
Error: rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
File: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft (raw, json)
Hash identifier: fQAtVQu6SdP994mNlJp0GK9sWFXauJw1f3T7PnREhnA=
Subject key identifier: 47:04:C0:89:EC:EF:89:08:3B:03:1C:29:9A:7D:BF:F5:E7:76:68:C4
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Certificate issuer: /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial: 65037DB133BCE6B6085A6B94A257991019A92D0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
Manifest number: 056B
Signing time: Mon 12 Oct 2026 20:10:00 +0000
Manifest this update: Mon 12 Oct 2026 20:05:00 +0000
Manifest next update: Tue 13 Oct 2026 20:10:00 +0000
Files and hashes: 1: 323830343a316561303a3a2f33322d3634203d3e20323634343430.roa (hash: xqC+gOH7rBq/jDtYnOw+knrs+Scwd70y3IYgSn+N77M=)
2: 3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa (hash: 1yd1A7DGRmyDLmbw6dBeYHszZiwpWU2UO9ejflEseEc=)
3: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl (hash: FrsL5yw2qAk74nugO83WoJ0yRCLnpssz2OEQjgpGgkc=)
4: 3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (hash: KeATW2+WTsAZ3teiwzE5i1dJQy7AfZCS2Ly3+ZHxEBo=)
5: 3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (hash: 6TmFEqzOQWRsAeV0zguTjF+hUywcqJbljzvmxncc7aw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 20:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:03:7d:b1:33:bc:e6:b6:08:5a:6b:94:a2:57:99:10:19:a9:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Validity
Not Before: Oct 12 20:05:00 2026 GMT
Not After : Oct 13 20:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:cf:08:50:78:08:b5:1b:b7:f3:b1:9f:2c:
40:33:d2:07:0c:a1:03:08:84:55:9c:37:b3:d6:b0:
44:a6:0a:2e:80:cf:ae:af:e0:08:26:88:62:8d:d1:
ba:0b:45:f4:78:1d:6d:0f:2b:71:e6:74:e5:55:29:
a5:be:f8:95:95:73:7d:a2:40:98:48:fd:1f:1b:6c:
07:a9:e3:e7:64:b5:78:98:cc:f5:e7:a2:4c:e5:39:
b6:50:86:8a:4f:a1:ed:ff:78:58:88:a2:e3:c2:96:
65:f5:c3:bf:43:11:4f:d3:3c:15:e0:dc:be:ef:a6:
22:83:36:a9:6c:74:d3:f3:a3:e8:cd:3a:63:8c:52:
a6:9a:0c:5c:4d:c0:3c:10:04:9f:18:a7:e2:1b:5c:
c7:97:72:66:d4:1e:d9:1c:7a:a9:93:a8:bc:38:60:
ec:ef:f1:90:35:28:c9:f7:15:cb:51:ad:87:33:7a:
f6:2f:df:72:4f:31:7e:62:7b:82:f2:53:1f:42:bf:
48:57:76:a1:7d:9a:e9:06:b6:43:3d:c2:93:78:02:
b6:3a:2b:f4:b2:25:58:5f:54:3a:52:19:10:7c:fc:
dc:1a:c9:01:55:6f:e0:a8:10:94:77:35:f1:b5:3b:
cb:12:b7:06:a4:94:f9:e7:0c:f9:a1:17:82:ce:0e:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:C0:89:EC:EF:89:08:3B:03:1C:29:9A:7D:BF:F5:E7:76:68:C4
X509v3 Authority Key Identifier:
keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:2e:75:64:07:79:0f:7f:9b:0c:ac:94:a2:8a:73:ee:26:
39:2c:2e:6f:0b:de:98:19:f2:eb:34:ed:56:a2:54:ba:14:7a:
04:b2:af:57:73:01:c4:db:9b:51:2b:b1:72:7d:14:06:7b:98:
25:3d:e8:c8:31:10:dc:04:cb:1d:48:50:11:cc:13:b2:bf:8f:
9a:97:32:c9:0c:b5:15:e6:ea:91:c1:3c:9a:28:87:ad:46:6f:
36:1b:d5:9d:a0:31:6e:e6:5d:62:a6:7e:14:51:f2:a6:2e:8d:
69:58:41:f1:39:a2:31:61:91:39:82:75:f8:3f:d0:1b:92:95:
43:d1:be:82:a1:5f:46:d6:9b:88:4e:a7:6d:57:0c:af:8c:b0:
6a:ee:ea:0a:16:97:df:1f:a0:10:84:d4:2e:c8:fa:ba:02:63:
f5:8f:9e:ce:98:00:41:9e:9a:5e:a5:56:25:51:5b:db:2a:a4:
58:fc:35:b5:68:2c:da:1a:ba:fd:ec:00:bb:74:13:4a:8c:81:
40:db:a5:53:32:a1:b5:30:64:dc:c3:ac:e2:c3:0c:e3:80:b2:
b0:97:14:46:d5:c3:ef:eb:46:8e:2f:de:9a:3e:3f:86:63:0d:
6f:b3:f7:7d:1d:6d:22:3a:52:ac:0e:9a:f0:22:d6:3c:57:68:
77:c7:9d:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:28:53 2026 by rpki-client