
Error: rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
File: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft (raw, json)
Hash identifier: bq+Z5MgLQsmnInJ4/5Aars0giuOGmQS3AyB9t1YwQn0=
Subject key identifier: F5:C6:34:B5:58:78:D3:93:65:33:8A:3E:35:BB:57:73:F6:6C:C2:52
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Certificate issuer: /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial: 74A7EA4547B1694EED8BABC124EB3992EB96CAC3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
Manifest number: 04E7
Signing time: Sat 31 Oct 2026 05:20:00 +0000
Manifest this update: Sat 31 Oct 2026 05:15:00 +0000
Manifest next update: Sun 01 Nov 2026 06:33:00 +0000
Files and hashes: 1: AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl (hash: XbVa93i7I5Cfu5brVtDrJ/fCF0yJ6JggVqDaDoQjRps=)
2: 3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa (hash: NKhhelO6RGKaDs/+G0sIJiQ1J6kRVq9sUC9DrbVdsj4=)
3: 3136382e3139372e3130362e302f32342d3234203d3e20323635343737.roa (hash: 6CA4Mq/PYj8AnA4oMt7greKQTeFDPBWkxHXxynUWkps=)
4: 3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa (hash: SFRan6wUUl+qAuIJbMy9u85RZ8B4HjWtf5RbEesDQqs=)
5: 3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (hash: vD4ePhiAPlTsCQKon4eQyb3yE8Su8leuU5XvXEbZXX0=)
6: 323830343a333463303a366530303a3a2f34302d3430203d3e20323635343737.roa (hash: kSkcYmLT3kTrA+/6WC/wGmTeeCwx7H5Lfs+prllOL70=)
7: 3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa (hash: 5ltVlS3Kl97Yjf/5Sc5opCe5VhlqUxevy8d9XzNoU58=)
8: 3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (hash: CVRAWic0EMJ3pC526p3Q7/WIg3l/by+zZ0ZpByHrrxM=)
9: 3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa (hash: HZLoF4N4vb3MPIztZ/meVhJOaEhrWzYfaiCTVRYrHuU=)
10: 3139302e3130332e3135332e302f32342d3234203d3e20323730393336.roa (hash: Qj4BcZi9WxmzPiYC1JGsVFmMnlRO+pXzl9u3M4xkOzM=)
11: 3139302e3130332e3135352e302f32342d3234203d3e20323730393336.roa (hash: AJwSNUqwibi6aCbSiRlHGoy7GE2RneVrt15fLiVpSHE=)
12: 323830343a333463303a383930303a3a2f34382d3438203d3e20323635343737.roa (hash: y0EFE8dpHe4yxi3q83IOSWYKX/kF394+0wu5IjY4S1Q=)
13: 3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa (hash: CQp32iZLq25kiAzFALDiuQDj5zrp69tj8mN2ys+3uMw=)
14: 3139302e3130332e3135322e302f32332d3233203d3e20323730393336.roa (hash: +btokG+zhcSUNkznZNOfe7SFPDzKr67TekppHFk/m+4=)
15: 3136382e3139372e3130352e302f32342d3234203d3e20323635343737.roa (hash: cH5xircoVxX2fIlURwlIduelRHDj4QzfCMlCF+nht/w=)
16: 323830343a333463303a3a2f33322d3332203d3e20323635343737.roa (hash: 5WnT5qW6x9e/XYQVuQsSZdRUsMbS9SgduNaUds6OpBs=)
17: 3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (hash: SzYdQ81OdRxS3LcFk0Y+PxdUupzvm7wDE50N6UqaWFc=)
18: 3139302e3130332e3135322e302f32342d3234203d3e20323730393336.roa (hash: suyVJQxFSSlMNFJz6ep+N6+4RnVzd93YjC+x8+CnOQo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 06:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a7:ea:45:47:b1:69:4e:ed:8b:ab:c1:24:eb:39:92:eb:96:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Validity
Not Before: Oct 31 05:15:00 2026 GMT
Not After : Nov 1 06:33:00 2026 GMT
Subject: CN=F5C634B55878D39365338A3E35BB5773F66CC252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:01:81:40:12:08:5d:f2:b3:e3:01:e1:8d:
cb:89:8a:e0:45:8f:66:8c:e2:ca:15:37:ec:19:f5:
bd:72:8a:26:6b:88:28:84:39:4c:2f:37:c9:c4:81:
eb:15:3b:2d:80:75:0c:8c:62:9f:45:12:ce:ce:6d:
cf:9c:f5:7c:ed:d7:42:c4:e9:b2:bf:76:45:f2:81:
70:b0:36:49:80:6e:86:7b:1f:e1:14:3b:4b:3b:67:
cb:f1:eb:f2:30:32:fd:ea:f8:3b:c2:46:57:2f:28:
5c:84:89:f4:22:4b:ae:3f:b1:eb:17:da:9d:f7:df:
ea:82:8d:29:69:14:06:d6:64:a6:e1:98:17:43:df:
27:fe:d1:41:2f:ed:45:19:a8:25:fd:73:4e:8f:03:
2c:16:78:8e:b8:fc:66:56:a7:ac:4e:ba:de:19:74:
c3:0c:83:66:4b:43:11:b2:ce:c8:9c:d3:11:4e:6a:
85:21:40:31:4e:67:52:30:ce:1e:f5:43:ef:94:c3:
2c:c8:20:a2:71:59:c9:55:95:50:a5:5a:19:b9:cf:
d3:1b:72:85:ea:b2:d6:8e:ce:8b:d8:21:09:a3:4a:
61:b4:65:ca:c3:4b:32:af:b3:e6:19:dc:b8:32:c1:
62:e6:ce:8f:0b:4b:9c:fd:7f:bc:91:ea:51:dc:3a:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:34:B5:58:78:D3:93:65:33:8A:3E:35:BB:57:73:F6:6C:C2:52
X509v3 Authority Key Identifier:
keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2a:f0:95:fd:07:66:fd:38:10:73:b3:dd:12:92:3c:37:1f:
78:9f:38:12:7a:c9:7c:b3:36:fc:b3:9c:5c:97:9b:04:6c:8f:
30:71:9b:cc:ab:a7:5d:77:b9:a4:eb:7c:0c:9f:6b:7c:2c:00:
e8:09:00:41:53:7f:b7:e5:ea:80:e1:f4:66:75:39:d8:35:d6:
aa:9b:20:1a:1b:91:28:e9:89:e8:4e:84:e4:fc:b4:d4:ff:5d:
d6:24:43:18:61:74:0c:12:67:68:d6:27:33:c4:ad:29:a4:e8:
a7:e2:a2:d0:52:7b:b0:51:b8:b8:8b:5c:87:4a:a3:e0:15:00:
30:98:b2:3c:ca:75:c7:d0:0d:37:43:8f:00:0c:68:dc:f0:17:
87:fa:04:17:18:91:06:49:99:5d:64:ae:98:f3:68:61:23:c8:
24:a2:b2:e1:b2:5b:b4:09:e2:db:08:66:6c:89:41:bb:97:e2:
56:c0:90:a4:1c:32:d6:a2:9a:76:a7:3a:5c:49:d3:ca:7e:96:
a7:25:aa:18:4b:3d:c5:88:12:ab:b6:c4:f5:7b:96:39:45:ad:
f0:c5:1f:25:16:dd:e7:31:dd:df:34:e7:f3:41:df:ea:6b:f6:
fd:2d:46:db:c5:7f:6a:8f:27:12:48:b5:3c:fa:bc:56:e2:52:
78:17:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:59 2026 by rpki-client