
Error: rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
File: 122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft (raw, json)
Hash identifier: TMCt0Z0+6GYFYB1P7eiqe4eGKmGDmUR3YWGkI4FEh/Q=
Subject key identifier: D4:34:32:82:3D:37:C5:75:5B:1F:F8:3C:18:FF:A7:FA:13:5D:FE:76
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Certificate issuer: /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial: 4E8B0389F3AFB041B983F1A7D7A8290E96202EBF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
Manifest number: 04CB
Signing time: Thu 08 Oct 2026 16:27:13 +0000
Manifest this update: Thu 08 Oct 2026 16:22:13 +0000
Manifest next update: Fri 09 Oct 2026 18:22:13 +0000
Files and hashes: 1: 122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl (hash: GHn0Hu+ig+PphHmLlBOClJyM5rOw5YZjHeoQgoGtTmA=)
2: 3137372e38362e36382e302f32322d3234203d3e203532353630.roa (hash: nnA6vgcXRzukgr0WAZtC7PHbYvuXy9sXgdTF1CsAuWU=)
3: 323830343a313636303a3a2f33322d3438203d3e203532353630.roa (hash: jkAWq04zGK6sBLUw/goUlGagGjOqEAGOplyID5P6TyY=)
4: 3136382e302e3134342e302f32322d3234203d3e203532353630.roa (hash: EXfg1zyAS5QS4k1a3VQNgUMFlositdELkBoUTBi0Sdc=)
5: 3138362e3233352e39322e302f32322d3234203d3e203532353630.roa (hash: S6MQsqUrUKgBTCJZ60KQo0XAOSZRmhc0pEjTB4iipTA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 18:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8b:03:89:f3:af:b0:41:b9:83:f1:a7:d7:a8:29:0e:96:20:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Validity
Not Before: Oct 8 16:22:13 2026 GMT
Not After : Oct 9 18:22:13 2026 GMT
Subject: CN=D43432823D37C5755B1FF83C18FFA7FA135DFE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:d0:95:bb:2c:7c:62:1c:75:16:8c:2d:24:
0f:7e:e6:65:ab:ed:e1:5d:d1:b1:4b:ce:e2:6f:51:
45:32:a0:61:86:dc:aa:65:1f:3b:cc:82:33:ec:04:
80:a7:31:54:87:aa:a5:e0:15:09:c2:eb:92:2e:09:
b8:20:1f:2d:08:f5:51:a3:8a:0c:f0:60:4e:ec:8f:
de:f5:c5:c4:80:67:75:f1:52:7c:ce:30:e1:aa:05:
2b:8a:76:fc:78:ce:36:24:d1:29:b9:e3:7f:1b:27:
8a:92:25:0f:30:97:06:37:8c:8b:57:9e:ef:18:96:
c9:a6:9f:80:d4:bc:cd:2e:52:0d:0c:96:58:07:e4:
49:c5:c9:48:15:8e:a3:b5:75:be:67:9b:5b:dc:86:
d0:0c:dc:54:29:09:f5:5f:ef:26:80:6f:ef:f5:44:
29:b5:ee:55:09:c1:f7:ba:33:e7:f6:e9:50:44:c4:
7a:cf:ab:80:95:ca:1f:f8:26:cf:1f:92:eb:98:37:
87:0f:5a:93:c4:ff:3e:53:55:ea:15:0e:2a:d8:8a:
f7:3e:d0:19:76:6b:9a:4b:a5:70:70:fb:0f:dd:ae:
9a:ad:82:22:86:d7:43:4b:39:51:67:24:8b:e2:97:
5b:93:86:00:40:aa:aa:9c:54:95:c9:90:1e:75:2f:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:32:82:3D:37:C5:75:5B:1F:F8:3C:18:FF:A7:FA:13:5D:FE:76
X509v3 Authority Key Identifier:
keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:c6:de:31:a9:87:cf:d9:ac:14:55:b8:f3:3a:61:e8:53:
49:8d:83:c5:77:92:15:4d:fc:59:b3:3e:ad:47:00:cb:8a:e1:
33:57:67:89:5a:81:c1:da:be:7e:73:e5:87:50:44:ae:8e:99:
67:27:3b:56:48:7e:ca:90:43:de:31:ba:93:40:c3:2c:f9:c3:
4f:30:d0:54:d6:95:d8:2a:6f:8c:99:4f:b1:1e:a3:1a:3b:9a:
ce:ed:5e:d1:4d:16:83:4f:c7:12:6e:8e:0a:7f:78:79:e1:9a:
df:47:94:31:6d:42:a4:35:88:66:17:f6:78:3e:2a:d3:db:70:
5e:ab:78:dd:77:3c:ad:c4:39:1c:ee:b7:63:84:80:f9:0e:95:
3f:74:82:04:1c:bf:87:b6:fa:29:e2:c9:a9:d5:73:2d:ee:ce:
e7:74:4a:1e:63:3c:70:f4:d3:b3:f8:f1:44:d0:e3:b5:71:7d:
eb:33:91:d5:1c:67:9b:5c:75:00:b6:b5:6d:5d:0e:64:54:18:
20:13:43:8e:2b:10:67:46:5d:45:88:9c:b2:ac:81:ba:b3:09:
37:de:22:63:19:3d:0e:1e:61:30:42:f4:4c:77:08:5d:0b:6b:
24:48:ba:93:0f:a3:bc:c9:14:da:7c:1d:eb:1d:09:c7:ed:0d:
32:d2:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:48:27 2026 by rpki-client