
Error: rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
File: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft (raw, json)
Hash identifier: cfV5oiJK26JdRKv9p6kR7kD4xEAcY4oW43Vv0zXNUpA=
Subject key identifier: C4:EE:81:AE:E0:91:0D:F3:12:AB:B8:FB:45:AB:3A:F0:5F:1F:FF:61
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Certificate issuer: /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial: 3FF267071FA920A1ABC14C8A6C092BBAFFD18AB6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
Manifest number: 56
Signing time: Mon 12 Oct 2026 11:47:38 +0000
Manifest this update: Mon 12 Oct 2026 11:42:38 +0000
Manifest next update: Tue 13 Oct 2026 13:02:38 +0000
Files and hashes: 1: 42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl (hash: EPM/19O0bQ4ss5eiRLAykbFHYHwd+cgprT7h4neHi50=)
2: 323830343a333764343a3a2f33322d3438203d3e20323636343338.roa (hash: TRSsrflb3DPtHM2LWcwO11g+mZjnEw/TB+FqKaNMZHc=)
3: 3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (hash: qt8f+pcb1F31TG0ZkhKuxjLPIOjfhzeNYXgCXl86Ugc=)
4: 34352e3137332e33322e302f32322d3332203d3e20323636343338.roa (hash: CJjrgnCCmcFCHIYqXiWS0uEONKp/FXLPf6yVQju0DbM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f2:67:07:1f:a9:20:a1:ab:c1:4c:8a:6c:09:2b:ba:ff:d1:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Validity
Not Before: Oct 12 11:42:38 2026 GMT
Not After : Oct 13 13:02:38 2026 GMT
Subject: CN=C4EE81AEE0910DF312ABB8FB45AB3AF05F1FFF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:53:6d:f7:67:27:b9:68:ad:43:fb:81:f0:
11:d6:cf:84:ea:cf:d1:12:ae:0b:7b:ce:8a:00:cf:
bc:b0:9b:c5:d1:22:b5:62:39:5c:7d:0f:69:96:95:
0e:65:e0:79:f3:9d:0c:24:cb:13:08:12:0a:c4:00:
4b:82:01:78:c3:da:78:e0:09:29:68:7b:45:63:37:
a2:5f:77:e7:7a:ce:a6:23:bf:cb:fc:7b:bb:7c:c3:
04:ff:3f:fa:4f:af:85:26:a5:20:5b:f4:1c:b6:99:
9c:81:70:59:31:9a:31:42:15:32:a1:ba:ba:f5:e3:
bf:70:1f:ea:e6:59:02:a2:ad:12:5b:05:2c:e0:a6:
0a:ed:b2:ff:db:40:bd:fc:2c:42:04:e4:d4:e9:f6:
a2:21:bb:e0:4d:5f:dd:df:f2:80:33:83:c1:7a:7d:
2d:57:01:30:60:75:a2:40:62:b7:4e:4d:a4:72:25:
d1:b4:4f:33:e7:d7:10:89:b5:7b:65:0c:7a:3b:b1:
59:d6:01:fe:04:b8:45:01:b6:47:e0:f1:fc:23:ae:
2f:6f:9a:66:3e:a2:b5:a1:8e:64:44:44:18:c3:bc:
97:32:59:70:e1:49:8a:ee:53:28:5d:4d:f9:2a:7b:
a8:c5:0d:28:b5:ed:14:62:14:04:0d:4f:d5:6a:4c:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:81:AE:E0:91:0D:F3:12:AB:B8:FB:45:AB:3A:F0:5F:1F:FF:61
X509v3 Authority Key Identifier:
keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a3:fa:f7:a6:ff:a8:73:76:7f:9b:11:21:14:aa:4d:b8:c3:
9c:2e:97:b9:e2:69:78:0c:9f:b2:85:be:bf:89:7d:ab:9d:55:
d9:38:3b:bb:1d:d1:33:6a:13:74:a2:85:b7:52:96:c7:f7:8a:
07:e2:e7:37:5d:46:7c:0c:54:eb:cf:47:89:9d:98:fe:14:a8:
18:9f:45:53:f0:5f:31:e9:05:57:d0:69:51:c5:d9:df:5d:76:
2c:8b:c6:05:16:0c:55:d3:13:2e:83:a4:8b:04:04:e5:d4:d9:
18:94:cd:4e:c9:65:bf:f7:ee:3c:4b:85:66:2b:37:a3:de:89:
05:e1:95:15:83:58:0f:26:09:a5:21:a9:d3:a2:7e:e5:a8:64:
60:6e:2c:d4:7a:67:5f:bc:87:8e:e9:8e:e1:56:21:fe:92:12:
09:67:07:1c:49:73:bc:aa:e5:f3:f1:34:ea:2d:72:90:42:52:
38:77:5b:bc:41:d5:cc:a0:f7:c2:bb:38:41:46:eb:60:43:90:
6b:9b:2a:28:73:d7:ca:95:d0:be:2b:3d:32:65:1f:05:ae:1b:
be:12:2c:5c:3c:f6:f3:39:28:16:6a:e4:c4:94:f2:d5:e5:e3:
41:56:37:a8:66:b2:c0:f0:fc:07:0b:72:0b:20:91:05:60:fa:
bc:31:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:44 2026 by rpki-client