)
3: 323830343a363063303a3a2f33322d3438203d3e20323639313838.roa (hash: C9EUllxEOjlgmqXXVZHGTCSfmrDozUqKCH3N+IIJA6Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 09:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:02:96:76:95:ab:a4:cc:08:a1:fb:85:12:fb:ee:d8:bb:bd:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
Validity
Not Before: Oct 30 07:43:30 2026 GMT
Not After : Oct 31 09:39:30 2026 GMT
Subject: CN=B5A754FC7947B55FC832CE5270AF649600FADCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:a9:a7:89:02:4c:30:4c:06:cf:a8:a5:18:
ee:9b:3f:3b:5f:64:9b:20:78:38:06:c3:dd:55:10:
a2:63:17:b4:16:c6:fb:79:9e:9c:5f:c0:d4:b3:6f:
24:61:35:b7:dc:82:f8:9d:b6:83:f3:88:c4:bd:64:
c7:83:10:9a:85:d9:db:b6:b6:d5:a7:ba:25:44:b3:
d3:4b:7b:53:e7:42:63:1e:df:8d:71:f0:3d:d9:df:
b5:ec:e0:b7:a4:1a:bf:37:a4:84:9a:2c:55:2b:18:
7a:46:cb:a9:f8:bf:7f:77:b6:26:ed:5c:8f:21:53:
e4:04:43:28:d5:d0:55:fc:c1:75:f8:a8:5b:18:bb:
71:06:14:f2:b8:26:27:75:b3:fa:18:7c:dc:61:48:
54:27:76:2e:d0:dc:55:22:dd:bf:87:e7:52:fe:de:
ce:2f:c2:1c:ff:b0:7d:0e:23:0b:83:56:23:7f:e4:
9d:31:88:2b:1e:fe:c3:c1:4e:f6:b9:e6:ac:cc:26:
ac:a8:9a:cc:a7:cf:09:8e:79:15:b5:fc:19:50:6d:
03:29:93:10:cf:bf:9b:02:10:1a:b2:9a:30:a2:91:
7e:f8:9f:a4:52:f0:c7:c2:7d:e8:87:b9:5d:16:9a:
50:72:4a:53:1a:a5:ab:c1:99:19:e3:e0:d7:e7:68:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:54:FC:79:47:B5:5F:C8:32:CE:52:70:AF:64:96:00:FA:DC:E5
X509v3 Authority Key Identifier:
keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:df:ca:40:ef:70:e3:4c:46:9c:fd:1d:8f:12:88:45:70:
88:61:00:9c:e3:48:c8:16:3c:48:9b:7a:98:23:67:85:52:2a:
be:d7:82:c6:40:18:8a:e0:ff:c1:82:b9:b5:c5:5f:40:59:32:
49:62:82:b9:49:5a:bf:97:a2:6a:36:57:11:41:bd:86:de:7c:
8f:cd:a1:a8:bf:0e:d1:62:23:b5:ab:48:5b:fb:ac:bf:00:50:
a4:98:66:e3:a5:4b:42:48:ff:96:8c:c6:4f:58:10:aa:80:b9:
f3:be:9b:f5:19:60:a8:06:2d:c4:3d:87:b6:87:16:8d:92:51:
7e:6b:41:9b:0b:1d:d1:db:04:ef:16:d2:c5:0a:d5:a5:46:a2:
e1:2d:22:4d:fc:9f:36:ef:98:63:c5:33:0b:bb:a2:4b:8d:7c:
d7:ae:28:5c:67:a6:d0:37:2c:f0:d8:74:54:7e:19:bc:4f:d3:
93:85:24:8e:e4:a5:ef:20:f1:9e:43:d4:63:5a:a6:cb:73:54:
86:5b:e3:1f:dd:40:f4:bc:57:a8:86:50:06:44:d4:01:3b:3d:
e8:b8:e0:23:b2:02:d0:4e:c8:d5:f5:ab:21:ff:22:0e:89:cf:
6a:d3:0a:a5:7a:0e:45:a1:4f:aa:07:97:f9:50:c2:f5:da:4a:
45:ba:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:15:37 2026 by rpki-client