
Error: rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
File: 2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft (raw, json)
Hash identifier: n8Z+FugkYQ8cWTAwzZkjQaFf0W3M77VxXie2G0w+Aeg=
Subject key identifier: 71:CA:18:86:DF:26:7B:B0:E3:7B:44:4A:57:C1:0C:88:62:9C:3B:C8
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Certificate issuer: /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial: 112862902D85C8BB25E4774963C0A969E3FCDA6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
Manifest number: 04CB
Signing time: Mon 12 Oct 2026 09:27:37 +0000
Manifest this update: Mon 12 Oct 2026 09:22:37 +0000
Manifest next update: Tue 13 Oct 2026 13:10:37 +0000
Files and hashes: 1: 2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl (hash: HGQ7xjrBrlp0f6/cGGQ7xTAkrn7uAFwBTzSEElphqME=)
2: 3137372e38342e3133322e302f32322d3332203d3e203532393938.roa (hash: znF6N7PFh1mvbrBMmCOtML4RkXP/iF7dwKow+jMPHdg=)
3: 323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (hash: KnrrtfTjIFbnDXJMbjVHjGoQz09T6Hk5pzco31G8Wx0=)
4: 3137372e35332e3230302e302f32332d3332203d3e203532393938.roa (hash: /WaesXsz0Xno7VyqwEauwiLSqzzexkH4LMpPjy2BIiE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 13:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:28:62:90:2d:85:c8:bb:25:e4:77:49:63:c0:a9:69:e3:fc:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Validity
Not Before: Oct 12 09:22:37 2026 GMT
Not After : Oct 13 13:10:37 2026 GMT
Subject: CN=71CA1886DF267BB0E37B444A57C10C88629C3BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:b3:65:0f:04:e9:9b:41:3b:97:6f:e1:71:
1c:82:55:eb:8a:b0:22:be:a3:2a:16:db:f4:c4:ed:
d2:5e:66:6f:af:64:5c:4a:d0:95:7a:84:5b:9b:0a:
41:7f:08:42:1e:b3:3b:8b:fc:59:82:3d:6e:73:ad:
07:f9:59:9f:2a:9b:24:f2:8b:ef:fb:c0:4e:e5:c4:
98:36:5f:29:cd:07:12:5f:b1:45:42:b7:90:f8:35:
06:90:49:cb:7a:37:f9:39:18:cb:32:f3:79:23:3b:
61:1c:ce:c4:39:ee:87:a4:77:48:de:04:36:bc:60:
74:6f:97:a2:21:4d:0b:fc:22:6f:7e:43:9b:48:6e:
c3:7f:e8:6c:b0:2a:65:0a:6c:8c:33:83:02:3c:32:
25:e2:d6:d2:59:3f:77:28:fc:a0:26:4b:16:ea:46:
9d:41:af:ed:ec:6c:56:e2:ee:27:56:58:b6:8a:b4:
74:5a:c8:2b:6f:86:90:df:d4:9e:84:f6:cb:6d:94:
af:6a:73:ec:69:6d:33:27:d1:79:7c:ea:d4:fc:0c:
62:89:7a:8a:2d:ec:8f:cb:94:4a:90:a1:58:96:27:
9b:41:44:28:3b:9b:41:55:b2:0c:6a:b6:53:29:21:
23:e7:78:9f:94:9e:5e:a8:0b:01:ba:1c:d6:80:0e:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:18:86:DF:26:7B:B0:E3:7B:44:4A:57:C1:0C:88:62:9C:3B:C8
X509v3 Authority Key Identifier:
keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:88:0d:a2:1e:21:fe:14:d2:86:34:83:2a:63:19:0e:31:71:
7a:03:08:74:99:2f:7e:52:d8:89:7f:30:ef:fc:ad:43:0a:1e:
ae:95:2a:bc:a0:53:27:4e:85:2b:27:bd:a0:79:50:7a:5b:7b:
fa:64:af:d9:7a:66:b7:4c:95:59:ce:b2:18:60:74:83:0c:db:
59:72:11:eb:26:6f:7a:b9:28:a3:d2:5e:72:13:06:e7:83:41:
fe:9b:51:9a:e8:9d:22:8e:f0:d7:7a:af:20:92:e9:a8:f3:1e:
1e:f2:b3:2b:b0:7e:21:34:66:ac:0c:29:c0:e8:01:42:8e:4f:
b9:f0:40:c8:5b:cd:e2:2a:c3:48:0e:dd:e3:e6:30:cb:63:2d:
98:f4:f4:97:34:fa:f4:5d:10:19:4d:1b:ff:55:00:f1:7c:d9:
2e:ad:ae:9b:d8:85:05:dc:8f:59:e7:0d:0e:29:fe:82:78:e0:
47:9d:f8:08:ac:e2:f4:36:cb:da:03:93:c0:f7:7d:f1:f2:ed:
b9:7f:24:9f:31:ef:70:92:71:69:8f:fd:e4:21:a3:09:3a:12:
5d:7b:79:4e:27:29:2b:87:a3:40:d3:32:14:2b:bf:7e:8a:0d:
bb:b3:e4:bd:61:96:6c:30:4d:b5:77:5c:a6:e4:16:94:15:9b:
67:37:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:44:51 2026 by rpki-client