
Error: rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json)
Hash identifier: cC0e8wlyfKfWurQSvWEk+XI2MFyyHL6rFrEarmDnX0E=
Subject key identifier: F6:FA:A5:84:3A:81:47:9E:DA:35:5F:71:E8:1E:11:73:41:10:EB:1C
Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Certificate serial: 4CD9936C0C00CCC6191BE71809ACA0E379144BF7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
Manifest number: 04E6
Signing time: Wed 04 Nov 2026 08:30:17 +0000
Manifest this update: Wed 04 Nov 2026 08:25:17 +0000
Manifest next update: Thu 05 Nov 2026 11:47:17 +0000
Files and hashes: 1: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: bfT9d9vwD4SbS7VeTXTmr8mjxGnSXYYn2MAyZKiwdm0=)
2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: ckNtBsziZrfWgsauDA2pPoxwGYk+p7ctsc9M35CAGkA=)
3: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: PDPUqmhxJCLRig4T4aqxmVqMCg5H5cX14HZC5lC6lrU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 11:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d9:93:6c:0c:00:cc:c6:19:1b:e7:18:09:ac:a0:e3:79:14:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554
Validity
Not Before: Nov 4 08:25:17 2026 GMT
Not After : Nov 5 11:47:17 2026 GMT
Subject: CN=F6FAA5843A81479EDA355F71E81E11734110EB1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:2b:bd:66:ac:47:32:de:2f:c2:ee:b4:4e:
9d:69:3a:06:08:b3:6c:17:54:a4:39:11:80:df:c8:
85:a4:9b:45:4b:44:1c:9a:10:1d:db:5b:92:49:2b:
4c:97:6e:8f:ad:c4:5c:b9:2c:2e:01:ae:bd:ca:f7:
b1:3f:47:65:c9:19:ff:bb:f5:80:d0:e0:26:fb:56:
83:5b:8a:70:08:98:cf:86:6a:84:3a:a9:e8:1a:fc:
ec:f4:fc:16:1b:a2:97:6f:0a:4c:1a:1b:79:9d:18:
fd:45:28:cc:af:f0:3a:98:13:11:84:f8:ed:54:13:
d8:f4:c8:4f:53:0c:26:b6:5c:98:b3:1d:de:ab:ae:
50:0f:36:18:35:29:63:a2:a9:7d:e4:68:b4:ef:df:
26:b7:42:ea:c1:91:da:69:9a:d4:65:5c:5f:c1:5a:
aa:97:77:72:2c:65:a1:61:51:01:24:08:6a:03:75:
43:ab:00:53:d2:47:66:05:ca:a9:f5:cb:af:cf:ca:
9d:8b:57:01:bd:f4:94:a1:76:31:e9:d2:c7:8f:8e:
af:99:1f:1d:84:cf:dd:aa:77:3d:7e:14:20:03:84:
ed:f5:59:25:7d:ca:26:29:93:88:58:7b:b9:1f:9a:
c1:f3:b0:f0:fa:00:7e:f2:64:31:19:1c:a2:3a:dd:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:A5:84:3A:81:47:9E:DA:35:5F:71:E8:1E:11:73:41:10:EB:1C
X509v3 Authority Key Identifier:
keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:8a:ae:08:d0:5b:77:b7:15:85:e2:92:b0:59:ee:2a:7a:
7a:40:66:a3:87:1e:84:00:0b:1a:24:93:31:ca:8e:48:9e:20:
ca:a0:4a:cf:1a:00:e9:10:5f:57:18:92:86:79:c4:2b:14:9a:
b0:cf:c7:b9:be:11:23:1e:2f:49:e2:da:da:e2:63:9e:f1:ab:
be:a4:f9:56:d3:8c:be:73:bb:7b:6e:dc:15:89:56:bf:80:fb:
60:7c:9f:0c:46:ea:73:22:d8:ec:96:eb:b9:c1:aa:4c:5c:e5:
de:90:ec:5e:7c:c4:95:17:27:96:0e:35:a7:47:9a:54:de:53:
07:b2:be:5e:8a:81:d0:3b:3d:58:65:25:31:b5:ad:08:11:20:
39:a0:e0:71:d5:45:da:65:cb:03:8a:cf:13:67:c5:66:b5:4f:
a5:10:93:69:ae:f5:f3:e1:6a:cf:bf:42:e3:4f:e5:a3:be:37:
1c:8f:8c:b3:11:cc:8a:30:85:fe:b5:82:42:49:3f:ea:f6:a2:
84:d5:9d:5d:78:7d:03:72:19:65:c6:26:ef:af:48:25:6c:b3:
9a:bf:e0:07:77:78:06:b9:15:ef:22:36:8d:0f:c3:3c:e2:f8:
3c:df:59:b5:86:b9:99:1f:e6:db:d0:fb:48:9c:d9:43:35:5e:
7b:20:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:47:45 2026 by rpki-client