
Error: rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
File: 1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft (raw, json)
Hash identifier: qaSr621gmZJRnDWQ5LGqTq+HWtX+zYljJTCyfDw98SI=
Subject key identifier: C3:56:44:AF:25:4C:C3:A4:2B:E0:31:45:BD:C3:72:46:CB:43:D0:B7
Authority key identifier: 13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
Certificate issuer: /CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Certificate serial: 2C336E4DE7E393535D6E134B3C83D45C23C6023F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
Manifest number: 0471
Signing time: Fri 16 Oct 2026 13:07:51 +0000
Manifest this update: Fri 16 Oct 2026 13:02:51 +0000
Manifest next update: Sat 17 Oct 2026 17:00:51 +0000
Files and hashes: 1: 323830343a386335343a3a2f33322d3438203d3e20323733373936.roa (hash: Bsm10JCjVdYJiQ/MObFoO8rQCpvCL6AE4Ycj3RpQ3RQ=)
2: 1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl (hash: jowo+EpeMQ1q6yiEw2JKwgNYa0CbIPWTOpcsorTPfCo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:33:6e:4d:e7:e3:93:53:5d:6e:13:4b:3c:83:d4:5c:23:c6:02:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Validity
Not Before: Oct 16 13:02:51 2026 GMT
Not After : Oct 17 17:00:51 2026 GMT
Subject: CN=C35644AF254CC3A42BE03145BDC37246CB43D0B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:97:f3:92:a6:a8:54:d6:9c:28:3d:cb:d7:
3d:93:be:83:16:60:f3:60:fe:bd:c4:b0:31:11:90:
78:b0:77:16:77:b9:67:2a:de:42:c9:36:e3:52:51:
63:fc:2b:e4:5f:c4:22:3d:20:a6:e5:22:e9:fb:a5:
69:89:0b:59:f2:88:4c:c5:16:aa:fc:3e:7b:2b:5b:
9b:3a:94:ad:c9:87:83:ee:54:bb:62:65:c4:a7:34:
f4:af:ec:3c:15:28:c7:4c:9b:06:1b:09:4f:07:f8:
8b:ec:80:32:91:5e:90:44:04:b9:ee:c4:cb:17:c6:
15:8c:5c:d0:05:ad:98:21:a7:a7:2e:a5:32:4f:02:
80:18:fe:3a:a5:c5:07:41:e9:b7:05:d0:d7:34:89:
66:4d:46:14:a0:50:25:78:aa:6d:ab:25:61:e9:2e:
ba:2c:1e:2d:2a:73:cf:68:02:59:3e:82:a9:53:c0:
ef:b2:96:94:2d:1d:5d:a2:c8:85:01:d3:1f:37:86:
5d:1e:04:c1:01:7f:db:a7:ef:5b:cb:ee:64:a8:8b:
a5:8b:03:25:79:2d:c9:92:c5:e7:9d:29:15:69:1d:
b7:06:0c:ec:b1:a9:60:c3:a6:c3:11:7f:94:ed:1f:
29:56:99:d6:4b:38:a0:9d:45:87:c7:e2:29:2e:dc:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:44:AF:25:4C:C3:A4:2B:E0:31:45:BD:C3:72:46:CB:43:D0:B7
X509v3 Authority Key Identifier:
keyid:13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:cd:80:8d:84:fe:90:d8:ca:41:f6:e7:34:6e:f1:0f:8b:7f:
92:a0:1f:fd:dd:b4:64:f7:fa:a4:46:c0:91:10:64:f9:0c:80:
ce:e2:9a:a5:f5:d1:9a:ef:c8:75:67:77:80:aa:2c:be:34:a9:
15:12:c2:7c:5d:56:02:4e:db:0f:95:8f:b7:bc:d6:c4:24:ea:
41:94:b0:34:61:97:e5:e9:47:e0:52:39:48:29:bf:7b:8b:60:
47:1c:ee:db:63:14:89:a6:87:93:0c:f8:fa:68:4e:98:c8:dc:
87:ac:67:31:e3:75:cb:54:e7:a0:5f:9e:5b:43:38:cc:82:77:
97:de:2e:72:d0:38:c8:3a:7d:a2:05:eb:28:5f:c8:ef:97:39:
91:33:8d:f7:98:84:e8:e4:67:4f:88:36:ea:e4:74:1c:de:e7:
39:99:88:57:57:b0:f2:47:d4:c7:f2:7a:14:e7:f6:ed:aa:92:
39:88:0b:b2:c7:01:8d:fa:ef:77:f8:b8:91:d7:9c:3b:32:6f:
84:a2:a2:53:a7:2a:4f:61:c6:38:1f:22:74:e3:a1:e0:e0:92:
9c:f3:2b:ae:13:59:2f:66:2b:6c:1b:a8:82:af:4e:e4:70:83:
d0:22:41:f2:b9:82:0d:03:ec:df:3c:90:da:a4:51:e3:a7:d5:
c5:6b:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:33:18 2026 by rpki-client