
Error: rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
File: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft (raw, json)
Hash identifier: FMgRwBDum2U9xrJfxIz7zvxaHaPJXt0nGF6O+cjLA7g=
Subject key identifier: 48:62:93:28:62:32:5B:DE:84:44:12:12:6A:79:07:18:BD:0C:7A:85
Authority key identifier: 1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
Certificate issuer: /CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Certificate serial: 29F4AF771E98318D75B480AAC4E04516C557688C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
Manifest number: 04E3
Signing time: Fri 30 Oct 2026 17:55:40 +0000
Manifest this update: Fri 30 Oct 2026 17:50:40 +0000
Manifest next update: Sat 31 Oct 2026 20:04:40 +0000
Files and hashes: 1: 1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl (hash: +3Z1EreKL6c+4dDGYNeMTEBiUEfMWv5tJBlf+j8kbM0=)
2: 34352e3136392e3132342e302f32322d3235203d3e20323638313038.roa (hash: 0AyEG0mudKFyVV0DXiJWdb7/XM3F/6N+s6UR/6ttaHA=)
3: 323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (hash: ZeqWuGQFJx8ldPNGW+dlUZV2TRaUohk9bhBS6J3P+Nk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f4:af:77:1e:98:31:8d:75:b4:80:aa:c4:e0:45:16:c5:57:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Validity
Not Before: Oct 30 17:50:40 2026 GMT
Not After : Oct 31 20:04:40 2026 GMT
Subject: CN=4862932862325BDE844412126A790718BD0C7A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:9f:31:f3:a7:3f:3e:68:2e:cd:94:1e:98:
eb:74:14:61:a5:9c:cc:bf:4c:8b:7e:02:7a:63:0a:
4d:bb:f8:ad:b2:c0:62:07:29:e7:64:e5:3c:81:6a:
e5:16:a2:58:b8:1e:93:97:f6:2a:dc:98:ce:1d:32:
3f:98:9a:db:de:6e:06:7a:4e:93:31:bf:cd:b4:fa:
03:d7:8d:74:1f:a2:c6:66:0b:94:c2:14:82:76:70:
9e:db:e4:d7:60:72:54:b0:ad:95:cc:96:cb:9f:1a:
5c:43:79:ad:07:07:be:73:60:d0:4e:05:34:72:b3:
b9:8d:d5:e4:3f:4b:66:a5:b5:cb:28:c6:1e:41:19:
d7:f3:34:4a:ab:94:20:7a:7d:e8:a5:05:d7:4b:14:
de:98:07:18:44:5e:89:3f:98:53:56:cc:ae:b8:26:
8a:ba:40:f6:d5:2d:11:59:b6:d7:67:79:46:38:f8:
ff:92:53:84:b9:72:9b:f2:b3:39:10:41:77:f7:df:
86:46:62:4b:36:09:14:51:16:d1:2c:6c:00:0f:b4:
91:a8:61:0d:25:af:74:8c:3e:ec:e4:72:57:4c:e3:
9b:07:03:99:ae:93:4c:a2:ca:20:ab:19:4d:95:14:
7a:2d:da:7d:13:39:bc:eb:4b:d2:82:67:f6:d4:1d:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:93:28:62:32:5B:DE:84:44:12:12:6A:79:07:18:BD:0C:7A:85
X509v3 Authority Key Identifier:
keyid:1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:88:37:ad:c6:08:f0:60:5e:9a:8e:d9:79:69:af:da:6b:f8:
31:94:6a:1c:33:a5:3a:e4:6e:00:08:07:b4:c2:74:51:8b:6c:
a9:ab:a8:1a:63:06:a3:40:1d:40:31:14:2f:a7:f0:17:b3:dc:
56:32:ad:60:02:ba:00:9a:20:2d:39:3a:6c:34:65:07:bf:bd:
c2:20:c1:11:25:27:91:5e:eb:5b:87:27:ae:d4:47:39:9a:16:
54:b1:ea:af:4b:b0:94:8a:b6:db:b6:d4:92:be:8d:d8:97:7e:
58:ac:8f:65:04:cf:ff:3b:74:47:b2:9c:f2:34:63:c5:a5:85:
42:a9:ea:19:70:ce:9e:d7:b6:99:5e:47:fc:14:66:0d:cd:58:
55:60:c0:e8:d7:53:56:be:e8:77:2e:e7:93:b9:32:9b:15:43:
6c:a3:1c:59:4d:f3:77:f5:7c:3c:05:14:c2:18:7a:22:45:77:
92:39:05:12:f7:39:fb:b5:2f:08:75:04:c1:74:15:31:aa:b2:
8d:b7:88:32:1b:af:24:0a:91:4c:03:44:40:32:59:73:ea:32:
29:41:88:cb:cf:8a:92:8f:89:54:b1:4b:2b:31:21:19:dc:cf:
98:64:2f:8b:cf:fb:cd:06:20:a3:94:ad:2c:87:b0:6e:5f:4f:
1c:21:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:51:24 2026 by rpki-client