
Error: rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
File: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json)
Hash identifier: iKQxhfqbW6iklJNxu25DNd3CObFVwnBBJjKaXzUAaMo=
Subject key identifier: 7A:9A:90:34:54:17:D2:EE:5D:84:F0:2C:C9:5B:C0:7E:1E:D0:19:8E
Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
Certificate issuer: /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Certificate serial: 553E9766B32153E0C1196950AC5F5A23A8236F28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
Manifest number: 04E2
Signing time: Sat 31 Oct 2026 10:42:43 +0000
Manifest this update: Sat 31 Oct 2026 10:37:43 +0000
Manifest next update: Sun 01 Nov 2026 12:42:43 +0000
Files and hashes: 1: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: 4cAvaHcFmH7lzqSImGIJViJfT65Hmgq+zHIDIZkEr4A=)
2: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=)
3: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 12:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3e:97:66:b3:21:53:e0:c1:19:69:50:ac:5f:5a:23:a8:23:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Validity
Not Before: Oct 31 10:37:43 2026 GMT
Not After : Nov 1 12:42:43 2026 GMT
Subject: CN=7A9A90345417D2EE5D84F02CC95BC07E1ED0198E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:9e:21:96:e9:80:1e:ce:c4:b4:fe:23:d9:
3f:0e:48:7c:f0:43:e5:46:9f:8e:cf:2b:39:e7:22:
1f:40:f5:e2:18:3e:5d:c2:a8:6f:40:b1:17:6e:b3:
e8:47:47:3e:9d:12:28:c7:57:3a:57:ca:bc:fa:a0:
ea:4b:df:3b:0b:81:51:15:a3:b8:25:35:b4:00:fb:
d2:58:df:49:f0:05:bf:d2:fc:49:ae:28:80:b7:eb:
32:a9:b0:f7:47:05:56:68:09:34:8e:94:c2:1f:47:
50:69:3e:d5:14:71:c8:f7:80:d7:2c:23:33:1e:44:
40:95:09:46:e6:40:ee:22:f6:00:44:7b:ff:1f:f7:
23:79:58:92:74:97:f9:3c:d9:fd:57:5a:61:77:95:
13:7c:d0:67:db:a3:42:25:b4:3f:03:25:8a:72:59:
7d:57:8c:79:d1:ec:77:fa:e8:9c:8a:ff:46:20:39:
af:58:ed:0a:2b:7c:37:30:ff:37:41:0d:b8:2a:b4:
04:0b:8c:ce:91:d5:27:ab:96:98:2b:17:83:ac:ec:
e3:dd:76:b0:0c:ba:93:3a:03:88:cb:ad:da:ab:cf:
ed:33:d4:cf:f8:de:7f:cb:2a:81:58:12:17:70:df:
59:db:cb:18:e2:af:83:1f:5b:4e:cd:71:ec:54:c8:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:90:34:54:17:D2:EE:5D:84:F0:2C:C9:5B:C0:7E:1E:D0:19:8E
X509v3 Authority Key Identifier:
keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:a4:da:bb:47:8d:d9:c1:69:4e:5e:7a:93:16:55:f3:f2:
3d:9e:dc:e1:2e:35:bd:a5:07:79:00:0a:51:f6:96:83:8b:25:
5b:54:f9:b0:3f:e2:0a:ba:4a:8a:b1:db:13:bc:86:9a:2a:f0:
5e:19:21:15:67:bb:b9:3b:75:4a:5b:05:56:34:af:03:cc:41:
93:44:99:2e:10:08:d4:04:a8:fa:b6:0b:48:8c:cf:3f:2f:7c:
90:2d:f0:87:3e:48:84:ea:0b:b2:ee:c6:7e:ee:5e:23:21:71:
41:6f:a8:b6:e7:82:2c:b5:ee:16:58:16:d0:19:9f:9e:16:4f:
a2:c7:9a:8b:c0:87:53:e5:a1:8d:e9:67:d0:65:22:a2:ff:6f:
2e:5d:85:14:bc:1c:75:3b:74:28:59:80:7e:d3:fa:23:cb:b0:
9f:18:31:a9:aa:de:2d:0a:38:b6:9b:b2:4c:e7:06:42:ff:3e:
d9:f2:39:d9:e6:a9:0a:cc:c3:89:7a:a4:9e:c5:cc:06:f3:7e:
70:b5:95:85:b8:4b:4b:be:ee:e1:b0:22:f3:d3:16:92:b8:4e:
ff:19:db:a7:c2:4a:d3:24:b7:c1:a0:dc:2d:9a:af:95:95:8b:
e7:c2:4f:90:1d:bf:1a:26:c5:17:35:ed:47:6d:12:9d:4d:96:
0f:63:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:55:26 2026 by rpki-client