
Error: rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft
File: 1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft (raw, json)
Hash identifier: ZrW8AH549W6L1uMUndeu+9IGxLkPb3ZCJEevdzbBY+Y=
Subject key identifier: AB:FE:28:FF:72:CC:1E:25:EB:53:0C:C4:C5:E8:04:5E:2A:90:81:B5
Authority key identifier: 1E:DE:B8:62:19:78:4F:12:E4:BC:D4:D1:AE:98:F9:1E:49:0B:52:8E
Certificate issuer: /CN=1EDEB86219784F12E4BCD4D1AE98F91E490B528E
Certificate serial: 3040B24611D2BA06C86F9DB32406B52B1396F060
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft
Manifest number: 0445
Signing time: Mon 12 Oct 2026 22:20:03 +0000
Manifest this update: Mon 12 Oct 2026 22:15:03 +0000
Manifest next update: Tue 13 Oct 2026 23:08:03 +0000
Files and hashes: 1: 323830343a376639633a383030303a3a2f33332d3333203d3e20323731363938.roa (hash: roYfz36fcdCxq2dZbwYSSyNVPxAWL3ssgvJJ7Zfpv5c=)
2: 3230312e3232302e32362e302f32342d3234203d3e20323731363938.roa (hash: klvlcJKd2lBuV7fltSQv1oTUadRmJPevV6IN1oECG8o=)
3: 1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl (hash: z+8p5IVdhQ6sche0V86o8g7lkDC75mTkIzh/XyKdiXE=)
4: 323830343a376639633a3a2f33322d3332203d3e20323731363938.roa (hash: 56RmlgDQxH5XbgRhv0nE/VBHLUVUWSpZg7oGL5j0/rk=)
5: 323830343a376639633a3a2f33332d3333203d3e20323731363938.roa (hash: Ktt0o+mHwR7aZIeitdZhy15caOfkOdXua82/jWX1Gys=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl
rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 23:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:40:b2:46:11:d2:ba:06:c8:6f:9d:b3:24:06:b5:2b:13:96:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EDEB86219784F12E4BCD4D1AE98F91E490B528E
Validity
Not Before: Oct 12 22:15:03 2026 GMT
Not After : Oct 13 23:08:03 2026 GMT
Subject: CN=ABFE28FF72CC1E25EB530CC4C5E8045E2A9081B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:bc:f5:ff:d3:cc:f4:da:ba:d9:65:b5:fc:
8c:0c:16:ad:1b:49:46:e8:0b:4f:48:f9:e0:e4:73:
1a:dc:16:ee:fd:db:14:69:1c:fe:9d:45:9f:38:d2:
1f:53:ce:f4:6e:10:d9:90:9c:41:41:7a:7f:e3:1c:
00:c3:3d:e6:d3:0c:b5:11:c7:61:5e:a4:48:16:9e:
0e:4f:e2:25:0d:71:0c:0f:3f:3e:a0:18:88:03:8f:
e6:3d:76:53:fe:15:c0:e0:59:8e:e8:63:10:f1:e9:
e2:0b:39:7b:1d:54:05:9d:4d:c5:81:c4:7a:53:80:
47:8d:9c:d2:3b:e8:95:7b:d9:b4:6f:bd:97:59:65:
e9:8d:91:71:40:a6:e0:39:8b:f3:04:69:32:f0:44:
1e:c8:f7:e0:3b:d6:a6:d8:68:0f:e3:95:5d:f7:ad:
15:ba:7c:01:7c:b0:84:f9:99:23:cc:e4:19:3f:9f:
ae:0c:e8:60:36:c5:4f:02:b5:e5:9e:34:07:89:fe:
f1:01:c1:a8:a4:d1:2d:ca:e4:cd:0a:e6:e5:5f:43:
d8:80:71:f0:e6:85:01:f6:ea:6a:57:90:4e:a4:af:
c4:3c:d3:97:e7:c0:86:15:ac:2d:4f:a1:33:3f:46:
30:03:e1:a5:77:39:11:d4:54:28:48:cf:2c:84:c9:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:28:FF:72:CC:1E:25:EB:53:0C:C4:C5:E8:04:5E:2A:90:81:B5
X509v3 Authority Key Identifier:
keyid:1E:DE:B8:62:19:78:4F:12:E4:BC:D4:D1:AE:98:F9:1E:49:0B:52:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQnN6CBcE6dK2mfdsTbYnm9VDFP43XUurNxEeM9f83tD/0/1EDEB86219784F12E4BCD4D1AE98F91E490B528E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:b2:6c:3a:06:dc:bb:b4:b0:bb:83:ae:e3:12:b9:4f:72:
16:18:f2:2e:d9:63:e0:82:93:72:2a:25:49:d0:b7:a9:dd:b2:
1b:b7:6b:4f:24:e0:e5:08:e8:20:a8:f4:28:73:c0:74:6a:dd:
30:14:57:7e:b6:c3:71:52:0e:24:20:ae:c3:45:28:d8:02:88:
e9:bc:7d:dd:c8:9c:a5:7f:83:80:be:5b:bb:cd:a1:76:62:7c:
37:42:d6:c4:9e:72:93:90:70:64:3e:7f:84:a9:8c:9c:45:ba:
2f:25:c3:51:4f:60:72:a0:1c:7c:32:fb:e8:e9:ac:1a:76:11:
57:41:95:fa:20:be:79:53:10:5c:b3:a4:e0:b2:b5:00:55:ba:
f6:81:d6:23:f6:8e:7c:c3:14:fb:2c:4a:8f:d9:ae:3b:fa:04:
0b:0b:62:6c:71:c9:27:bb:70:c3:91:21:96:d8:b1:d5:47:7f:
ad:48:66:e9:96:35:22:3e:81:cc:59:ce:2d:c5:e6:0c:1b:32:
61:b7:1b:ac:3a:0a:c2:30:1f:aa:72:8d:31:94:f8:fe:76:f3:
2b:b6:1d:1a:9b:5f:79:5f:42:12:40:b7:7d:70:44:25:87:00:
b7:dd:6f:13:82:f0:9e:77:be:33:2b:9e:fa:fe:5c:74:55:04:
f7:fa:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:21:48 2026 by rpki-client