
Error: rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
File: 144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft (raw, json)
Hash identifier: SmlNVtuIqA6ZmoX9TFg0sopuLSrQq/jwImsqLG3SSv4=
Subject key identifier: FB:0F:38:76:AE:C5:9D:CC:E2:14:29:0C:B7:13:16:F5:B3:9A:83:47
Authority key identifier: 14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35
Certificate issuer: /CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
Certificate serial: 5F2F9A6D8FEDCAF4A19952705ABBCFFC97EBB1F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
Manifest number: 056E
Signing time: Fri 16 Oct 2026 05:50:00 +0000
Manifest this update: Fri 16 Oct 2026 05:45:00 +0000
Manifest next update: Sat 17 Oct 2026 05:50:00 +0000
Files and hashes: 1: 144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl (hash: ch5YeeSe4SVdcPtnD0w9OvUvvydJwTlz56oi2V5J1So=)
2: 3137392e3130392e39362e302f32322d3234203d3e20323730373533.roa (hash: lZGMkN3GQcud4OEBakx0qvPNgdDqc8vzNYILh6S2/FI=)
3: 323830343a373065303a3a2f33322d3335203d3e20323730373533.roa (hash: mdXg2ljL7B7eMD6LMsrmxi68qWORXWuB34tIyxojtfw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl
rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 05:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2f:9a:6d:8f:ed:ca:f4:a1:99:52:70:5a:bb:cf:fc:97:eb:b1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144D8BA24CABA5C71D99AA708E69E7D4F9612435
Validity
Not Before: Oct 16 05:45:00 2026 GMT
Not After : Oct 17 05:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:22:48:ee:a7:61:01:a6:0b:e6:ef:dd:69:
aa:33:38:04:2c:ab:bd:23:30:22:91:95:82:3f:be:
02:05:69:05:0a:d6:be:ce:d8:b1:02:bd:57:fe:41:
cb:d3:d2:58:e5:d4:a5:5a:29:c2:c2:48:4c:3b:8a:
5f:42:93:c9:16:ca:f5:8a:19:b0:86:74:10:7b:84:
a0:59:10:af:3e:1c:ac:7f:d6:fd:8b:d3:2b:03:ca:
f4:5a:86:f2:b6:ae:7c:d1:5a:a9:75:f7:c6:2f:d8:
2f:f6:ac:dd:09:2e:19:46:48:42:6f:55:a2:58:cd:
0b:66:f5:3b:d5:6f:3a:59:8e:08:0a:35:8e:8c:6e:
33:51:2c:13:97:e0:80:bb:d1:fb:df:0d:a2:70:f9:
cb:5c:df:bd:42:9d:41:88:9c:3e:86:da:be:75:c3:
17:20:45:ee:f9:2e:a4:fb:cc:aa:f6:31:4d:9b:e5:
1c:11:e0:4d:5d:c0:a5:5a:04:e9:44:05:35:71:64:
75:8c:c4:91:2b:a4:11:78:c6:56:4d:9b:87:85:1e:
25:28:5f:93:26:ab:ad:90:af:3b:fa:17:32:89:40:
21:95:d2:8a:10:86:56:cd:e5:be:38:7b:d7:d6:c1:
8c:ab:95:18:4a:c7:92:82:30:63:9e:f4:53:c9:27:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:38:76:AE:C5:9D:CC:E2:14:29:0C:B7:13:16:F5:B3:9A:83:47
X509v3 Authority Key Identifier:
keyid:14:4D:8B:A2:4C:AB:A5:C7:1D:99:AA:70:8E:69:E7:D4:F9:61:24:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/1/144D8BA24CABA5C71D99AA708E69E7D4F9612435.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4e:9a:54:9e:50:b7:f8:ca:a6:75:13:0a:68:fd:22:35:3e:
8e:39:a7:31:97:0f:97:c4:b3:63:e6:70:66:b9:f1:8a:f2:6d:
35:0d:88:68:6f:cf:54:76:44:54:02:e5:78:8c:9c:7c:6e:70:
85:ea:53:fc:7c:f7:15:24:7b:38:35:a6:ff:a7:1f:42:42:c0:
7a:0c:c7:7c:47:df:c2:92:0a:de:3c:ff:15:09:84:74:85:6b:
b5:dc:e7:f4:ff:6b:16:56:25:df:ee:25:c0:3d:8d:48:2a:a8:
dd:11:83:78:df:ad:d4:d9:96:44:08:ad:b3:3b:b8:f4:08:de:
b2:5f:86:f6:fe:d8:16:d0:8f:13:ab:7b:41:59:c2:4c:18:7d:
bf:e8:b5:ab:86:b8:72:93:17:bb:cf:2d:fd:c1:31:52:bb:24:
d7:b0:18:f1:89:07:34:02:de:ec:52:d0:e5:90:6e:c6:02:e5:
ae:c8:d1:aa:2c:09:e1:9b:88:78:bd:cc:05:33:bf:a1:8d:ee:
0a:d0:dd:2e:6b:d6:b0:36:40:59:c6:18:9c:e5:65:cf:c4:6f:
11:6b:a7:d6:8a:73:f9:f1:cd:c8:21:c7:67:fa:12:09:a5:f5:
53:f7:2b:ef:52:02:d9:c4:35:f7:f7:87:fb:19:3b:90:3e:ff:
0c:b4:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:52:19 2026 by rpki-client