
Error: rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
File: E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft (raw, json)
Hash identifier: 6b4L4RPHB3atwTBOxyfYsZQP79fa5cQ9dJrpO/MCp4o=
Subject key identifier: F0:AC:31:23:C7:A4:AE:F2:9E:4D:EA:AD:03:EE:AD:CF:69:03:6A:8C
Authority key identifier: E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49
Certificate issuer: /CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
Certificate serial: 13D29BB6E7A9F0CE2780D06BE3C13136C8F96B24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
Manifest number: 0565
Signing time: Tue 13 Oct 2026 08:50:00 +0000
Manifest this update: Tue 13 Oct 2026 08:45:00 +0000
Manifest next update: Wed 14 Oct 2026 08:50:00 +0000
Files and hashes: 1: E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl (hash: tm+1KgMyi1Gh2mqjWp7iNY+65F6JZVtnblBzi5G81q8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl
rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 08:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d2:9b:b6:e7:a9:f0:ce:27:80:d0:6b:e3:c1:31:36:c8:f9:6b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
Validity
Not Before: Oct 13 08:45:00 2026 GMT
Not After : Oct 20 08:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:76:9f:81:59:0f:ef:39:4b:af:d0:c7:ca:
09:48:7b:82:86:ef:6f:ac:02:af:6c:09:b9:31:ac:
93:b4:d0:de:dc:63:ab:90:50:44:15:c8:48:e3:87:
5a:9d:24:da:8d:f5:43:2c:bf:8c:a4:e2:8f:06:9b:
5e:09:41:ae:6f:03:aa:9a:14:eb:44:d7:68:17:0c:
d8:47:6e:17:db:fc:82:76:83:1e:46:29:ab:a1:9b:
49:3f:ba:f3:24:6d:7a:1e:fa:40:5f:63:ca:51:f5:
67:49:a1:7c:02:32:c7:a5:ea:11:83:60:e3:ee:59:
35:ad:e3:5c:e4:8f:3e:d9:6c:30:15:b2:6a:1d:66:
24:50:93:67:fb:58:f7:58:87:3b:f6:06:45:c1:3d:
ac:bd:90:47:f0:c1:45:e9:4b:74:06:a0:65:c6:a2:
91:bc:be:ae:16:ea:58:9d:56:ba:84:60:03:52:f9:
98:6e:6a:b2:03:55:b3:cb:f2:83:c4:f9:b7:7c:27:
b2:c6:33:77:30:56:c4:e3:92:f6:27:29:49:28:d6:
32:f7:35:ea:fc:b6:50:ba:80:f1:e6:56:57:c7:79:
bc:ba:fc:19:7d:da:17:2c:61:14:1f:db:e3:d0:7e:
1d:20:e9:89:5b:4d:9e:1d:55:85:b4:64:ff:d4:6d:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:31:23:C7:A4:AE:F2:9E:4D:EA:AD:03:EE:AD:CF:69:03:6A:8C
X509v3 Authority Key Identifier:
keyid:E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3e:9d:59:58:93:09:2a:76:e1:2a:a5:92:52:c2:ab:c9:22:
59:6d:2e:26:3a:d0:6c:8e:dc:1b:33:86:a1:cc:6d:10:6b:46:
c6:96:de:6b:39:f0:e9:33:0f:6b:8a:b7:3a:83:a1:80:58:d6:
74:30:57:0e:a1:b6:07:e4:fc:9b:2a:e9:7e:11:a8:5f:4f:6c:
16:15:32:9b:84:86:2d:f8:32:5e:e7:73:43:04:70:39:81:b7:
e8:fa:1a:a1:5b:4a:0c:9a:a3:45:dc:94:f1:85:84:5c:ec:c0:
67:df:7f:b9:03:7f:5b:7f:fa:fd:4b:da:48:38:bf:22:1d:51:
85:92:9a:4a:1a:90:54:78:2d:9f:7c:84:a5:10:16:ea:72:5c:
2e:e2:d1:77:eb:01:98:05:80:3a:38:d6:27:e2:5a:f2:65:c3:
09:05:ed:36:c5:07:14:2e:10:3e:ac:68:62:d7:d1:6c:a6:4e:
75:5a:70:bb:06:c2:ac:f3:38:c0:a8:f9:05:c5:08:5c:17:3f:
76:f9:0d:2f:b0:36:60:cf:d3:4a:8d:9e:74:1e:33:c6:1c:6a:
5f:83:ba:72:a0:20:2f:3a:12:bb:aa:a3:2b:c4:9c:20:2c:37:
1e:33:dc:71:05:96:c9:47:0d:46:4f:76:ab:20:8c:3c:56:b8:
32:c9:77:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:43:46 2026 by rpki-client