
Error: rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
File: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft (raw, json)
Hash identifier: 6sb1ZMYWtvaBUx19ONjtoaa4muA6KbpMghiGJ/h60vg=
Subject key identifier: C8:13:70:9D:76:F6:D5:98:1B:D0:EC:DB:50:FB:D4:42:97:C3:AF:02
Authority key identifier: F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
Certificate issuer: /CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Certificate serial: 16D9030A22A788E317EBFA999EEB3E3C3E23B57E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
Manifest number: 04C7
Signing time: Sat 10 Oct 2026 13:06:10 +0000
Manifest this update: Sat 10 Oct 2026 13:01:10 +0000
Manifest next update: Sun 11 Oct 2026 13:08:10 +0000
Files and hashes: 1: 3137392e36332e3131362e302f32322d3332203d3e20323731353434.roa (hash: r36UPWC3Vh1GB2DCGEKJx6tfK61tTVpl8QFU827APis=)
2: 323830343a376432633a3a2f33322d313238203d3e20323731353434.roa (hash: w1u0JUYAXt5xoO8Keb4QmQeOvbrNLJrLcR9nBkZ9cKQ=)
3: F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl (hash: Je85pgi0vWsFlCI6j9lCOJJHcOJqoBpImG9Wezd8FNM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 13:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d9:03:0a:22:a7:88:e3:17:eb:fa:99:9e:eb:3e:3c:3e:23:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1C6B7C46075B4144C904B5F483EC1FC29F974FE
Validity
Not Before: Oct 10 13:01:10 2026 GMT
Not After : Oct 11 13:08:10 2026 GMT
Subject: CN=C813709D76F6D5981BD0ECDB50FBD44297C3AF02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:b6:d2:0a:cd:2f:7a:27:39:19:29:1f:28:
76:fd:c0:28:fd:a7:07:3a:a4:cf:2c:86:d1:dd:7b:
92:99:f4:a6:a8:b8:f7:db:c1:5f:8d:7a:55:82:a5:
2b:04:f5:8d:78:71:1f:07:f4:83:7e:fb:dd:02:dd:
4e:d5:03:67:33:75:aa:f9:f4:43:e0:10:71:aa:0c:
c2:d1:1a:01:93:59:b4:96:bb:b6:2e:29:97:44:ab:
11:e3:34:97:68:69:eb:1e:e6:2b:c5:e8:9b:e7:33:
fe:5a:24:54:6f:2d:e2:85:cf:21:13:0e:48:9c:d2:
47:b2:ab:1b:fc:a0:06:0c:bf:a0:43:0d:d4:8d:69:
97:8e:ee:96:0c:05:88:d2:0d:18:22:11:a6:fe:28:
be:e2:62:e5:ff:e0:ab:0a:c3:e2:4d:7a:2f:22:59:
62:a8:58:d6:ca:4e:43:34:40:bb:8e:a0:da:f1:2c:
8c:53:2f:64:34:02:74:4f:0d:01:26:f6:7a:68:ed:
90:ce:87:be:86:c8:73:be:33:11:76:94:d6:79:88:
75:91:95:6d:74:6a:62:29:33:fb:3a:d9:37:93:cf:
e0:bd:bb:59:56:6d:09:2b:d3:dc:39:27:1c:75:ba:
e4:52:b6:be:b1:40:d3:35:c3:38:2b:6c:0b:58:6a:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:70:9D:76:F6:D5:98:1B:D0:EC:DB:50:FB:D4:42:97:C3:AF:02
X509v3 Authority Key Identifier:
keyid:F1:C6:B7:C4:60:75:B4:14:4C:90:4B:5F:48:3E:C1:FC:29:F9:74:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/1/F1C6B7C46075B4144C904B5F483EC1FC29F974FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0e:f1:44:51:0e:13:3f:06:0d:dc:4e:46:30:81:61:84:44:
95:23:ee:d2:a0:54:09:ae:4d:a4:42:17:5b:12:64:70:38:17:
f0:7d:96:74:98:1a:5e:6a:67:cb:3d:ed:e0:be:32:9c:ac:03:
48:d5:ad:32:ab:48:60:3c:29:cd:e5:78:c8:1d:86:9e:2d:8a:
f8:60:a3:63:5c:ad:38:f2:91:5a:cf:2e:fc:34:d3:eb:8a:40:
3e:3a:40:4c:76:8f:28:bf:9b:a9:85:d1:9f:e5:6d:57:c9:be:
29:f6:3a:61:ab:bd:63:ad:a0:cc:56:1c:fc:1b:f8:f2:d8:2a:
ca:d4:c0:10:b5:cb:69:3f:94:a2:da:26:7c:30:81:87:13:2a:
75:75:5b:b5:f3:95:c9:cd:10:fc:8f:51:ce:ee:96:29:ea:b3:
13:b2:fb:43:b3:21:b7:ba:f2:0b:25:8a:94:6f:d5:b3:c3:71:
f6:05:12:70:36:d2:59:52:fd:66:7f:b2:2d:be:03:ee:d5:17:
d9:31:f2:c6:03:39:59:78:bb:42:60:fe:c7:b3:6a:78:c2:b0:
9b:35:9c:93:34:01:dd:6d:87:d5:e4:1f:9d:10:48:9f:75:f3:
f5:73:1e:fc:dc:1c:66:ba:d9:7f:68:66:3f:f5:82:d3:5f:bc:
d9:ba:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:06:18 2026 by rpki-client