
Error: rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier: k1AdbETM7DnbQRs3j/5PAHbnk7WJkN0QfFQHFR3n2Is=
Subject key identifier: BE:1F:02:3C:BC:A4:00:E9:C4:33:2F:7D:14:74:E9:7C:48:3A:19:3B
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial: 44A7D5DE71FC86A2D4F2D46D526303EAAE0287EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number: 04D3
Signing time: Tue 13 Oct 2026 00:22:37 +0000
Manifest this update: Tue 13 Oct 2026 00:17:37 +0000
Manifest next update: Wed 14 Oct 2026 03:17:37 +0000
Files and hashes: 1: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: zEuZSqn5bZ8xb1825r2MOOLgbSmhE1/+gK04rIH8GSc=)
2: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: CTxKvE3yrECoDym+BB9B17d83I7oxuNNK1Nc5xcrwH8=)
3: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: L9B5MGzXntZcLyq4LuTm3Q9UeS6i4pvrYrQJyD6CNVE=)
4: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: 6J/Woy2uRK1B2dNQ2tt84/6O9ugNLPe6HwJN4LKAnpQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 03:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a7:d5:de:71:fc:86:a2:d4:f2:d4:6d:52:63:03:ea:ae:02:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
Validity
Not Before: Oct 13 00:17:37 2026 GMT
Not After : Oct 14 03:17:37 2026 GMT
Subject: CN=BE1F023CBCA400E9C4332F7D1474E97C483A193B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:b5:77:79:54:34:4e:f8:83:fd:d0:73:0f:
41:ae:af:90:0a:3f:89:c3:45:fb:e2:91:aa:82:0d:
2b:a5:59:16:0c:b2:c8:f5:33:89:fd:2c:2d:2f:9f:
e9:7e:d0:3c:bf:f4:4c:f4:a3:c4:d8:d0:93:6c:36:
29:c9:9e:56:7a:27:6c:22:c2:27:bf:5f:48:6b:49:
e3:00:e0:ac:8a:b3:4b:75:d2:60:2f:f3:d0:3f:0c:
d8:cb:d9:1b:dd:e5:6b:6c:29:61:4b:2e:99:5e:ea:
65:7b:22:63:18:bf:fc:00:35:37:8d:56:1a:d4:ee:
87:a8:3d:ce:5c:5f:5e:54:20:31:4c:2d:cd:78:97:
79:4d:a0:4c:0d:ff:93:dc:92:db:d6:b8:74:e9:bc:
6e:6b:bd:d3:69:10:e8:b8:1e:c0:c2:98:e9:f2:cf:
f3:34:47:dc:ef:39:e2:f0:ec:19:2c:77:fb:49:3e:
db:06:d5:8a:1e:06:9e:65:98:80:11:6a:5c:bb:ab:
a9:95:3d:4e:f0:db:d9:d9:3e:e5:60:e3:24:90:5d:
a8:4f:da:78:fa:ba:bf:dc:e5:aa:f4:32:fa:98:c1:
10:f1:a7:db:f7:2e:65:66:c6:c6:dd:0e:61:bd:f5:
f6:57:9e:55:79:a4:fc:1a:05:97:04:bc:49:c8:c9:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:02:3C:BC:A4:00:E9:C4:33:2F:7D:14:74:E9:7C:48:3A:19:3B
X509v3 Authority Key Identifier:
keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:be:f8:71:c8:5b:f7:77:29:a8:fe:8f:ae:f6:c9:01:82:46:
8f:2d:6c:49:8c:4b:4c:ff:1d:86:22:b6:3e:5a:e1:9e:a5:0e:
a9:a2:a8:c1:b0:22:70:1c:aa:16:a7:c1:cf:92:89:f8:ae:77:
18:85:b3:fd:94:b4:75:30:7e:00:b6:d8:c8:2a:87:29:44:fa:
fc:21:e1:18:f9:43:81:f5:fd:6e:33:97:eb:15:bb:7e:89:67:
3d:99:82:9d:46:3e:b2:c7:00:08:bc:36:d3:3c:92:b6:5a:8a:
59:0f:36:85:6c:08:47:48:a0:c7:af:ab:84:01:e3:3b:04:f9:
cb:c8:5a:23:ee:45:82:b3:0b:4c:f5:a2:f9:28:c8:0f:c1:7a:
48:90:ab:9b:ee:f6:7e:88:e6:f6:aa:99:d0:a4:a3:57:16:78:
74:55:03:e3:03:18:5d:91:d6:01:70:5b:90:30:4f:4a:b3:f2:
ca:df:ef:5b:4a:65:ea:02:5d:24:50:da:c4:22:77:cd:fc:fd:
a3:79:37:34:cc:2c:3d:81:00:63:fb:56:28:87:eb:a8:f0:e5:
d1:a3:84:10:e7:8d:47:7c:97:e4:52:15:4b:52:77:08:3a:43:
30:42:b1:3a:c4:ec:14:bc:45:81:f3:69:ba:e2:27:cf:61:34:
4a:a4:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:27:26 2026 by rpki-client