
Error: rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
File: 062347D8F4F770415633E22D794F8D58F390BA86.mft (raw, json)
Hash identifier: nQsrWFF0xEJNsV5Yb0VaJqUlDmh/KeS5ftWBPVii2jY=
Subject key identifier: C8:B8:49:9C:67:6C:A8:98:13:25:78:83:72:EA:7E:EC:FA:86:9F:D7
Authority key identifier: 06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
Certificate issuer: /CN=062347D8F4F770415633E22D794F8D58F390BA86
Certificate serial: 4EE5A72E08DD9C84D84FF4394EDA6DF000A373FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
Manifest number: 0584
Signing time: Fri 30 Oct 2026 19:10:00 +0000
Manifest this update: Fri 30 Oct 2026 19:05:00 +0000
Manifest next update: Sat 31 Oct 2026 19:10:00 +0000
Files and hashes: 1: 3139302e38392e3136382e302f32322d3234203d3e20323730333833.roa (hash: SBUrw02b1xdhOVQH1EQlyfdsqcQOVCjMZQ9TaX5wu8Q=)
2: 062347D8F4F770415633E22D794F8D58F390BA86.crl (hash: EA+lQA9IlS1GgkzA5Lg+3oem1lPoCBHwRHPt/8YYwDQ=)
3: 323830343a366232633a3a2f33322d3335203d3e20323730333833.roa (hash: +MEKwdws3x3s9D2KqYylPSLBoKLUSSShhawfHhm3wbM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 19:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e5:a7:2e:08:dd:9c:84:d8:4f:f4:39:4e:da:6d:f0:00:a3:73:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=062347D8F4F770415633E22D794F8D58F390BA86
Validity
Not Before: Oct 30 19:05:00 2026 GMT
Not After : Oct 31 19:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:44:3e:4a:b1:0f:a5:e7:41:6a:ef:f5:ef:
51:07:1f:a2:4b:fa:e1:6a:55:e9:98:ef:c6:84:2d:
a3:d0:b3:6f:d0:d7:9f:c2:56:99:6f:e6:cb:4c:65:
20:87:e7:8a:01:23:f9:a2:d0:6d:67:a1:9e:67:86:
f1:69:49:d1:5e:a2:5c:05:b4:41:06:7a:66:70:62:
2f:91:66:fd:12:84:f8:14:91:0f:3c:ef:6b:e1:22:
af:43:17:11:bd:7d:5b:7d:07:58:b8:32:68:1b:6d:
e6:79:cc:b7:b2:96:ac:e6:64:cb:8a:83:d3:87:b7:
ad:21:f7:fd:bd:95:7f:5f:0c:84:7e:44:2e:38:aa:
01:5a:d9:6d:d5:04:f7:a8:a8:7e:88:a5:01:c1:62:
26:53:7f:fd:c7:fd:dd:fa:c9:ab:0b:06:e7:d0:a0:
39:bf:c2:ec:92:7b:fc:5b:a7:37:93:48:23:50:3b:
13:f2:1e:97:41:77:e0:cb:80:61:1c:19:2c:1d:c8:
42:30:80:ac:f4:64:23:6c:61:7a:09:78:d2:9b:a1:
1d:0b:ad:d2:d0:9e:72:c8:f2:ae:60:ad:f9:8b:98:
bc:ff:51:b0:29:14:27:45:88:39:c2:2b:5f:32:9b:
53:b3:2a:68:d9:8d:14:85:b3:2b:8e:60:e5:d3:fa:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:49:9C:67:6C:A8:98:13:25:78:83:72:EA:7E:EC:FA:86:9F:D7
X509v3 Authority Key Identifier:
keyid:06:23:47:D8:F4:F7:70:41:56:33:E2:2D:79:4F:8D:58:F3:90:BA:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/062347D8F4F770415633E22D794F8D58F390BA86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/1/062347D8F4F770415633E22D794F8D58F390BA86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:c2:24:b1:a2:7a:46:42:af:b2:da:50:ca:1c:40:ab:08:
97:2a:71:64:89:23:b3:3f:19:a0:29:12:c9:04:c1:9e:58:d3:
b0:f7:d7:26:51:99:f0:43:4c:06:90:12:b2:53:4a:22:eb:5c:
f7:cc:56:2b:38:00:a0:11:92:b4:61:e0:ce:cb:8b:9f:47:cf:
cf:ca:07:88:ec:ea:94:aa:c1:d3:f8:26:0b:6c:ce:c5:b4:48:
81:e2:68:2e:67:82:42:0f:af:82:e8:bf:88:13:f1:3f:68:cd:
2b:11:6c:58:36:47:42:0a:c3:9c:05:d4:5c:e2:ee:bc:c3:1f:
1c:e4:c6:6f:db:df:d9:ae:67:f6:50:3e:5b:99:0e:af:b9:13:
a0:27:20:91:35:78:c5:97:6d:10:4b:5b:ae:fb:3c:1a:77:0e:
94:6c:ae:c7:08:fb:02:a5:93:f8:4f:9b:80:dc:c3:76:c2:b1:
ee:ea:d6:98:cf:83:c8:d9:41:fe:85:98:ad:61:84:1d:f8:70:
a2:03:da:e8:89:a4:14:0d:0d:6c:81:71:4b:4d:88:3b:26:88:
88:d9:03:73:d2:51:d9:ef:6e:82:dd:db:a4:6c:18:b3:24:c8:
1d:13:d1:43:3e:2a:19:16:0c:7f:11:96:6b:04:53:5f:40:3c:
f6:1f:1d:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 10:12:23 2026 by rpki-client