
Error: rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
File: 83CE6152C5DC2AF2E628D574237B19843CB8056C.mft (raw, json)
Hash identifier: CA9iylgHuSB2I/7LKEL+fGSDqobEhuNGtrdcJp/INBs=
Subject key identifier: 63:E1:00:6B:B2:F0:B1:4C:7C:01:3F:C3:63:51:AB:CF:D1:89:1B:E0
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Certificate issuer: /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial: 507E8577CF4DB6A9012CF5EFFC6A5E6EAFE873C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
Manifest number: 04C4
Signing time: Sat 10 Oct 2026 10:58:16 +0000
Manifest this update: Sat 10 Oct 2026 10:53:16 +0000
Manifest next update: Sun 11 Oct 2026 14:06:16 +0000
Files and hashes: 1: 34352e3137382e3131362e302f32322d3332203d3e20323639303138.roa (hash: zXr0XmEoUdnPZQrCwmDVQ8gn2VoHln6IDUrhfq8HMSY=)
2: 83CE6152C5DC2AF2E628D574237B19843CB8056C.crl (hash: rphVj8uUzNZ5c+Exlqj0+CboqTlVxwTa9SL1RcLCf50=)
3: 323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (hash: A2yDjfLJVeiIGV4tkqKVmdVhG6rSucBeGjzNJSUgRIc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 14:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7e:85:77:cf:4d:b6:a9:01:2c:f5:ef:fc:6a:5e:6e:af:e8:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Validity
Not Before: Oct 10 10:53:16 2026 GMT
Not After : Oct 11 14:06:16 2026 GMT
Subject: CN=63E1006BB2F0B14C7C013FC36351ABCFD1891BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:7a:9c:17:59:a5:95:81:ea:1b:c9:72:23:
52:a8:e8:03:83:5a:d8:13:58:bf:6a:9e:41:ca:32:
cf:9c:f3:67:34:6b:14:be:f1:fc:ef:da:51:0b:63:
f2:a6:a5:94:df:f1:4c:df:fd:9c:39:95:6e:ce:1b:
f1:01:24:eb:c1:70:34:f0:21:30:45:cb:5c:71:96:
08:9e:92:26:29:c2:24:6b:bc:d3:24:05:d8:9c:f4:
14:04:d1:3f:e2:b2:22:0c:72:4a:f6:6f:e0:e6:fd:
05:2d:dd:36:bf:1a:9b:3c:58:7a:44:20:ff:c2:1d:
3a:2b:75:96:56:7a:8f:8a:66:8c:03:d0:68:b9:92:
36:a4:80:f4:6b:e1:89:a9:4c:24:6a:60:a5:5f:53:
11:48:9a:eb:17:88:9f:be:46:13:e6:49:27:6b:99:
48:75:36:c0:f5:01:2e:05:2c:5a:7c:21:2f:1c:b3:
af:66:98:d7:10:bd:cb:98:20:ed:79:4c:23:ab:c4:
dd:ea:ed:f8:15:58:ac:18:f4:28:d8:b2:65:4d:25:
c0:6b:e4:4f:58:cd:87:c0:52:f7:b4:aa:58:43:c9:
e8:54:30:16:b3:aa:1c:66:1b:27:4b:5f:73:54:42:
f4:09:56:72:91:43:0d:f1:8b:a1:2f:88:5e:82:85:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:00:6B:B2:F0:B1:4C:7C:01:3F:C3:63:51:AB:CF:D1:89:1B:E0
X509v3 Authority Key Identifier:
keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b3:71:00:6a:c3:b6:03:d9:0b:c8:af:1e:37:3a:53:90:6e:
50:13:3d:d5:a5:69:a0:2f:99:3c:80:a7:67:a5:f9:d9:81:f0:
e9:d6:48:bc:a6:ba:34:95:9a:62:95:90:8f:63:99:ac:2d:8e:
c2:03:d1:39:ac:71:07:d8:5b:f0:53:23:51:a7:65:f3:4b:27:
6e:b4:1f:be:53:68:89:e9:b3:70:03:63:02:78:ee:cb:a6:c5:
92:a5:3d:7c:4d:16:fe:95:18:70:6e:0c:b5:13:a7:66:21:79:
7a:ad:f7:f5:98:48:59:a3:c3:25:cb:42:46:eb:8c:20:e3:84:
eb:60:62:d3:3d:c5:c5:fa:cf:c8:f1:b4:bb:e0:06:a1:98:aa:
a2:10:63:6b:37:bc:29:7c:ae:fa:c1:84:8f:1e:47:e4:de:34:
12:c2:a6:bf:22:fa:46:fa:92:28:fd:0f:d3:23:77:f2:ba:96:
ac:71:87:96:2d:a1:4b:23:e7:39:8b:fe:d7:a5:20:11:84:43:
21:fa:88:77:29:8a:32:93:0e:f8:dc:11:89:80:7d:5a:74:1d:
83:78:a7:87:48:2b:03:75:24:0f:76:25:96:29:c1:49:5a:ca:
1c:4c:fa:c6:bd:ee:fb:f6:64:fe:c4:a4:ce:bd:57:22:24:3b:
8e:1f:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:18:41 2026 by rpki-client