
Error: rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
File: B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft (raw, json)
Hash identifier: uYabnp6T70e8c7gmqTgxoNUU7zyhD40TwxJ00C2QjX4=
Subject key identifier: 1D:91:67:92:BC:8E:D9:F9:B2:46:34:B6:CF:D7:4E:65:59:F1:E2:77
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Certificate issuer: /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial: 37D0CAC48F9C68A83CAD94E9C5E799EFEB0359
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
Manifest number: 044D
Signing time: Mon 12 Oct 2026 06:14:19 +0000
Manifest this update: Mon 12 Oct 2026 06:09:19 +0000
Manifest next update: Tue 13 Oct 2026 09:23:19 +0000
Files and hashes: 1: B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl (hash: xqbeVeCxciZFf2CJSRFVEwTqExy6T8MK0pNE0TTlSVg=)
2: 3230302e31302e3133322e302f32322d3234203d3e203631393334.roa (hash: 9aHNIqZoNUKVpKSsYcjS6S13fFi7zaHM4RvKVQZZj3U=)
3: 3133382e33362e3234382e302f32322d3234203d3e203631393334.roa (hash: DT+Th+4Qk6YbR7iDUAyMd7pnsbqssOOR9XIo0VpF700=)
4: 3136372e3235302e34302e302f32322d3234203d3e203631393334.roa (hash: OP5ReH5cfBU7qWkznkcHzfU8+RHoaCJgiYwqLI9rYrA=)
5: 323830343a313837343a3a2f33322d3438203d3e203631393334.roa (hash: SX1qDtbwz5I4UJgbUseLr4ReBQpt78ZqhnGtOl9Wv9o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 09:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d0:ca:c4:8f:9c:68:a8:3c:ad:94:e9:c5:e7:99:ef:eb:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Validity
Not Before: Oct 12 06:09:19 2026 GMT
Not After : Oct 13 09:23:19 2026 GMT
Subject: CN=1D916792BC8ED9F9B24634B6CFD74E6559F1E277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:48:a8:d3:bf:9b:97:51:de:e6:9b:3d:86:
43:58:e8:1b:95:13:bd:13:e5:03:f6:bd:b7:ce:35:
cd:21:f1:8d:87:01:17:1d:49:b4:55:62:c5:25:15:
ee:63:48:40:cb:11:86:48:d2:6a:6f:71:eb:af:54:
62:a4:8b:b6:62:8a:95:18:30:3b:70:4b:0d:db:9d:
0d:49:a4:71:0b:59:ef:4e:cc:18:84:d2:7e:16:6f:
9f:c6:ab:d2:46:08:fd:6a:47:07:79:79:8c:67:25:
f3:56:a4:9d:f5:e4:0a:db:10:9d:bf:e0:5d:bd:7d:
e7:9f:81:28:75:a5:a7:ec:a2:f0:84:c6:88:e1:7a:
cd:01:68:75:ad:87:87:eb:0f:d0:ca:4e:a5:73:73:
10:d0:28:7b:4b:4a:ad:b7:a1:c3:9f:f8:ee:40:69:
d2:0a:46:e8:b4:43:f8:94:47:2b:08:e7:07:af:76:
78:9b:a3:41:1e:a4:99:39:4b:e6:1b:93:98:ef:75:
ff:07:47:4b:74:20:f9:65:e2:33:35:48:db:c4:41:
40:ca:09:56:c8:a9:2f:fd:7a:a0:32:a9:a0:e0:a4:
a3:e8:fb:fc:3d:9b:3a:d5:2e:c2:fd:76:f2:76:36:
d0:d4:f0:e9:65:25:6c:b9:74:a6:8d:25:df:77:da:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:67:92:BC:8E:D9:F9:B2:46:34:B6:CF:D7:4E:65:59:F1:E2:77
X509v3 Authority Key Identifier:
keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7f:ae:bb:0a:4a:4b:63:6b:7d:2f:ca:fb:9f:b7:d6:20:e3:
22:65:ff:68:ed:f5:8f:c5:3e:3e:23:fa:89:2f:e7:12:eb:c0:
e8:6d:8a:3c:bc:23:53:08:31:43:8f:49:db:81:4e:cf:fe:c8:
3e:72:f9:12:c0:b3:32:46:ef:e0:63:07:11:b1:02:6c:46:43:
6b:68:ff:2a:b6:7e:eb:a7:db:61:9c:df:f7:4e:66:18:86:0f:
c4:25:a1:56:ca:59:3f:c0:6d:3f:2b:29:8f:b7:52:45:35:97:
bd:f6:c5:5a:28:77:aa:13:30:2f:b9:21:16:df:18:65:b5:90:
91:83:15:52:4c:72:66:a3:34:24:d3:7c:bf:13:88:b6:b5:07:
72:1d:6e:1d:b5:53:5c:aa:13:0e:8c:7f:27:81:fd:ec:7e:1e:
0d:bf:88:db:eb:27:86:e1:15:23:2c:be:e6:43:7d:9b:ed:83:
f3:8c:20:6b:d3:d2:52:66:3d:f3:46:56:dc:cc:e6:c7:95:93:
e6:3c:8e:4e:33:04:6e:0a:49:08:41:b5:87:e2:b5:da:b9:d0:
ed:ed:6d:03:62:fe:a8:e2:c7:e5:cc:5f:ab:dd:b9:05:90:ab:
3e:54:2f:18:d3:05:ce:55:9b:ad:4b:15:9c:02:e2:ec:6b:2a:
18:b7:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:03:22 2026 by rpki-client