
Error: rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier: m9pNQbr2NYrPqrNu1+TPR3oh7+lfsS4jcsOEjDPdewk=
Subject key identifier: 38:4A:8B:19:0E:3E:6B:24:5C:F6:54:19:1D:57:C2:15:E8:7A:59:75
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer: /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial: 5C428BEE03AF978FC81DAB6E318A6558B7688C34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number: 042F
Signing time: Mon 12 Oct 2026 16:31:13 +0000
Manifest this update: Mon 12 Oct 2026 16:26:13 +0000
Manifest next update: Tue 13 Oct 2026 19:06:13 +0000
Files and hashes: 1: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: hxYiCUKscHy0tWKOXHfFZWMPpYAisdoi2NKaZVJVzgY=)
2: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: z+YShh2i7AQbjwfbZCScAlLVJtG/p4Cg8MeyqUB1gOA=)
3: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: OQmF0Jk90VHvSqF5ofjjQsI1Xy469L2IQZ9fHgYE6JQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 19:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:8b:ee:03:af:97:8f:c8:1d:ab:6e:31:8a:65:58:b7:68:8c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Validity
Not Before: Oct 12 16:26:13 2026 GMT
Not After : Oct 13 19:06:13 2026 GMT
Subject: CN=384A8B190E3E6B245CF654191D57C215E87A5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:a5:3e:d5:fd:c3:3c:ee:25:ef:c0:af:fc:
98:57:5c:0e:74:cc:bf:e4:33:15:26:1b:9f:76:ca:
88:25:aa:ef:9b:d6:6b:5c:e1:f7:83:b7:cc:51:fe:
ca:3f:99:3f:7e:93:28:13:59:3f:f4:89:04:46:42:
de:61:1d:ef:e6:e1:a3:fe:31:b5:55:c3:8d:6a:85:
49:7d:fc:5b:10:f2:f0:4f:88:40:c1:fe:aa:7a:a2:
ab:98:dd:dd:86:c9:b0:12:fe:f0:e5:51:e7:f4:89:
5d:7c:ee:27:4b:b9:bd:ba:56:94:80:57:17:4f:bc:
08:70:2e:14:c6:1e:53:e4:70:fe:6d:87:be:0a:ed:
c4:4a:12:7f:3c:d4:f3:33:bf:8e:f3:cb:46:a7:68:
3f:ad:e3:c0:c4:44:ff:20:49:49:b3:f4:39:26:be:
8d:01:38:72:57:76:b2:f8:4f:8c:8d:ef:fc:cb:2c:
2d:ad:72:56:29:df:66:e3:56:0f:82:b0:c1:1a:38:
35:48:13:ee:1b:87:8e:46:3e:1b:8c:30:25:e6:fa:
5f:63:2a:e3:67:63:f1:6e:a3:2b:34:78:3a:8a:da:
9f:35:07:41:42:95:37:43:b3:00:31:c5:04:44:97:
2a:75:e4:10:2c:03:f0:8a:4a:ba:21:4f:7e:f1:49:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:8B:19:0E:3E:6B:24:5C:F6:54:19:1D:57:C2:15:E8:7A:59:75
X509v3 Authority Key Identifier:
keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5b:43:b8:85:e5:15:80:a3:3a:f4:73:50:b8:48:87:49:75:
18:ad:d3:ac:a0:d8:c7:be:4b:e7:a9:c7:21:b2:99:d7:0a:4b:
bd:7c:fa:19:89:a7:e8:74:f7:22:d2:f7:af:6b:9d:7c:82:e0:
74:9b:34:90:f1:ab:56:92:7d:e4:1a:e5:3d:84:f4:8d:26:eb:
73:5a:fc:4c:a1:ba:89:64:f6:fd:bf:2f:1c:37:7d:87:58:32:
84:64:b4:5f:15:76:8b:1d:ba:c6:f5:83:33:ae:6b:b4:c1:49:
07:b3:1b:54:fe:4a:68:c7:da:51:3c:89:3f:80:4e:57:c4:d6:
ce:21:18:0a:0e:58:a5:cb:3b:e8:ff:53:8b:6d:03:cf:a8:62:
d2:38:fc:c6:2c:48:b8:9b:1a:28:9c:59:fe:83:7d:fe:33:93:
c2:ff:cd:26:bc:2d:0f:1e:72:39:71:02:0e:2f:d7:a9:85:c9:
70:00:2e:56:25:20:81:15:fa:7c:7f:3d:ac:8e:04:fe:21:8b:
e5:ec:65:91:0c:79:1f:22:01:ec:ba:28:1b:5b:6e:95:98:87:
1b:ac:75:02:b1:ec:9e:a6:39:82:32:8e:e3:50:6a:84:53:5b:
9a:59:18:72:80:85:c8:0e:50:4f:18:6b:30:ff:44:14:31:26:
2d:f3:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:45:24 2026 by rpki-client