
Error: rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
File: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft (raw, json)
Hash identifier: qZf59TvicwgwfQ3dOea+9Less+6/3tPlUi4aTuOfE6o=
Subject key identifier: 17:BC:16:78:FA:13:E4:4F:68:3C:00:4E:E3:1C:8C:CA:7F:BA:C9:F7
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Certificate issuer: /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial: 04AB6FF2AD931AB5F0AF6735C2518E12E8861179
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
Manifest number: 04CD
Signing time: Tue 13 Oct 2026 07:10:00 +0000
Manifest this update: Tue 13 Oct 2026 07:05:00 +0000
Manifest next update: Wed 14 Oct 2026 11:02:00 +0000
Files and hashes: 1: 3137372e38372e38382e302f32322d3234203d3e203238333334.roa (hash: 0XQ2Cj7FWo9GP15BnD93tP8q6gA6othRkhwDyzwO/B8=)
2: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (hash: GeJwwH524xmuouS1CboFWIKYfCk+7V5Z/kQBN1NO3bw=)
3: 3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (hash: 8X6t0HCZeXx+/qkN1CK81Zr21HIR4vEh9RbdyEmiUuk=)
4: 323830343a316235633a3a2f33322d3438203d3e203238333334.roa (hash: 0Kb2/3m9XI6Ql0FDHX+ujKzkb9Gp2UVl3tYLSq7GdCc=)
5: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl (hash: GnksuxBuWqzFfcj62PcSLaUUn2L++FZhyvYmFJ/hC9o=)
6: 3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (hash: qL7TWvq1Uf6ddqk8uOjbAq6qa+Qe1LiTSUh+Bgai3+M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 11:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ab:6f:f2:ad:93:1a:b5:f0:af:67:35:c2:51:8e:12:e8:86:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Validity
Not Before: Oct 13 07:05:00 2026 GMT
Not After : Oct 14 11:02:00 2026 GMT
Subject: CN=17BC1678FA13E44F683C004EE31C8CCA7FBAC9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:b3:ee:2f:3e:94:75:76:32:fc:4e:a4:19:
f5:0f:df:a3:e5:94:be:a9:70:8c:fe:e1:e9:31:4f:
44:d0:11:73:3b:e2:75:17:94:5a:1a:ec:4e:5b:7c:
ea:54:b6:72:ef:ac:a2:e8:d3:ea:88:13:40:21:77:
b4:31:3f:1d:84:6c:b1:8e:c2:c3:af:42:86:77:94:
13:18:76:42:13:a5:ae:54:d8:2f:44:15:f6:7c:4c:
3c:e3:85:6a:93:06:2b:5f:96:5a:89:3c:00:74:16:
fc:6b:94:0a:25:e1:2b:7a:f2:df:b7:43:88:26:21:
fc:d1:4b:c4:1c:80:30:03:5b:81:98:3b:5a:1c:26:
5c:a7:97:ee:54:31:dc:1a:1c:a2:f7:f7:31:e4:33:
bf:88:ac:c3:89:06:ac:72:83:bc:44:c8:f3:76:56:
25:d7:08:e1:ba:d9:df:1c:2f:2e:92:3c:8c:33:04:
64:7b:d0:e4:2c:bc:a6:7b:77:2b:62:f1:94:c8:db:
d3:fc:ca:fe:2f:36:d6:17:b1:9d:5c:d1:98:11:a7:
1b:53:38:6c:61:9f:e7:19:6c:14:1f:6d:b6:cb:32:
3f:7a:49:09:eb:ec:7c:d5:33:79:60:e5:a1:66:b0:
d5:ce:6d:55:63:35:7e:58:af:f7:34:e0:83:da:29:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:16:78:FA:13:E4:4F:68:3C:00:4E:E3:1C:8C:CA:7F:BA:C9:F7
X509v3 Authority Key Identifier:
keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:1d:42:a0:dd:93:5e:0b:06:47:40:0c:db:7a:4f:c7:13:
dd:1f:00:53:7f:e4:5a:51:1b:54:fd:0c:30:58:a9:48:8a:30:
21:2b:a3:bc:86:40:5d:03:30:9e:ab:05:bb:de:6a:b3:82:86:
d5:f3:41:b6:d3:c7:f4:db:8c:2e:c3:f0:96:f5:c3:b3:44:e8:
bf:1d:22:2a:80:23:fc:bf:c8:78:8f:b6:2b:c5:8e:61:59:09:
82:4b:12:1f:56:24:33:71:95:3e:c9:9e:ed:ad:72:05:a5:a7:
71:a2:19:7e:b9:30:e0:2b:b2:f8:e9:0e:d3:f5:e9:4b:b0:a0:
6b:bd:1c:41:35:99:1b:bc:07:64:cd:9a:d3:bc:70:df:6c:15:
6d:fd:b8:d2:b8:20:11:f6:6b:f2:14:38:76:2e:83:80:d5:c4:
bd:39:9e:b5:c1:12:f2:ba:5c:1a:64:2a:8c:16:fe:88:fc:96:
95:8c:32:49:31:dc:66:0a:f5:87:a8:bf:c4:69:89:ac:28:bb:
0d:88:9d:29:7e:a5:fe:06:a6:5d:19:7e:98:a6:36:ba:d2:60:
44:7b:51:24:9d:86:9f:d5:01:cb:df:3f:3e:ce:e0:33:a3:50:
67:85:3f:28:96:42:8e:90:7b:25:59:dd:ba:09:16:9d:21:8e:
47:bf:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:49:04 2026 by rpki-client