
Error: rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
File: B7124651D19D132543E991B7A74DD4A680768A09.mft (raw, json)
Hash identifier: 5FSHtmTzqfF57sIDDCMkyxjWx+kGdlAl2Nk5QqJDruA=
Subject key identifier: 3E:D2:B0:E8:BE:AC:92:DF:BD:26:CE:36:F7:F9:93:41:C6:AB:33:E8
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Certificate issuer: /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial: 44CC413F2B7032D38C08934D0B52FC6A2AB585C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access: rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
Manifest number: 04D0
Signing time: Wed 14 Oct 2026 01:10:00 +0000
Manifest this update: Wed 14 Oct 2026 01:05:00 +0000
Manifest next update: Thu 15 Oct 2026 02:08:00 +0000
Files and hashes: 1: 323830343a353965343a3a2f33322d3332203d3e20323638373332.roa (hash: dzRkocFWpg79BRU4lSJ3Z7CeYkT9o3MpSVTED01BMD8=)
2: 323830343a353965343a343030303a3a2f33342d3334203d3e20323638373332.roa (hash: 5t/9TN7U75QBx+46tdB/Bw4kdevnwN/5UdPBrfMRkMc=)
3: 323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa (hash: zrTx0+82w2IK/M34JpH5XlY6tGQZ0Xp5vwBpPrikf3o=)
4: 34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa (hash: PZbZKTydNsvvqZPzmbAIOq9owBWGBCdRF/cSxeVg2vk=)
5: 34352e3137312e3231392e302f32342d3234203d3e20323638373332.roa (hash: CxlYO8DDJRxGyknCeFkfjJuvlxhsx1boc9aXJbWCMjM=)
6: 323830343a353965343a3a2f33342d3334203d3e20323638373332.roa (hash: AwOziRvNapyJaUI9tddmNFzVt2yG//+sCwWdpz2GOlE=)
7: 323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa (hash: I+YKqgDv9olbwrg9hW0tmOFPUX98AgcUkQKwbp8N/Lw=)
8: 323830343a353965343a3a2f33332d3333203d3e20323638373332.roa (hash: 7embd2q0RFBWBWgogJvnc2/YLtLmokPF6APKUfSnaw8=)
9: 34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa (hash: YDaeAqPh0+r2ENDuwjNML36V6iT+TBpZainy4Plt+O4=)
10: B7124651D19D132543E991B7A74DD4A680768A09.crl (hash: lsMJywFw1W7neT4ZR41OD3AtpWhXROMe23b1JZv/XlU=)
11: 34352e3137312e3231362e302f32322d3232203d3e20323638373332.roa (hash: Y7Tc9PF8yMlmtPARgbLYKwPkou7+BlT8LdOP8kpMo3c=)
12: 323830343a353965343a633030303a3a2f33342d3334203d3e20323638373332.roa (hash: nHzID8MTK2Nj18I6m10HRVunOpfQJRr2kpOXB2D20jo=)
13: 34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa (hash: S1WWSQX23Kt1780hC51KmsryhJf2fv5+ZaJw5nHgboY=)
14: 34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa (hash: Rl7nkjHjEfDFmYESarlbrtegCZcxQUFUGHwFt3wpPWA=)
15: 34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa (hash: wrmUVZkwVHoJ8cacBZtzsWMIryRO58McfRNhE1ng9UE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 02:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:cc:41:3f:2b:70:32:d3:8c:08:93:4d:0b:52:fc:6a:2a:b5:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
Validity
Not Before: Oct 14 01:05:00 2026 GMT
Not After : Oct 15 02:08:00 2026 GMT
Subject: CN=3ED2B0E8BEAC92DFBD26CE36F7F99341C6AB33E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:9e:ff:31:a1:6d:36:60:e8:d1:01:b1:d7:
6c:43:78:10:54:c2:59:21:f4:7d:ca:b7:85:eb:ec:
a6:86:ee:31:35:57:bc:f5:1b:21:ef:5e:e6:e7:a7:
0b:61:7e:69:c3:c5:d5:47:25:a5:74:fd:4d:d0:02:
40:64:65:97:e8:73:07:41:4b:0a:74:3b:23:7e:d1:
0d:2e:7d:3c:04:e0:4f:ef:66:94:3a:c5:49:40:57:
d0:14:45:f9:81:d8:84:b1:d6:c4:e2:f5:01:c4:b1:
57:9c:88:f3:28:2d:2e:13:6b:fb:e2:32:16:07:36:
b3:71:a2:72:80:e6:05:ab:c6:14:03:34:1d:c9:54:
43:0a:b7:88:a0:8c:3c:ee:9e:6e:ff:c8:de:3c:c2:
0a:c4:0b:63:fc:f4:1e:d9:14:db:25:6e:76:da:1f:
05:f4:d5:12:af:8e:25:85:13:0f:bc:d1:a0:6c:5f:
b3:64:b5:94:47:7f:f3:cb:cf:09:37:58:c8:a8:bb:
6f:9e:eb:cc:8e:f1:d7:2a:b7:80:b3:67:5f:8e:9b:
4b:4a:a2:a9:17:92:10:5e:dc:87:39:44:de:22:aa:
95:3f:52:9e:eb:46:91:2e:95:f8:c0:50:63:c1:15:
05:c9:a3:08:d1:d0:a0:2c:54:43:6b:fa:5c:f0:9c:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:B0:E8:BE:AC:92:DF:BD:26:CE:36:F7:F9:93:41:C6:AB:33:E8
X509v3 Authority Key Identifier:
keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:ab:8f:80:32:ea:b9:fc:8e:db:a0:2a:c0:f8:51:7e:38:
cb:7a:7d:4e:96:28:91:ff:35:88:17:cc:76:7e:76:9f:dd:1e:
00:e8:83:7d:e3:5a:b9:d7:12:c0:ef:6f:0d:32:f3:1c:0e:95:
2c:9c:33:a0:12:9a:15:e6:14:de:70:e7:1e:0a:c4:87:45:35:
7c:98:19:10:3c:4c:1f:e7:07:25:65:0c:f1:03:a0:89:af:30:
b5:b6:42:a6:7e:92:d6:2b:6f:a2:18:7a:a7:7c:52:c2:60:99:
8b:f2:5e:e7:17:fc:59:b9:10:73:5a:d4:50:d5:bd:09:ca:55:
ff:d3:4d:2e:64:91:36:cf:dd:38:43:74:0b:c0:d4:3d:58:01:
dc:ed:15:63:60:d1:70:3a:5e:e9:cf:69:48:86:e8:e0:9e:47:
36:f0:88:cb:05:53:29:36:85:c2:57:e5:20:d6:90:a7:5c:b6:
5b:38:1e:73:26:37:35:73:71:88:41:1f:53:ad:02:f0:8c:97:
f3:3a:63:1c:96:85:84:a6:95:ce:da:c6:51:8a:a6:81:1c:e3:
50:58:0f:c4:70:8d:64:3e:f7:cf:3e:bb:cf:80:45:3b:8c:ac:
33:14:20:04:aa:fa:9e:0e:99:5e:5e:99:e0:5d:35:e2:21:ad:
7b:ab:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:16:58 2026 by rpki-client