
Error: rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier: 3I5efci2RfkPKMYttYUrutJEbb+tAUxoBqACticGyp8=
Subject key identifier: 38:11:C8:61:16:B7:83:40:7F:B1:B3:31:B4:00:D4:19:1E:78:F8:98
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial: 7A2DE7A2FB1EDF4FB306379FB62E05B850102991
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number: 041B
Signing time: Fri 30 Oct 2026 22:46:41 +0000
Manifest this update: Fri 30 Oct 2026 22:41:41 +0000
Manifest next update: Sun 01 Nov 2026 01:56:41 +0000
Files and hashes: 1: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: +qTFNlcS2MozmxP9Ur/CNbZ3JSEW14GdklxUM4qrR6Q=)
2: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: Mw9wrwlp9rBBJe6ke/T542y9Rqq2VB03O7vKyLplFQ0=)
3: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2d:e7:a2:fb:1e:df:4f:b3:06:37:9f:b6:2e:05:b8:50:10:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Validity
Not Before: Oct 30 22:41:41 2026 GMT
Not After : Nov 1 01:56:41 2026 GMT
Subject: CN=3811C86116B783407FB1B331B400D4191E78F898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:5f:a2:9e:29:38:f8:47:ed:19:f9:60:61:
e9:60:f7:7b:de:52:51:f5:7e:69:2f:5a:10:e6:2c:
9e:45:bf:94:77:93:1f:5b:e7:09:0f:4f:e8:b4:50:
c7:27:da:8d:27:80:25:a6:ce:fb:74:38:ef:ed:e7:
10:3f:78:3d:4a:0c:25:f6:49:cd:35:36:a5:ec:c5:
91:49:58:42:b7:04:10:46:66:f0:58:1f:32:8b:4a:
31:fe:ca:32:4d:61:9a:af:71:92:94:c0:97:e5:72:
33:14:b7:a0:41:9f:13:8f:7c:b4:f2:e5:07:59:46:
81:69:28:63:51:3b:05:02:49:56:fd:8b:da:e8:af:
9f:3d:e6:c2:7a:73:2b:94:f6:e5:6e:ac:a1:c5:9c:
24:80:d1:88:15:46:3e:66:21:21:a5:b5:27:c8:9d:
4c:3e:d1:9d:32:a7:91:59:24:2b:43:97:10:32:a1:
be:95:39:cb:07:02:5d:48:98:01:36:c5:21:e8:56:
7e:88:02:a8:32:92:1b:6a:7e:5a:37:19:e6:6b:b5:
5b:4c:50:38:03:4a:cc:36:19:9f:ff:34:97:7f:57:
40:41:bc:f5:4e:57:ad:ef:ae:d1:54:19:d7:ce:b3:
a7:80:2e:89:34:c4:cf:27:8c:f1:a4:08:dc:36:2f:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:C8:61:16:B7:83:40:7F:B1:B3:31:B4:00:D4:19:1E:78:F8:98
X509v3 Authority Key Identifier:
keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:74:0d:43:c0:32:68:7b:44:0d:64:e6:42:49:bf:78:54:
25:a3:94:04:93:ae:b4:43:b6:8f:c5:2b:5e:dc:16:7d:a6:ab:
97:b2:d9:2a:c9:9d:80:d9:07:b0:21:3f:f2:91:b1:0c:0d:71:
b2:97:28:84:9e:40:ec:ff:6b:81:2e:bb:fa:94:f4:70:09:e2:
32:22:5f:3b:9a:d7:b4:8f:18:d2:ec:1c:e6:f6:59:66:0c:8e:
43:ca:4a:ed:57:7f:5d:a6:cc:da:29:e7:e2:33:15:8d:04:dc:
9f:ce:a3:44:a1:71:48:db:c7:16:aa:bc:be:0e:77:38:b5:93:
d9:4e:3e:f1:cb:42:72:19:38:d9:7b:7d:c5:27:5c:48:af:56:
49:b9:29:b3:d0:67:9b:7e:9f:88:0c:50:8b:03:9f:9e:b8:7b:
e2:2f:a9:e2:a4:45:85:12:ab:da:59:41:fd:4e:8c:a5:2a:9a:
0a:08:d4:88:19:1a:89:47:ed:8b:7f:17:95:b5:3b:c9:57:d2:
12:0a:e5:89:c0:fd:bb:b3:b3:3f:45:2f:7f:b4:14:99:44:cc:
a5:62:11:c4:ad:ed:6d:34:23:9d:e8:fc:e7:d7:46:4c:dc:0b:
f9:5f:2c:50:22:ad:aa:a1:32:88:d8:10:e8:64:60:fc:35:39:
7c:c0:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:49:36 2026 by rpki-client