
Error: rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
File: 80F95120380D97B8617C6C767FCF3931BDE7880D.mft (raw, json)
Hash identifier: pljSW2zkU7JAWoHjtaK51DruwGNGvxBXh3g4jZNXfws=
Subject key identifier: 31:3E:AE:7A:44:0A:9F:DF:0F:DA:9D:85:37:A4:5C:BD:71:D0:22:CA
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Certificate issuer: /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial: 471C7CFA02F693A9CB740C5F371DF93FC91B2739
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
Manifest number: 02BC
Signing time: Sat 24 Oct 2026 09:26:54 +0000
Manifest this update: Sat 24 Oct 2026 09:21:54 +0000
Manifest next update: Sun 25 Oct 2026 11:57:54 +0000
Files and hashes: 1: 323830343a6131343a3a2f33322d3438203d3e20323632333432.roa (hash: ZsDX/JVVJzF78LH1ET0fLiD8sQkMpaijlG1KV808nxY=)
2: 3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa (hash: q5bvggs2dhRO6DH9BOeLNE+Tq/II7ZsW8nDCIOp/6sQ=)
3: 80F95120380D97B8617C6C767FCF3931BDE7880D.crl (hash: 24H8wWsGJ9gDqyMDw8VS4NkcqgCwvdAGY2dgLmUch+c=)
4: 3138362e3232372e3231362e302f32312d3234203d3e20323632333432.roa (hash: CI6Fkz132oCpsoXTY2PIjjvikyU84J+a/bDq2H8Qdiw=)
5: 3137372e3132352e3131322e302f32312d3234203d3e20323632333432.roa (hash: FnUXfoxuQzgLAk2AQ/KcOH9X5cDEFs2D1aFmGrbNPto=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl
rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Oct 2026 11:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1c:7c:fa:02:f6:93:a9:cb:74:0c:5f:37:1d:f9:3f:c9:1b:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Validity
Not Before: Oct 24 09:21:54 2026 GMT
Not After : Oct 25 11:57:54 2026 GMT
Subject: CN=313EAE7A440A9FDF0FDA9D8537A45CBD71D022CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:25:02:cb:18:8e:7c:73:3d:68:50:46:97:
4d:9f:a0:e5:c3:03:ec:cd:1f:02:0f:bf:8a:90:63:
cc:4c:ba:be:9e:10:6d:66:91:8f:f5:8d:df:4b:51:
86:90:44:b9:5e:04:54:70:85:57:ee:7b:6f:ef:55:
98:1c:8f:d8:e9:a7:06:17:54:21:7c:95:83:c8:fb:
92:1e:0e:50:0f:a1:5a:3b:79:da:dc:b0:b5:ad:ed:
43:a8:82:d2:fb:c2:8d:bd:a9:7a:05:33:a6:17:1a:
27:a3:be:fe:c3:ec:a8:10:5a:82:cf:92:5e:b3:12:
58:ac:2a:7c:83:67:89:f5:05:d3:4e:bc:c0:f2:37:
e9:c8:41:c2:f9:da:cc:51:ed:c2:39:d1:a6:c5:4d:
16:05:72:e3:d1:8c:93:b7:76:16:b2:e7:e8:55:34:
cc:5c:47:c3:2c:74:30:31:ca:f2:60:98:9f:78:3b:
24:a4:1c:11:2a:f3:e1:4d:da:29:b7:0a:66:68:6f:
95:25:73:96:64:e3:c6:bf:ab:d8:09:c8:07:c9:0e:
08:4e:31:ef:6b:f6:e9:89:78:fe:ae:de:e3:69:58:
7a:2c:53:c1:75:7b:d6:21:88:5f:97:33:23:49:1e:
e5:b6:48:b5:f4:e0:51:8c:b4:8d:ba:dd:f0:09:9b:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:AE:7A:44:0A:9F:DF:0F:DA:9D:85:37:A4:5C:BD:71:D0:22:CA
X509v3 Authority Key Identifier:
keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:f0:2a:02:d4:92:63:d1:7e:26:14:d6:38:47:f9:41:88:
7d:e9:86:e2:1d:75:76:01:96:a5:06:f5:0e:5f:37:c9:a0:02:
b9:0f:fc:e1:a0:6d:fb:b7:b8:f0:3d:52:82:e9:3f:4e:7e:01:
fb:3d:ff:eb:78:e4:a0:77:c9:38:68:8b:96:a0:92:b0:85:ed:
2e:92:dd:9a:83:89:db:88:3c:7f:6b:49:e7:10:31:4b:7a:76:
49:52:ed:a2:85:02:df:19:53:da:ed:a9:91:fd:01:31:cd:7b:
d5:40:4a:eb:9d:d9:f5:c2:81:1e:6b:f0:94:3a:5a:a8:73:a1:
cc:0c:12:81:22:39:51:c7:3a:e5:1c:81:7f:9c:b3:dd:e0:9b:
d7:2b:17:d0:33:02:a2:f2:d5:53:29:07:57:db:cf:79:36:d6:
2d:ef:d7:57:aa:af:74:13:df:b7:b3:14:01:bb:c7:43:8c:0b:
5a:bb:14:ea:82:57:b8:b3:5f:6a:d4:ff:58:b2:c3:5d:d5:d1:
77:01:4a:46:70:8d:b5:8f:b4:0b:58:39:2a:0c:bd:bd:e2:42:
be:f8:0f:f6:27:db:62:7c:99:ee:3c:5c:6d:8a:27:7d:e2:65:
f7:10:67:bd:a2:dc:7b:e9:93:15:6b:a3:f7:a5:5e:30:67:24:
e1:ae:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:59:23 2026 by rpki-client