
Error: rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
File: E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft (raw, json)
Hash identifier: VHyTIyTRg2nhX2fEzVYG8Jsj/CfKtflZfj27srtbEwY=
Subject key identifier: 3B:09:B7:76:E5:A6:E1:C0:D5:BD:6A:9C:11:F1:FA:C0:2F:67:EF:CE
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Certificate issuer: /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial: 0AEA3DB7291B6E2A2944522589670010A4ACEEB6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
Manifest number: 04EB
Signing time: Mon 02 Nov 2026 03:20:00 +0000
Manifest this update: Mon 02 Nov 2026 03:15:00 +0000
Manifest next update: Tue 03 Nov 2026 05:10:00 +0000
Files and hashes: 1: 3137302e3233382e38382e302f32322d3234203d3e20323632373535.roa (hash: cegYiEZ25O9/w0DZDDTNeCXKhb+KTtiuDLeFpoPKv34=)
2: 3136382e302e3234382e302f32322d3234203d3e20323632373535.roa (hash: 0CZXt0UnajiGKsJyiX26vzLF6q1LpiU2bW+wAJE8iMY=)
3: 3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (hash: tzNQmKtKT7DcMJ5hNaLI9DJwW5AdtT2dIlsCg8gSLJQ=)
4: 3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (hash: gTFfMSTjK6XQ/Fgp9NPEcPcRjjvMDtvOIW4h04EDh4o=)
5: E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl (hash: LwP1FDstcbiwIXtm/8/5F10vBE5TcO7zYdNd/SdOpoQ=)
6: 3133382e302e33322e302f32322d3234203d3e20323632373535.roa (hash: /PSvItM2MpjD0s9HMVuC1Gv6V+AncXqX9tGL62Wwtjo=)
7: 3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (hash: tY2WEy1xLetzLSVwoWwMJhPt0vChUjtGJQ6mUzN/FSE=)
8: 323830343a3139633a3a2f33322d3438203d3e20323632373535.roa (hash: bV7kjVQfshS1Gs6Zk0yjJpODNwkBjEfaGiLXQxvVl8A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 05:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ea:3d:b7:29:1b:6e:2a:29:44:52:25:89:67:00:10:a4:ac:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Validity
Not Before: Nov 2 03:15:00 2026 GMT
Not After : Nov 3 05:10:00 2026 GMT
Subject: CN=3B09B776E5A6E1C0D5BD6A9C11F1FAC02F67EFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:23:7c:54:79:dd:8a:a1:ce:d5:6a:76:f7:
6f:ec:e4:96:80:4c:28:04:2c:e8:0c:eb:93:d1:20:
22:6f:f0:53:4d:0b:f5:c4:b2:29:74:ac:27:ba:b5:
82:e0:fa:65:5f:c1:71:5a:f4:7e:3d:b2:9b:e6:2d:
0a:2f:bf:68:3e:e3:99:07:bb:c1:c8:0c:75:57:7a:
eb:74:9d:b2:70:88:97:8a:5b:6c:8b:58:96:10:bf:
1c:b5:61:a8:f2:af:7a:bd:f3:b1:b8:4b:0e:e4:b9:
5c:51:2f:f9:f8:f0:49:fa:df:43:f9:50:84:aa:16:
cb:35:21:a7:4c:cf:32:56:e6:b0:6e:4f:4c:4f:50:
9b:c4:81:98:ed:2b:86:53:49:0a:6e:19:4b:79:cd:
39:52:9d:f0:ff:00:60:8e:10:71:23:18:15:b4:00:
17:01:53:1c:9d:dc:92:0a:17:1e:07:a2:7b:eb:07:
eb:d2:f6:a7:e0:c8:99:67:f3:5c:52:95:e6:1a:00:
31:36:f8:a4:8e:70:4d:fa:d4:5c:50:f2:1d:d8:97:
19:60:35:6a:0c:f9:09:d5:59:91:c5:4d:fe:c8:5f:
17:37:a0:79:34:f3:2d:83:54:f2:fb:b2:ad:e7:06:
eb:c8:ec:73:b4:25:34:9d:90:88:23:36:1b:ba:7c:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:B7:76:E5:A6:E1:C0:D5:BD:6A:9C:11:F1:FA:C0:2F:67:EF:CE
X509v3 Authority Key Identifier:
keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:51:e8:c5:09:9d:8e:c0:0f:85:28:3b:0e:8d:01:1a:bb:d0:
4f:d2:57:d5:7e:84:0f:20:52:4a:1f:c1:7f:b4:8b:38:79:d1:
0f:d1:d0:fe:05:34:db:fb:c6:fd:63:e1:a7:7e:ce:22:7c:c8:
32:88:1c:8f:fa:5a:72:d1:7e:8a:cf:48:3e:53:41:14:ae:1d:
53:ea:bb:05:d6:76:ee:41:cd:f8:74:cc:a0:18:38:53:db:6d:
5d:15:7a:8e:04:98:4d:eb:9a:01:f7:59:e3:c0:54:ec:0e:ec:
55:a1:7e:bb:e4:21:d6:59:24:e2:44:c8:98:73:c8:57:2b:a9:
67:63:0f:b4:bf:bd:9b:75:6f:56:c1:3e:53:9e:29:f2:a0:99:
f9:c2:ec:02:89:86:94:9a:f3:6b:f9:29:63:1b:4d:5e:fb:b4:
10:54:b6:cb:2a:68:67:71:5c:a1:5c:54:1a:5c:a5:f2:67:95:
6b:6a:67:e5:18:a6:44:2c:27:74:24:d8:e8:c9:20:15:12:6f:
c6:bf:d5:6c:f0:52:df:0d:c1:45:da:c1:c4:6e:a8:9e:68:09:
dc:be:bd:10:e6:73:62:8e:8c:a2:b2:2d:5d:67:59:f7:69:15:
4b:cf:e7:75:fb:8c:1f:c2:4b:5d:20:07:e2:4b:9f:6f:00:81:
79:74:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:44:03 2026 by rpki-client