
Error: rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
File: 413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft (raw, json)
Hash identifier: 6AJjvgaWPap0NoeB8XKwq5sbCUX0+/NUj3IMtaSVztk=
Subject key identifier: 29:E2:34:32:A5:EE:73:AA:90:9A:49:87:09:B0:46:C9:DF:DF:07:98
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Certificate issuer: /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial: 0AAD64E19D1B9BF6667B18C81D0865AB11BC4D52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
Manifest number: 0569
Signing time: Sun 11 Oct 2026 12:30:00 +0000
Manifest this update: Sun 11 Oct 2026 12:25:00 +0000
Manifest next update: Mon 12 Oct 2026 12:30:00 +0000
Files and hashes: 1: 34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (hash: N3eL2aeWVdktkofBaT6E9gkeG3ajWvnfGJnt+5rzKyQ=)
2: 413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl (hash: 5JpWnD/zgppsh90F+bXluolvbjp9gQaThjFrxS283uo=)
3: 323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (hash: vbBJksUixaCou3Yg5ly8jM+BIbRBRciatDxLe+wdIUk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 12:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ad:64:e1:9d:1b:9b:f6:66:7b:18:c8:1d:08:65:ab:11:bc:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Validity
Not Before: Oct 11 12:25:00 2026 GMT
Not After : Oct 12 12:30:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:66:22:f9:85:f6:c0:03:87:9e:cb:c2:b2:
6b:a2:71:8b:47:1d:2b:70:c5:b6:4b:e9:1b:79:ec:
8f:5f:1e:f5:f3:e3:d4:f0:58:63:a9:de:5f:98:24:
fe:87:5e:59:75:b8:0f:d7:2c:f2:41:79:ae:f5:74:
2b:ca:57:51:02:5f:fa:8d:85:1c:e8:57:47:24:5e:
4f:24:9c:90:59:bf:64:21:b4:f4:54:b9:57:a3:43:
81:5b:07:f1:47:9d:4a:99:12:d0:b9:ac:7b:b0:54:
92:fd:44:d9:21:5d:b3:80:14:1b:5b:c6:df:81:c0:
aa:87:14:17:cc:c4:3a:8d:1d:49:94:1b:02:9a:13:
0b:b0:45:e3:70:7b:c5:e8:44:7f:d7:6a:18:27:c7:
f1:41:df:bf:b0:e1:4a:72:16:c1:87:09:69:fb:37:
18:d7:e3:19:06:b0:f3:93:f6:9b:41:36:2a:1e:32:
81:fc:43:14:67:42:5d:dd:48:ed:79:9c:e3:a0:9a:
9a:a4:e9:fe:c6:cf:93:86:6d:d1:30:7c:0c:d4:e5:
56:27:bc:2f:da:cc:0b:46:ff:54:f4:7c:5a:43:7b:
7d:38:f4:2b:ea:83:f0:53:e3:ad:6a:76:5c:4f:4a:
e4:36:bc:d3:c3:e3:e3:c6:9a:3d:75:68:af:ab:2b:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:34:32:A5:EE:73:AA:90:9A:49:87:09:B0:46:C9:DF:DF:07:98
X509v3 Authority Key Identifier:
keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:6d:f5:8e:43:44:87:d9:44:f5:7f:40:e0:47:f8:34:e8:
46:f5:0e:a4:00:db:68:67:49:a0:02:42:9f:61:11:cb:d1:78:
b4:4b:18:52:0b:93:8c:4d:71:5c:99:47:15:a8:87:c0:60:64:
a1:96:bd:92:68:7b:e8:b9:8b:d7:e5:c6:bf:b3:76:53:60:85:
16:95:b8:e1:e9:58:75:8d:a0:bd:54:3a:fa:0b:62:5c:79:2a:
f8:3b:a9:4a:05:07:8c:75:36:58:63:a5:48:0c:3b:28:5b:df:
3d:84:ef:58:e2:fe:5e:81:d9:46:64:fd:e2:fc:83:b3:f1:37:
b1:5e:1d:1b:be:98:3f:77:cf:cc:ba:16:fc:27:a7:f2:75:4c:
b3:bf:97:a4:0e:84:93:08:5c:41:20:f9:f1:56:8c:0b:73:ef:
8a:8e:70:d4:e9:8e:52:7c:65:57:e0:ce:8a:bb:cd:ab:2f:56:
13:49:d6:c8:a2:bc:1e:ba:be:7c:70:f9:62:38:ba:83:f8:ec:
e8:25:96:c4:c7:b0:77:a5:0e:d0:dc:52:d0:9b:a4:ec:37:9c:
c0:08:4d:d1:06:8d:bc:2a:2d:31:a6:07:0a:3e:51:cb:9f:32:
30:45:b8:52:7e:60:16:44:a1:e8:78:ce:9b:df:2c:9c:84:3c:
19:67:df:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:32:22 2026 by rpki-client