
Error: rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
File: D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft (raw, json)
Hash identifier: VYliKGoJVPaAY254hrE+3Wuw0oEPUOGtbla0QfaFKu4=
Subject key identifier: 5B:6C:19:12:AF:02:7F:08:C4:B7:B1:64:81:F4:C0:20:4B:2C:90:1E
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Certificate issuer: /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial: 2AF16D52705C4770859F89A57295B38D3AEF77FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
Manifest number: 04B3
Signing time: Mon 12 Oct 2026 21:56:10 +0000
Manifest this update: Mon 12 Oct 2026 21:51:10 +0000
Manifest next update: Wed 14 Oct 2026 01:03:10 +0000
Files and hashes: 1: 34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (hash: vnDMTtou2M3H+wfHs5hjxL185lzK3e/BlM0ys5z8iTk=)
2: D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl (hash: /vNS9Wu2A6kJuT0yKlhTFFKIuzuw43AgYl9CWxwwdj4=)
3: 323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (hash: JIpoKbKmQS8aB3awqRsxOXJFuD3mJOT3SZsietBEgoE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f1:6d:52:70:5c:47:70:85:9f:89:a5:72:95:b3:8d:3a:ef:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Validity
Not Before: Oct 12 21:51:10 2026 GMT
Not After : Oct 14 01:03:10 2026 GMT
Subject: CN=5B6C1912AF027F08C4B7B16481F4C0204B2C901E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:1d:33:bf:0f:9e:f0:0b:7b:f7:53:81:f0:
1a:e6:04:1d:f8:9f:69:56:f1:6d:5b:fb:d3:1e:1c:
a1:5a:49:9f:1c:d7:bb:5a:ae:4c:a3:8b:c5:8d:09:
78:32:e8:f1:77:a3:b8:4c:4c:b4:37:d9:f9:91:68:
9b:1e:c6:26:c6:8a:4e:1e:02:47:e5:88:db:2b:a4:
59:69:b5:1a:50:42:1b:c6:cd:5a:16:ed:fc:1d:d0:
5b:30:e7:63:5b:14:13:c3:bd:ec:cc:9e:e7:52:cc:
f0:b0:84:b9:bc:f4:43:11:d5:12:69:c7:b1:50:08:
e7:a1:72:18:ac:50:3c:d7:73:db:22:47:78:13:39:
e9:5f:72:21:ce:c8:4c:20:0a:02:93:df:8d:3e:e1:
97:8f:2e:60:f3:2c:6e:85:3a:ec:2c:ba:31:65:14:
93:e6:3e:2a:e1:c3:1f:2e:08:27:7d:34:fb:15:f9:
2e:a9:cd:e8:97:b3:ef:21:b5:3f:a8:28:5a:83:92:
81:39:fa:27:f7:1c:a9:1b:d4:11:1a:63:17:8e:e2:
20:7f:ad:0f:31:6f:fc:72:be:1a:79:af:9d:42:eb:
6b:a5:62:6c:0b:9d:e7:d1:70:20:fd:75:a1:9c:83:
8b:a9:e8:0e:ab:52:14:a8:18:8c:82:44:f7:c0:9f:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:19:12:AF:02:7F:08:C4:B7:B1:64:81:F4:C0:20:4B:2C:90:1E
X509v3 Authority Key Identifier:
keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:54:c5:9c:d3:56:24:f8:3b:62:01:ee:ed:b4:e9:a5:5e:
0f:75:1c:e7:00:dc:ef:de:27:17:0a:ec:ed:a2:9b:b4:de:3b:
6e:ee:f3:15:e5:e2:0f:83:34:9d:7e:9c:51:df:d9:e2:c1:d5:
40:0c:e5:00:54:47:6a:0a:06:5a:69:44:3a:86:05:79:c7:c3:
d5:72:9f:b7:e6:97:28:07:9a:a8:a5:e6:ff:d0:f1:62:f5:92:
26:00:de:b0:70:de:4c:f1:93:61:98:7b:16:17:30:48:23:b2:
1b:6c:12:3a:50:b2:f0:6c:e4:b8:34:5d:f1:ba:14:b8:a6:90:
1b:05:bc:8d:87:46:91:89:9c:af:2f:db:bb:c1:02:1a:bb:d3:
42:01:74:dd:f6:a5:d3:c7:7c:95:24:5d:30:76:0c:31:80:5a:
92:15:66:57:35:ff:b6:b8:c2:c1:b1:a4:e4:2e:53:14:0a:68:
df:3f:fc:91:80:df:88:53:eb:6e:b1:5e:e5:2b:fd:59:43:3b:
af:75:b5:a7:23:9f:e5:97:6f:7d:0c:dd:56:73:9d:ac:77:1b:
8b:9c:55:3b:a8:5f:99:29:6a:be:1b:16:b8:67:a6:04:9e:75:
9f:b7:db:54:1e:f1:b8:f0:a0:1d:2e:24:3b:22:ad:e0:a2:d0:
cf:25:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:15:31 2026 by rpki-client