
Error: rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier: aNNt/RmVI/ZLoFu1L4bRiJdxsogI2Sxck7CaE4hivl8=
Subject key identifier: 8C:9C:37:2A:FA:A5:C1:F3:05:6E:29:1E:56:02:01:07:8D:DA:33:F3
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer: /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial: 2B9EA0D7E79F8376D629EC70DC868E4F9FB4048D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number: 0564
Signing time: Sat 10 Oct 2026 02:50:00 +0000
Manifest this update: Sat 10 Oct 2026 02:45:00 +0000
Manifest next update: Sun 11 Oct 2026 02:50:00 +0000
Files and hashes: 1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: K/svO+3uX4PaR3yrKa7+2sCyE86DPSUjQ+9UG9jQzcw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 02:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9e:a0:d7:e7:9f:83:76:d6:29:ec:70:dc:86:8e:4f:9f:b4:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Validity
Not Before: Oct 10 02:45:00 2026 GMT
Not After : Oct 17 02:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:f8:27:ba:73:0b:76:28:3c:8e:9e:99:5f:
1d:66:5d:62:27:78:e5:59:8a:0f:b0:d8:39:2d:6b:
79:c0:c9:d8:5c:22:d7:19:ab:c4:42:6d:f6:ce:e4:
9e:df:38:d5:3c:f7:5e:4e:8a:e8:c5:eb:b8:37:dc:
86:a6:8e:2b:fe:97:66:f4:0b:bf:eb:d7:72:e1:0f:
93:4c:16:e3:9e:5f:14:e6:1c:2e:b8:60:6d:51:f3:
76:35:a7:ae:43:d1:b7:c2:ea:0a:61:23:a6:39:55:
17:cb:84:fd:0f:4b:6f:54:ef:65:0c:3f:fb:42:20:
29:cc:b0:36:94:7d:33:b8:97:d1:0d:4a:3a:09:31:
00:e5:eb:7d:2d:92:48:aa:37:40:07:61:e4:7c:05:
1e:4e:59:ae:28:7d:f6:fd:06:61:eb:90:ec:9a:a3:
5c:ad:67:a2:c9:9e:03:0b:7b:c4:ed:f7:81:54:b1:
d0:82:30:d5:3c:9b:de:2b:94:d3:7e:d5:fd:6d:b5:
ed:b2:3e:0e:ea:97:95:71:a0:21:52:7e:5b:8f:45:
81:1f:c1:fc:41:5e:33:a2:d3:3a:2b:84:64:06:a6:
85:ff:24:93:f1:ba:39:6e:35:bd:b1:23:f0:d7:9c:
ec:07:4b:41:3b:96:af:04:39:c2:fa:e7:60:5a:b4:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:37:2A:FA:A5:C1:F3:05:6E:29:1E:56:02:01:07:8D:DA:33:F3
X509v3 Authority Key Identifier:
keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:ec:f5:93:e5:0e:a5:5a:8f:6d:01:1a:bd:2c:42:b7:81:
23:78:0c:22:98:f7:a0:8e:2c:c5:1a:cd:c3:80:b5:19:fb:b1:
73:ba:15:3c:c4:0a:b1:89:0e:cf:94:6a:9e:e1:87:70:31:28:
5e:11:1e:09:60:e2:0d:ca:8d:83:eb:41:fc:41:ca:9b:0f:1a:
87:96:e2:d9:9d:5d:b6:40:90:fc:62:74:f2:3d:f1:57:82:a4:
ef:6b:84:b8:8a:1a:22:d2:09:0f:9e:86:69:c5:4b:b2:4a:f1:
da:db:93:6e:2c:85:13:4f:26:85:d3:b3:dc:a3:18:49:0f:81:
a7:8c:c8:96:24:e1:0b:0b:29:69:ac:48:c6:4e:83:1d:32:a4:
9f:9b:e2:d6:9c:91:3f:54:01:96:ab:11:ba:fd:7b:ac:19:b1:
8c:07:04:54:01:b3:bd:a4:a1:a7:88:5b:ca:a6:a7:58:e6:5e:
2b:89:7d:8b:52:11:16:a2:f0:c0:f9:2e:ce:3a:6f:1f:97:cf:
c6:f3:50:6e:48:54:6c:8c:d2:54:8c:d2:cf:32:86:2e:28:c5:
05:13:41:b7:63:44:15:7d:30:59:27:27:71:ef:ec:50:e7:05:
4b:91:23:99:9e:f3:e0:fa:82:b9:86:3e:be:24:5c:f2:38:61:
04:1b:83:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:55:12 2026 by rpki-client