
Error: rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json)
Hash identifier: xw/qZxu2q148VmZkzzU6TFSJpvwZSmtSQcKIHmHCo4w=
Subject key identifier: E8:90:21:29:0A:DE:E5:97:14:30:F0:76:93:A0:B4:6A:4C:09:DA:B8
Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Certificate serial: 744406885903F25E7EA5D4C628E1185E8202E699
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
Manifest number: 04CD
Signing time: Sun 11 Oct 2026 00:58:29 +0000
Manifest this update: Sun 11 Oct 2026 00:53:29 +0000
Manifest next update: Mon 12 Oct 2026 01:53:29 +0000
Files and hashes: 1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: w0drTKKtPWQBhg9CehCooVFF0gjJySOdLk3eF5gzED8=)
2: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=)
3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=)
4: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 01:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:44:06:88:59:03:f2:5e:7e:a5:d4:c6:28:e1:18:5e:82:02:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Validity
Not Before: Oct 11 00:53:29 2026 GMT
Not After : Oct 12 01:53:29 2026 GMT
Subject: CN=E89021290ADEE5971430F07693A0B46A4C09DAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:4d:e4:b1:18:95:a0:73:c7:0f:f7:0b:e0:
e4:fc:06:0c:4a:23:ae:d3:69:d1:15:03:05:40:9f:
a7:a4:52:d3:87:4d:b7:97:ee:b3:9e:e7:8f:ac:3a:
5d:bc:a1:9a:4a:66:12:35:bf:7d:71:a8:7c:d1:82:
75:e9:8d:26:49:7d:7b:b9:f4:66:63:d2:ba:a7:44:
f4:cc:6a:10:22:01:0f:62:8e:ef:df:fd:84:ed:04:
f2:8c:dc:71:c9:fa:40:0c:76:a4:e8:5f:3d:29:f8:
2b:c7:56:1d:ca:81:d2:ca:f4:f2:4d:0d:64:32:d8:
73:70:01:07:8f:bf:2f:1b:26:67:e2:e3:37:53:a8:
87:22:93:49:55:c4:5f:c0:29:d1:d6:44:a6:bc:9a:
21:05:0c:1e:b5:b1:9a:e3:41:b2:82:04:00:10:a1:
46:3d:9a:b8:7c:60:f5:f7:11:bb:c4:3c:89:f7:c6:
74:e6:36:48:c4:c1:24:41:03:01:2a:07:4e:15:75:
e8:c6:b5:ed:dd:5b:50:2e:76:68:75:30:bc:43:67:
2f:43:a9:94:40:cb:67:ce:81:3c:9b:35:b7:8c:c5:
b0:30:a8:15:fd:dd:66:1f:83:fc:d9:2a:78:02:83:
d1:cc:78:cb:90:ba:b0:22:4e:36:b3:75:c0:09:cf:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:21:29:0A:DE:E5:97:14:30:F0:76:93:A0:B4:6A:4C:09:DA:B8
X509v3 Authority Key Identifier:
keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f1:26:40:89:2e:05:91:24:99:79:fa:a6:dc:5e:b1:95:4a:
12:fb:2f:34:52:a4:4d:2c:ba:89:86:d8:1b:d6:62:96:1e:a4:
54:b7:3c:fe:d4:57:99:14:b1:81:ff:58:6e:a0:8a:61:70:b3:
69:fc:02:30:cf:02:b7:5b:62:9f:fe:48:60:88:eb:45:48:c5:
92:78:af:ac:d5:d1:62:c0:91:f1:2c:04:29:de:9e:ef:43:18:
67:cf:3b:0d:c7:0b:ee:ff:12:92:41:4b:05:e2:e8:d3:0b:dc:
c9:58:50:89:a5:d7:9d:31:46:d1:bf:a0:e5:ca:1b:37:1d:bd:
94:60:0d:c0:35:2c:b7:51:dc:ed:88:b2:98:47:a4:9b:18:ea:
6f:20:b8:cd:55:5c:20:01:55:c3:b5:50:bc:b5:7e:39:fb:24:
e4:f5:bf:57:62:12:51:ea:f7:be:38:80:5d:cf:65:08:ea:c7:
9f:62:32:ab:66:78:ae:4d:61:3a:a2:58:ed:13:58:2c:5f:4d:
92:15:f6:62:93:bd:2a:86:45:d1:42:da:66:16:c5:4a:06:71:
f9:b1:4a:b9:fe:85:1c:f7:75:eb:cc:ad:10:87:83:a0:cf:89:
65:6c:c9:22:7c:e5:5b:15:ed:74:70:3e:0d:d2:1b:28:3f:a7:
ce:35:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:53:03 2026 by rpki-client