
Error: rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
File: E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft (raw, json)
Hash identifier: PuEv8LEqg3CyELcDpjjwk+mshGNvjSvcGAnN8GPdnjU=
Subject key identifier: 3C:30:06:20:2D:32:62:50:3A:B6:57:B7:DC:B3:6F:E0:85:6D:55:1A
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Certificate issuer: /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial: 22BB069866F31385239C7607085097E7C0FDEB35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
Manifest number: 04E5
Signing time: Sat 31 Oct 2026 04:11:19 +0000
Manifest this update: Sat 31 Oct 2026 04:06:19 +0000
Manifest next update: Sun 01 Nov 2026 06:42:19 +0000
Files and hashes: 1: 3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (hash: Qo71QGZ9woegBbILiBBordLVHq7zvNeXN6kD/86h7hI=)
2: E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl (hash: o8E1x1csGlVtUn8yscY+TC+LAZJZzh/IdqhKnIsbtOc=)
3: 323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (hash: N7bfUjlulTd84mWzIVaRJJZIcr+4ErrhVlo8DGadX3Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 06:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bb:06:98:66:f3:13:85:23:9c:76:07:08:50:97:e7:c0:fd:eb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Validity
Not Before: Oct 31 04:06:19 2026 GMT
Not After : Nov 1 06:42:19 2026 GMT
Subject: CN=3C3006202D3262503AB657B7DCB36FE0856D551A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:ef:e1:cb:0f:13:91:1d:bc:6b:46:6d:67:
db:9f:00:ef:ca:62:a5:fb:c6:4b:eb:fd:ae:df:fb:
28:a8:02:3e:49:8f:39:8c:1a:10:2c:ed:c0:d3:34:
90:eb:ca:83:68:e1:7e:d3:50:19:0a:48:f5:56:cb:
85:3f:88:45:21:8c:91:7e:fb:10:d5:6f:33:ec:c8:
5a:c8:71:d1:e1:51:7d:0b:81:ae:c4:84:88:5f:4c:
fe:53:31:d5:f1:07:32:87:6a:b9:1e:af:a0:5f:30:
3f:7f:44:39:a8:af:33:f7:41:b7:6a:d5:14:38:ae:
ce:e9:52:e3:e0:fa:18:e3:82:72:19:f7:db:27:dc:
41:e5:b6:cd:ff:43:9a:20:fb:38:1d:84:9f:4e:ce:
84:20:51:da:3b:b2:41:ab:26:76:53:52:69:5d:73:
16:24:d0:56:8b:94:84:d1:e5:15:81:e9:bd:4b:b0:
59:f1:17:47:d8:4c:2f:2c:b7:b8:48:06:74:bc:d9:
52:56:14:2b:00:68:cb:0f:40:bc:74:ef:6f:e2:cd:
e1:c6:65:f7:7b:52:8a:9b:e0:ad:76:54:2b:b9:e5:
8b:01:b4:cf:ae:ce:20:35:8b:56:b1:8d:f6:ca:e7:
3a:d2:8b:0e:01:a5:26:16:77:de:a6:fb:cd:7a:51:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:06:20:2D:32:62:50:3A:B6:57:B7:DC:B3:6F:E0:85:6D:55:1A
X509v3 Authority Key Identifier:
keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2a:a7:98:f9:bb:d9:97:eb:55:02:ae:ec:12:cc:df:a8:1a:
2f:e4:0e:c2:cc:1c:4f:a1:1b:89:a1:e5:08:db:d2:44:d5:9e:
92:79:e5:90:b2:4a:62:ea:1d:e6:bb:95:cd:f3:bd:f7:4b:16:
70:a6:05:cb:db:54:53:a9:bb:a6:d9:83:4a:94:d3:49:67:7d:
42:54:46:91:ad:b6:aa:b0:b1:82:08:e3:8c:16:b2:a7:5a:5a:
c7:88:74:68:ae:38:34:83:fd:e7:c4:b8:c4:2b:2f:c6:78:c2:
cf:67:66:d1:b0:5d:d5:47:41:2f:74:07:cc:4c:d1:95:ef:3c:
b0:3a:d5:85:7e:b2:51:ba:b1:25:3f:b5:29:5a:27:c5:e5:e7:
08:45:1e:c1:ac:9c:55:d0:76:bb:43:06:86:1f:7c:69:4e:82:
ef:07:13:22:45:cd:64:86:07:16:d8:24:bf:c8:c0:c3:d2:dc:
44:0a:f1:43:47:20:f8:4c:90:a0:01:0e:53:8c:44:3a:85:e9:
10:1f:c4:ad:c8:d1:8e:eb:8b:2f:ff:c0:e0:02:84:90:54:a9:
57:3b:f2:05:0f:c9:59:18:06:de:39:b3:5a:8c:f6:0b:d7:62:
e0:d2:6b:df:28:95:9f:2e:c1:71:38:8e:e3:d9:14:79:bc:8a:
63:10:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:32:07 2026 by rpki-client