
Error: rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
File: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft (raw, json)
Hash identifier: e9D5x5q0LwK2/vAHKKk2GUYQO5vfUn0hROVCp44S8/0=
Subject key identifier: F4:FA:01:F1:2A:7C:D2:5D:45:17:9E:E2:F8:AE:8B:CC:6B:D3:90:A8
Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
Certificate issuer: /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Certificate serial: 152E8E7934F00B2BC111049701A68076BE52661E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
Manifest number: 01DE
Signing time: Thu 29 Oct 2026 15:42:23 +0000
Manifest this update: Thu 29 Oct 2026 15:37:23 +0000
Manifest next update: Fri 30 Oct 2026 15:49:23 +0000
Files and hashes: 1: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl (hash: hJMYXRI883dDseljcCSmuQAiJntgomkVQP7YOwofnAY=)
2: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (hash: bK7PGcHgX1HaW/F1Gj0KQEL/uAEuTpfC9DPIZsI1xVE=)
3: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (hash: ikLxmZRq9GA7l9gUwQ8KsYLPiZHYK560PCzWPT+AsQc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 15:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2e:8e:79:34:f0:0b:2b:c1:11:04:97:01:a6:80:76:be:52:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Validity
Not Before: Oct 29 15:37:23 2026 GMT
Not After : Oct 30 15:49:23 2026 GMT
Subject: CN=F4FA01F12A7CD25D45179EE2F8AE8BCC6BD390A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:c8:eb:15:74:7a:49:45:d3:69:d9:de:7c:
1f:3c:d9:90:d7:37:0e:99:47:ef:e9:d6:94:32:06:
7f:27:ad:7a:3a:da:c1:20:70:01:21:07:84:31:b9:
b4:a0:03:3f:82:f0:47:f2:0d:51:93:92:99:6e:d5:
5b:a7:6d:69:7b:ff:8f:d2:f4:ce:71:9d:2e:5a:e5:
8a:8e:9b:69:8b:26:bc:a3:27:b9:57:8c:13:f4:70:
23:9e:07:30:ef:0a:e7:ce:0b:8c:2b:67:62:ad:67:
58:86:80:03:cd:48:67:c1:20:a0:49:90:59:68:0e:
f4:a5:cd:6c:80:4d:88:46:90:a5:5a:c6:d2:9a:ab:
1c:4e:c8:0a:23:85:76:1f:4e:61:08:4f:e1:7a:ed:
41:ea:3a:ac:d4:a8:86:c1:c4:2e:3a:9d:2c:92:20:
a6:79:1b:a8:1a:7e:37:05:8f:6d:12:d2:07:d5:de:
8d:74:ae:f1:94:ac:8a:a2:86:4b:a0:70:26:57:e9:
93:83:2a:c2:1f:e5:4b:72:95:28:2b:14:92:b4:27:
d4:d6:30:46:14:c8:1f:02:5f:d9:bb:b1:ee:0f:c5:
37:97:ed:5f:45:f0:e4:a2:b1:1c:1b:45:00:3c:08:
40:e8:6e:9d:d2:37:a5:b0:72:11:b4:ac:60:23:e4:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:01:F1:2A:7C:D2:5D:45:17:9E:E2:F8:AE:8B:CC:6B:D3:90:A8
X509v3 Authority Key Identifier:
keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:27:c4:75:60:8d:5c:48:ea:58:e6:73:c0:4f:4f:65:56:
29:5b:c3:f0:23:b0:64:f7:0d:80:57:b3:6f:b4:bc:f2:da:46:
b2:75:6d:ef:1a:9c:8b:a9:17:1b:a1:18:f6:56:15:93:1f:79:
b6:59:f3:30:fb:cc:0d:92:04:8c:84:d1:64:87:b0:90:7e:09:
f7:95:4f:ed:aa:21:6f:51:7f:7a:34:80:dd:46:f2:c4:64:50:
20:e0:2b:11:90:63:75:c0:19:94:b4:19:e8:0e:eb:79:c8:90:
6c:c0:ca:ab:63:ad:3c:b3:d3:63:55:4b:99:d3:b5:38:20:04:
99:07:04:c3:90:2e:90:ff:fb:a4:03:f8:bd:2f:bc:88:13:f0:
05:e6:2d:5d:7b:5c:70:13:c7:a5:c7:14:21:ff:e3:18:77:a5:
26:58:78:21:9c:98:47:f9:33:f6:f7:ea:b7:e7:42:46:2a:6b:
06:18:52:48:a0:f1:7c:00:56:e8:83:2c:c5:bc:a7:5c:f5:2a:
ae:f6:ca:3d:3e:2d:4a:a3:0b:0a:c2:74:51:39:dc:d6:ab:c0:
c2:d8:9c:9d:57:14:e5:10:eb:2c:75:a8:57:74:13:b7:5b:b4:
f6:e0:b0:ff:75:89:fa:c4:f1:98:a2:f2:dc:e6:11:ac:ce:21:
9c:d2:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:06:28 2026 by rpki-client