
Error: rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier: 70/Dh6VFiNuyROJDk4VKu8/uz92X2H+ZQUHHVTi5+8Q=
Subject key identifier: DB:B1:46:50:AB:1F:39:94:32:00:36:AC:7C:72:B6:B9:E3:61:C9:82
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial: 732AECE2163889F0F3B248F216F9EEC9D2C73CB1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number: 04CF
Signing time: Thu 15 Oct 2026 02:58:01 +0000
Manifest this update: Thu 15 Oct 2026 02:53:01 +0000
Manifest next update: Fri 16 Oct 2026 05:44:01 +0000
Files and hashes: 1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: yjfDDmc1XKJejvlhvJBaNDAj5gwBndVVxo1R2PFAc3U=)
2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 05:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2a:ec:e2:16:38:89:f0:f3:b2:48:f2:16:f9:ee:c9:d2:c7:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Validity
Not Before: Oct 15 02:53:01 2026 GMT
Not After : Oct 16 05:44:01 2026 GMT
Subject: CN=DBB14650AB1F3994320036AC7C72B6B9E361C982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:c3:d4:49:62:90:05:77:8e:af:3f:47:d5:
d0:89:84:76:e9:d4:63:a7:32:d8:66:f6:1e:34:e5:
e2:94:25:e2:df:1d:60:20:f7:cb:be:68:f8:9d:ca:
8d:be:16:cf:02:04:dd:2a:e3:60:5d:90:4a:94:c6:
5f:09:11:fb:33:92:8f:0e:8d:b2:63:ce:91:90:3a:
08:10:9f:0e:39:19:ac:70:7a:5a:39:b6:8f:f5:3a:
c0:7c:d6:d7:ce:e7:40:b2:2b:80:b1:29:5c:75:56:
e2:60:f0:c0:ec:48:db:f8:f8:be:ce:b9:7c:1c:6f:
c2:32:45:b6:be:76:1a:ce:65:fe:7f:7f:e4:69:d9:
5a:7c:fa:77:8f:95:dc:38:0a:e9:5a:5b:91:36:f6:
49:b7:21:ec:2f:12:6f:74:c6:d8:9c:d0:08:ac:30:
8d:e9:ba:16:4b:05:b6:3b:e7:9c:b3:dd:4c:be:e0:
d0:de:f8:83:cb:3c:8c:bc:53:14:9f:8e:dd:2d:da:
df:32:4e:10:8a:3d:db:34:48:e1:42:52:7d:d1:0a:
1e:df:fd:03:ae:e1:3c:14:df:8c:e2:25:dd:b8:c3:
76:b6:55:53:56:22:a4:3d:b5:ea:67:f2:cf:26:e2:
9d:60:bf:de:34:57:4c:9a:f9:95:2f:a4:d7:4f:47:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:46:50:AB:1F:39:94:32:00:36:AC:7C:72:B6:B9:E3:61:C9:82
X509v3 Authority Key Identifier:
keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:09:37:d6:f2:b2:7c:64:bd:57:1e:12:72:7b:05:46:61:54:
db:3c:dc:d0:ef:5c:0e:1f:e5:0d:00:22:85:8e:fd:4a:3b:a5:
11:36:d9:8c:55:0a:30:5f:a5:a6:26:49:ef:a2:77:dd:ee:ea:
0a:cd:e7:b6:94:f5:24:da:c4:65:1e:9e:1f:6f:c3:66:44:c1:
4c:d0:20:b1:73:d5:20:d5:79:36:01:8f:e2:ef:b5:4d:ec:a2:
b7:65:55:a8:ab:0b:ff:0c:91:e3:b9:03:98:55:d8:7f:12:5d:
11:1d:59:68:c1:a0:71:50:70:1f:01:4b:bf:d7:9a:cc:2a:f4:
9d:43:61:f1:05:03:b0:bc:a9:b1:1b:31:f2:2e:fe:74:b2:96:
fa:48:3a:a4:8e:d0:b5:b1:9b:42:66:51:8e:0d:16:55:2a:8a:
f3:e2:d2:66:ed:30:a1:c7:25:84:13:5b:9f:84:8e:3b:6a:4f:
51:ae:f6:0b:f3:53:12:ba:0e:d0:45:e6:00:65:2c:b9:09:cd:
83:f3:52:7c:76:1d:ce:cf:7d:b9:ef:cb:98:ff:db:ea:cc:e6:
42:6c:7a:ba:dd:92:0f:94:d7:5a:72:5d:f5:be:32:99:ae:47:
53:01:9e:b0:65:47:b9:71:57:ee:01:5a:de:42:91:d4:5e:87:
0a:f3:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:27:50 2026 by rpki-client