
Error: rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
File: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft (raw, json)
Hash identifier: lEn+BL+m5zSMworRK9s8z5xkOMW88+Z/ZpgBpVH5ajg=
Subject key identifier: 7A:8B:63:41:B1:44:CC:52:44:82:DE:3D:60:E0:B6:53:BF:AB:0E:65
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Certificate issuer: /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial: 22A5F09D46BE1C0DB5B29AFF7E9F0562BA4337D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
Manifest number: 04CD
Signing time: Fri 16 Oct 2026 21:13:40 +0000
Manifest this update: Fri 16 Oct 2026 21:08:40 +0000
Manifest next update: Sat 17 Oct 2026 23:44:40 +0000
Files and hashes: 1: 3137372e36362e3132382e302f32312d3234203d3e20323632343936.roa (hash: DpH9Tx3KSKs2Pv3Xu8LN3BscDXf0FMihxQcYkBUpuoo=)
2: 323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (hash: weT5RoIG4960k4pRdcVkTZt1h1LjkI7+tLSqpMpWVlU=)
3: 4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl (hash: a/FB8gJBsVknxGA4dshJYYGTByW/gn1vu6IQhlqre/o=)
4: 3139312e3234302e3136382e302f32312d3234203d3e20323632343936.roa (hash: gyiZlsWdDqNy4Dr04Y65DxszCTgsB/U5fULw1M302cM=)
5: 323830343a3532303a313a3a2f34382d3438203d3e20323632343936.roa (hash: dGRevKxdfo1wJIJcrovmrfliigR3U9fSFFeTfL19mTQ=)
6: 3137372e36362e3133362e302f32312d3234203d3e20323632343936.roa (hash: S2kd9/Xw3EiB7jHakIqtJSmSLLfTM5vNxI75Jeurei4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 23:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a5:f0:9d:46:be:1c:0d:b5:b2:9a:ff:7e:9f:05:62:ba:43:37:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Validity
Not Before: Oct 16 21:08:40 2026 GMT
Not After : Oct 17 23:44:40 2026 GMT
Subject: CN=7A8B6341B144CC524482DE3D60E0B653BFAB0E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:4a:88:d1:f2:cc:0e:f3:9f:4a:cf:75:fe:
0e:81:10:63:ff:ad:aa:ad:29:88:42:23:cc:c2:e3:
77:a6:2c:55:9b:63:a2:c4:63:de:02:c8:94:31:af:
c9:55:69:56:cd:90:d6:15:87:23:57:c4:5c:27:f7:
9d:44:5c:c9:b1:cb:44:5d:6e:67:f5:f8:fa:dc:d1:
f9:a4:b2:07:72:53:f1:fc:6e:a2:50:5e:d5:10:92:
86:41:49:2c:43:f6:07:bb:9d:a6:1b:df:1f:c9:c9:
f7:10:29:26:a5:5d:f9:b1:9a:58:ec:45:83:64:a1:
cd:d5:df:19:a8:28:4b:b1:5a:0e:e0:14:74:5b:1c:
34:6f:b0:a1:70:ec:d1:35:77:6e:bc:fb:e9:06:3d:
99:56:74:da:db:28:45:0e:b6:9c:9b:36:81:17:8a:
15:a6:b8:bd:a1:1f:f6:d5:f0:09:b4:32:54:89:e3:
97:80:30:3b:76:99:cc:8b:4d:4c:48:73:0d:42:82:
07:48:81:d9:e3:d3:7b:82:60:51:61:62:55:98:d4:
8b:c5:ce:08:ac:1f:15:82:29:4a:db:a8:da:45:92:
11:07:49:dd:11:36:22:d6:1b:0e:18:1d:42:c9:96:
49:be:ee:20:3f:79:0f:37:22:5d:9e:b7:a4:c7:6a:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:63:41:B1:44:CC:52:44:82:DE:3D:60:E0:B6:53:BF:AB:0E:65
X509v3 Authority Key Identifier:
keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:63:c3:63:9d:45:54:bd:44:c8:d7:75:3e:d2:43:8a:fb:
bd:1e:d1:2d:9f:4c:60:7d:d3:af:5b:18:96:29:82:bf:64:63:
77:4c:66:77:35:ac:75:03:69:76:22:6d:a5:f6:69:fd:7e:54:
ed:17:ae:1d:a4:8a:84:85:bd:31:b8:29:9c:43:32:92:3e:5e:
54:01:09:2d:a2:45:dd:18:c3:93:71:24:ce:b4:b3:30:04:12:
6d:c3:dd:59:8f:fe:52:82:7d:b9:a4:26:7e:07:9f:4d:1c:d7:
e2:0a:30:9c:cd:57:2e:b4:40:f5:0d:a5:a2:fd:15:4a:7d:fe:
93:33:1e:79:4b:8e:05:be:74:17:39:81:a7:d0:b5:b1:45:9a:
83:8a:4f:3a:56:37:22:d9:29:44:cb:7b:e3:67:5f:99:10:26:
4a:db:88:81:76:ef:b0:0f:fa:94:b3:6f:f6:f1:8c:5c:8e:c4:
73:d5:64:53:90:18:45:a3:99:80:57:e4:3f:1a:6e:fe:8a:b9:
58:f5:20:63:bf:10:32:ff:e3:c4:00:80:eb:cb:83:b6:27:d4:
44:b3:3f:7c:2b:e4:66:84:9a:ee:a3:64:cb:98:32:b6:ce:5f:
9d:ee:00:56:20:fc:3d:88:e3:fc:b6:22:3b:96:1f:79:0c:8e:
c2:3d:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:39:39 2026 by rpki-client