
Error: rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
File: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft (raw, json)
Hash identifier: 3W8CszAcreMew0UDtlanGHSkdM+EBVyV4JkTLOPXlOM=
Subject key identifier: C6:CC:C4:75:4E:2C:FD:93:E4:35:3C:6D:A0:6E:39:72:2F:8C:E1:4B
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Certificate issuer: /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial: 14960768A3BAACD5C0777B969291DF84B04E573F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
Manifest number: 0439
Signing time: Mon 12 Oct 2026 20:10:00 +0000
Manifest this update: Mon 12 Oct 2026 20:05:00 +0000
Manifest next update: Tue 13 Oct 2026 20:10:00 +0000
Files and hashes: 1: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl (hash: TMJmrMgK+2561EA7mSYELkP1nqBAxmduxmf5IX8uQ5s=)
2: 3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa (hash: iD8njkNi1+SywWFxKBhuzbzW8A2DGeqSj/w6gEbhJDU=)
3: 323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa (hash: d6xNzA++sK2wvDPvQ+fG5NLmKmVoNiSpjm7Jx012ON4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 20:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:96:07:68:a3:ba:ac:d5:c0:77:7b:96:92:91:df:84:b0:4e:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Validity
Not Before: Oct 12 20:05:00 2026 GMT
Not After : Oct 13 20:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:78:36:0a:7e:cb:a2:c6:10:60:ca:46:b9:
60:9d:a7:cb:ca:18:58:6c:63:4b:18:59:48:d7:1c:
db:89:d8:ca:aa:dd:73:ee:dd:93:47:1b:82:5c:43:
aa:43:09:3e:93:bb:3f:2a:f9:dc:fa:8b:60:81:60:
a7:70:2b:c4:d2:6f:6e:21:52:72:fc:10:a7:85:55:
61:c3:0a:3c:54:68:c4:0c:c8:75:4d:7d:d2:4a:5d:
de:1e:1d:45:78:66:f3:88:24:7e:c6:91:f7:a2:fc:
ea:64:01:6b:86:5b:a7:d8:92:b3:de:3d:79:75:9f:
29:28:c2:5a:90:33:8a:6b:9c:3e:40:f7:d3:0e:91:
22:25:bb:23:2c:80:3a:7d:e8:76:0d:61:de:96:c0:
27:36:35:1a:f7:0e:27:5e:57:dc:49:ff:b4:8d:c5:
6d:89:5a:7d:85:45:73:c8:6d:43:6c:bc:26:36:b1:
c3:bf:60:8e:b6:cd:8a:b0:e5:a4:16:19:16:cb:cb:
1b:fa:1a:d7:2d:11:32:52:5b:1b:a9:2f:1d:69:d2:
0c:58:b5:c7:32:21:e9:f5:81:d1:7f:80:ee:ed:f3:
68:06:5f:ef:6b:dd:b0:b0:54:88:dc:cc:84:c4:96:
86:fb:20:52:5f:b1:56:39:bd:1a:20:2e:3e:15:f5:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CC:C4:75:4E:2C:FD:93:E4:35:3C:6D:A0:6E:39:72:2F:8C:E1:4B
X509v3 Authority Key Identifier:
keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:a0:32:9b:e1:7a:35:66:67:73:c3:49:09:30:c6:4f:8a:
70:75:01:7e:a5:4e:f1:a3:09:53:4e:0b:d4:96:b9:ee:5e:54:
24:67:ea:d7:01:63:ec:17:20:8b:5b:51:6c:a0:23:7d:af:eb:
13:04:72:e7:ae:83:c6:38:b2:13:31:61:21:f3:a3:f9:06:53:
bc:c2:f9:1f:69:d2:46:99:cc:b7:0c:6f:1c:5f:96:e1:ed:77:
3b:7d:fc:82:80:7a:74:ed:2b:6d:81:dd:bf:00:b5:a6:2f:de:
6d:24:f2:1a:7c:5c:ab:ab:27:c0:8d:e9:4b:21:70:7f:f2:2b:
32:66:e3:37:4c:b8:ec:f9:a4:b4:39:d5:94:69:b5:6f:57:df:
a1:e7:67:86:85:c3:86:8d:6b:ac:43:dc:29:9a:bc:70:c5:1b:
3d:57:0c:48:91:ca:40:86:43:d9:7d:9f:a1:40:a0:72:fd:ab:
70:50:93:19:1e:d4:a0:d3:18:44:73:3e:e0:51:ee:a3:e9:40:
0c:65:19:6f:20:e2:67:f4:f4:91:08:67:11:6a:be:37:fd:19:
3e:0b:34:5a:fc:43:93:5e:fd:e6:05:4a:7c:7e:b1:d0:fe:dc:
96:1b:83:d6:69:01:e2:a4:fe:57:cc:3f:c4:81:48:bb:1b:3c:
34:af:4d:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:38:53 2026 by rpki-client