
Error: rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier: fs62PXQ60vA/rxTL9k2Zs6hVLyYjx4Lgkqf8r8FoAic=
Subject key identifier: 62:1D:9A:44:35:FA:41:72:FA:58:98:DF:68:4C:42:16:30:6F:0E:AC
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial: 6BB560B8A596F9CFA03C92C682CCF859E7111724
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number: 04C8
Signing time: Mon 12 Oct 2026 23:00:04 +0000
Manifest this update: Mon 12 Oct 2026 22:55:04 +0000
Manifest next update: Wed 14 Oct 2026 02:13:04 +0000
Files and hashes: 1: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
2: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
3: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: tM54tWn8lu068SXqXPobG/emD7/JIOSthzhlZYLdp/c=)
5: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
6: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
7: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
8: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 02:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b5:60:b8:a5:96:f9:cf:a0:3c:92:c6:82:cc:f8:59:e7:11:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Validity
Not Before: Oct 12 22:55:04 2026 GMT
Not After : Oct 14 02:13:04 2026 GMT
Subject: CN=621D9A4435FA4172FA5898DF684C4216306F0EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:b3:a4:4e:f9:9e:7a:55:05:47:b2:ec:57:
49:13:28:dc:15:22:e1:3d:78:cc:33:ad:64:cd:62:
4f:59:62:40:07:08:5a:ea:1c:a5:50:a6:95:a3:39:
fd:4c:36:cd:91:7c:de:b7:31:0e:e4:3b:ec:bf:62:
59:3c:f3:2b:ee:38:bc:b3:70:f3:a9:63:ed:55:64:
60:31:f7:36:fc:f1:c8:d9:76:59:30:4a:eb:13:e3:
7e:23:ef:54:3f:d8:17:1a:aa:d3:3f:ec:1d:f5:b3:
de:93:4e:dc:ab:ac:e1:80:a6:8f:5e:ee:65:c1:00:
7b:c4:6c:53:5d:0e:af:fb:6a:4f:6a:e5:af:b2:64:
ce:e3:ad:d3:9e:6a:cd:8e:52:19:57:3c:00:bc:83:
b7:f2:0e:b4:a6:f4:3d:c4:b7:3e:d0:bd:2b:43:f7:
43:87:27:92:b9:f0:db:10:d2:bc:a5:7b:19:c3:18:
10:2b:40:e7:8e:1e:9d:f6:cc:48:a8:12:93:bf:5c:
b7:ed:29:35:e0:5a:b1:5c:13:04:c8:ea:40:b6:89:
1c:07:1e:21:81:74:14:f2:7e:86:81:89:db:b9:f6:
72:03:c5:4d:88:26:0d:f4:ac:9b:32:68:70:f6:27:
32:40:06:c8:88:b5:0b:a6:4e:e0:c5:37:37:98:d1:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:9A:44:35:FA:41:72:FA:58:98:DF:68:4C:42:16:30:6F:0E:AC
X509v3 Authority Key Identifier:
keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a2:08:67:84:5a:02:7a:66:56:98:63:d9:5b:3d:ef:ef:b5:
1c:a7:6d:c7:93:60:41:0a:79:12:bc:b2:db:1b:1c:a2:68:d5:
6b:34:82:e7:04:55:83:7d:4f:dd:58:6a:7a:e1:a0:52:00:83:
b9:53:a2:fc:30:ba:b0:fa:6b:21:76:d3:07:a1:d5:b8:80:e6:
94:d1:38:df:c4:58:bd:95:fd:3e:c6:ee:7d:34:f4:35:66:84:
07:58:6a:23:1a:68:f8:53:20:f2:40:3b:32:b3:b2:01:24:18:
85:52:ab:ca:ea:ad:d6:db:42:c1:db:97:0b:c9:fb:fa:f4:9c:
b8:00:16:a1:88:e5:20:93:5c:47:3d:bd:9d:7c:49:4f:6a:fc:
e7:0c:10:8f:88:35:a1:7f:28:45:a3:d4:df:58:3e:23:2c:54:
9a:cc:35:b2:11:9f:27:96:6a:0f:5c:91:e0:20:fd:13:99:e0:
f0:e1:a1:5c:8f:aa:e7:79:84:c4:02:31:92:36:04:d4:a8:ed:
34:1c:2d:15:9a:72:40:1d:f2:6d:44:df:5d:ac:e5:05:31:88:
13:49:21:e2:23:14:ac:80:71:e8:56:b7:01:cc:83:f0:c2:a3:
8f:1d:79:b7:84:a2:a4:50:56:f5:7f:a4:a7:1d:60:b8:5d:0e:
6c:d3:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:16:46 2026 by rpki-client