
Error: rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
File: 6321913B8F265DB266263684C1BC420640061E1A.mft (raw, json)
Hash identifier: GXbAxuiXuqFx/bJUiJz2i9TFYSgpOJfo5pM6JtO5Bs0=
Subject key identifier: C8:2D:D0:91:11:E0:DC:9C:9A:12:60:27:9E:42:4C:E9:AD:D0:06:17
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Certificate issuer: /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial: 6451A242BF75F12E331E174010FF6FCF0CADC3CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
Manifest number: 0413
Signing time: Fri 04 Sep 2026 10:38:35 +0000
Manifest this update: Fri 04 Sep 2026 10:33:35 +0000
Manifest next update: Sat 05 Sep 2026 12:46:35 +0000
Files and hashes: 1: 6321913B8F265DB266263684C1BC420640061E1A.crl (hash: 2kNf6OFSgW3QXafaS0t3l1cCoNoqWFeu3xT+9U2ohs4=)
2: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (hash: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0=)
3: 3137302e36362e302e302f31362d3234203d3e20313938393439.roa (hash: 072VEbaI7xB9Jhovu0RQAyYnQXYwsrJAt5OhwHYTOLE=)
4: 3137302e36362e302e302f31362d3234203d3e203131393933.roa (hash: Aa6+6KgZHik6+ABzhpmvLEKv4dZCz7fRMiExXTKJrRE=)
5: 3139382e3138342e3136312e302f32342d3234203d3e20313938393439.roa (hash: 4Z9cha3sVBOlzTrT0dVMcvNNK+EHRcrGLqWw2BwB8zA=)
6: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (hash: Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=)
7: 3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (hash: QIRLiXgnYMfb4NQLMga6l9oGFV4HRi7LxF1Dsm3IXgo=)
8: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (hash: TdA9895ONLIzi4qc+d1f2GAp2J5CYRUmZoT7qlO38BY=)
9: 3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (hash: lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 05 Sep 2026 12:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:51:a2:42:bf:75:f1:2e:33:1e:17:40:10:ff:6f:cf:0c:ad:c3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
Validity
Not Before: Sep 4 10:33:35 2026 GMT
Not After : Sep 5 12:46:35 2026 GMT
Subject: CN=C82DD09111E0DC9C9A1260279E424CE9ADD00617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:f0:f5:4c:b5:17:ad:fa:2c:d1:4f:ac:31:
d6:49:35:73:94:8e:83:fe:2d:b6:b7:79:16:3d:9d:
a1:87:cc:4e:10:3d:3a:25:db:0c:ce:eb:32:01:db:
cd:ff:18:d2:6b:8b:7a:73:b5:c2:37:40:7f:99:5c:
ed:60:e7:cc:98:26:03:64:d4:d8:cf:cf:bb:3d:f9:
dc:da:c5:7c:06:42:1e:f9:5c:df:ff:d3:59:9b:c7:
84:26:6e:4a:3d:2e:39:c7:d4:c3:1f:a7:56:25:3b:
d2:4d:fc:ed:55:d8:57:58:6b:44:88:6f:e7:b0:8d:
4c:0f:94:4b:74:89:fd:d8:37:f2:64:ff:60:b0:b4:
db:95:72:e5:96:61:93:f2:9b:98:f2:29:63:a3:d0:
50:7d:83:17:d8:11:b6:68:7a:06:5b:5b:69:3a:8b:
cc:99:5f:c9:61:60:55:45:07:d0:b6:fc:c6:9e:eb:
6d:5a:cd:1c:8b:94:4d:65:a6:92:ef:4f:81:8b:7e:
ed:72:27:0f:53:84:81:dd:2a:90:f6:98:e5:15:db:
7e:45:31:73:4a:44:3b:a3:92:34:11:af:89:62:54:
9a:40:05:a7:f0:85:92:bc:2d:04:ed:08:05:2e:28:
0a:01:eb:ab:4f:1c:07:53:5b:16:e2:d3:f0:f0:6f:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:D0:91:11:E0:DC:9C:9A:12:60:27:9E:42:4C:E9:AD:D0:06:17
X509v3 Authority Key Identifier:
keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:30:ab:73:67:ce:9a:a4:74:08:f8:80:0d:51:65:3c:e9:
27:6e:8a:d5:e7:0e:8d:fb:ca:3a:ef:99:9e:5a:d7:f3:37:41:
a7:26:9e:16:fc:28:2f:10:64:09:47:0f:d8:38:81:de:c2:2b:
c0:21:51:72:9e:d8:d8:3d:1a:20:d6:35:a1:fb:08:fa:1a:62:
7b:b4:18:46:03:b3:5b:6f:fd:74:54:df:eb:a6:38:3d:76:ec:
a0:fa:40:c3:63:3b:fe:fc:33:e0:87:1b:85:2b:8a:8a:68:ce:
9f:07:66:73:13:8e:39:88:94:91:ba:74:a0:4d:9f:6a:fb:6e:
07:b8:19:3e:bd:3f:d3:25:d2:50:8e:72:6c:c4:48:d6:37:e6:
f2:e5:4b:19:e3:82:76:ac:90:1a:65:f6:fb:8c:c3:98:36:69:
37:64:19:af:5e:ca:54:f8:eb:cd:45:e1:cd:82:29:39:31:8f:
4d:f0:45:b6:eb:f8:c1:09:c1:4a:1b:06:b0:59:70:42:3a:b0:
12:61:ca:ad:83:72:35:00:96:25:cb:85:84:ab:9a:62:a5:c9:
cc:9e:5c:c3:c5:e1:75:c4:a2:4b:f0:ce:92:4a:be:7c:87:3e:
72:5c:fb:4b:b3:92:82:56:0b:76:b0:15:37:8a:8a:d1:d9:31:
5b:ac:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:19:00 2026 by rpki-client