
Error: rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json)
Hash identifier: UsiThsJLqyXhT2G9OuLMFVb/Bk1vPMHEKfAYybRH1ow=
Subject key identifier: 9C:02:19:35:B3:35:E4:73:A0:59:96:14:73:E6:C4:A2:D8:A2:9E:B6
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial: 68A39E75513BEB3EAEF9A6B3B5E52CC2CB3D7143
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
Manifest number: 04EB
Signing time: Mon 02 Nov 2026 18:48:10 +0000
Manifest this update: Mon 02 Nov 2026 18:43:10 +0000
Manifest next update: Tue 03 Nov 2026 22:18:10 +0000
Files and hashes: 1: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: MJEU9stz6b2jhBGcAeFLhP96QluPf2/eiJRTzyfKnO0=)
2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: hcu4U8HupxkMenaUr5PSbmjr0+3R51c9nNbzcGGI5XM=)
3: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: d1r/JqCcRrfI+uplhqwOSFjUh6OVTzwZb6fZkyUCGRU=)
4: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: x1+GQO8H+q7duDGrJLmVFbvRT4PTXdBBkE2zgyXohJc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 22:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a3:9e:75:51:3b:eb:3e:ae:f9:a6:b3:b5:e5:2c:c2:cb:3d:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Validity
Not Before: Nov 2 18:43:10 2026 GMT
Not After : Nov 3 22:18:10 2026 GMT
Subject: CN=9C021935B335E473A059961473E6C4A2D8A29EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:28:b4:1e:e2:77:95:be:63:38:2c:09:01:
a5:e8:63:73:21:f0:a7:bf:7b:43:e0:8f:e2:59:8b:
84:43:7d:e6:36:1c:59:00:51:a5:78:82:64:e1:4a:
6d:fe:79:ca:4b:c8:fa:6d:2d:52:f9:96:7c:0c:c8:
3f:a1:1f:f8:bd:b5:8e:a5:5a:58:e1:6f:82:32:e1:
da:e8:c6:4e:8c:dd:33:34:c3:e1:28:40:26:ed:5f:
12:03:89:8c:c5:25:5f:0b:bb:4d:a3:f3:44:69:48:
0d:99:ea:85:5d:4b:cc:23:b2:c9:db:81:0a:bb:6e:
9b:57:bc:df:00:62:be:37:57:5e:1d:cd:82:2d:49:
c0:67:1a:80:8e:95:c9:f0:3e:a3:23:ae:7e:e2:a1:
7b:1d:b7:88:74:60:98:63:0a:8d:7c:12:10:64:f5:
6e:ac:e4:88:29:50:49:85:18:e6:3e:d9:38:f8:57:
15:fb:d7:7e:4f:b9:c3:88:b8:c0:d6:a3:1f:be:9c:
68:fc:95:74:a7:90:e1:8f:e5:26:67:b0:21:94:28:
cb:6e:42:2e:bb:32:05:0e:ea:48:4f:48:62:da:72:
38:93:96:03:58:9e:53:92:2d:ce:c6:34:27:f0:c1:
80:17:b6:4d:4c:99:f6:5e:58:e9:09:c6:71:f3:c0:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:19:35:B3:35:E4:73:A0:59:96:14:73:E6:C4:A2:D8:A2:9E:B6
X509v3 Authority Key Identifier:
keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3c:f7:ed:46:5e:98:cc:59:e8:30:98:bd:ce:8a:a0:bf:d8:
1e:ca:fb:40:e0:39:dc:0b:e6:46:9b:38:33:3b:bc:13:2f:31:
83:a1:4b:b6:c9:b4:b9:3e:69:dd:b7:19:43:07:75:69:41:be:
f2:5a:3f:6b:5f:06:c3:03:bd:a5:77:c2:25:78:a3:2a:a7:66:
16:66:96:b8:e6:f2:3a:9b:06:bc:f8:45:51:f2:09:d8:c2:c5:
a0:cd:f4:a1:b8:95:60:9c:77:fb:d2:be:35:92:87:98:8c:22:
c0:90:14:c2:e8:10:d9:63:54:b4:a1:85:bc:52:8b:76:3d:6e:
ea:f8:16:de:b8:51:61:d1:14:10:2d:e1:c2:45:f9:06:d5:82:
9e:3f:86:29:7f:f1:1e:90:95:8d:61:53:d9:e6:5c:1b:84:5f:
48:a1:80:88:e9:2d:a6:ba:61:1f:0d:80:95:20:9c:2f:76:7f:
15:77:b9:d4:4a:0d:01:8d:5f:f6:56:6e:21:f8:98:f6:a9:41:
e7:02:ea:e6:ae:1d:e5:95:5b:82:04:e5:28:fc:ba:4b:4f:b7:
7b:ec:b2:c7:22:9f:de:92:02:42:27:3b:cc:ef:91:a0:39:d2:
07:51:d3:77:9e:2f:91:66:ab:9d:31:85:70:89:c3:da:27:8d:
6b:ab:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:30:40 2026 by rpki-client