
Error: rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
File: 813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft (raw, json)
Hash identifier: pSqvbrgJANLHJ5c4tj1imqbzvpU+0BDK1wOiVqyL52s=
Subject key identifier: 02:70:83:E6:58:11:9D:EC:4F:CA:FF:57:A8:E4:20:2B:B5:CC:8F:CE
Authority key identifier: 81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3
Certificate issuer: /CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
Certificate serial: 6A9AA6AC7E953B48DA9AB08F932C3E0F3FE78B5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
Manifest number: 04EB
Signing time: Sun 01 Nov 2026 22:11:16 +0000
Manifest this update: Sun 01 Nov 2026 22:06:16 +0000
Manifest next update: Tue 03 Nov 2026 01:18:16 +0000
Files and hashes: 1: 813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl (hash: 50o530fWW9okaIuueR7ouSB80H+5eKgUVBOc4L3Z7e0=)
2: 323830343a386163633a3a2f33322d3438203d3e20323632393036.roa (hash: M5EBJVvYkvqY2ct/L07FB3hqo/mUxzbvf8Xze0xvUpU=)
3: 3137372e32332e3234382e302f32322d3234203d3e20323632393036.roa (hash: l1Qqki7J1OMupR6pqbSkQmpfYsRjQkzyo/B9cvHfgNk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl
rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 23:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9a:a6:ac:7e:95:3b:48:da:9a:b0:8f:93:2c:3e:0f:3f:e7:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3
Validity
Not Before: Nov 1 22:06:16 2026 GMT
Not After : Nov 3 01:18:16 2026 GMT
Subject: CN=027083E658119DEC4FCAFF57A8E4202BB5CC8FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:e1:f4:b5:d9:c3:05:95:8f:39:9f:75:5a:
1e:7e:8b:c4:18:e1:f2:4d:86:ac:06:c8:54:c1:69:
19:5e:bd:ab:47:bc:ee:fd:8c:15:53:d2:42:33:65:
36:1c:82:3a:81:90:54:03:8e:47:94:77:fc:a6:ff:
1f:b5:19:e3:28:1f:93:12:ec:3f:02:3b:0e:7c:36:
f3:24:b9:91:03:11:87:f3:07:51:2d:fa:7b:16:81:
91:4a:a8:15:5d:c1:56:11:80:99:e7:29:f5:e7:05:
65:55:3c:c1:9c:19:fe:02:cb:d1:12:db:b9:90:bd:
76:aa:9c:88:cc:cc:bb:4d:e7:58:9d:43:d1:84:01:
4b:d3:10:85:09:d9:06:e8:60:0a:39:32:31:60:bd:
a2:58:98:a0:96:3f:8b:87:81:89:c2:82:a7:b9:b0:
83:5e:b0:f9:90:6e:d4:78:fd:05:1f:fb:e3:06:88:
ed:5b:25:e3:9b:cc:2f:83:d4:32:52:2b:8b:2b:5c:
43:df:22:22:ff:51:d6:f4:e9:73:27:7f:f8:97:d8:
7c:ad:22:42:8f:8b:3e:8f:8f:f2:51:2d:67:94:ee:
fe:55:21:35:eb:83:d2:7c:50:7f:ee:5f:29:77:36:
99:ee:74:82:f9:10:ff:4b:69:b8:b9:be:43:3f:e6:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:83:E6:58:11:9D:EC:4F:CA:FF:57:A8:E4:20:2B:B5:CC:8F:CE
X509v3 Authority Key Identifier:
keyid:81:3D:EF:2E:5D:0C:2D:2A:3D:E1:A9:02:DF:00:38:64:9A:49:72:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/1/813DEF2E5D0C2D2A3DE1A902DF0038649A4972D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:41:8a:8c:25:d8:22:80:2f:f5:8a:7f:7c:04:5b:8f:c4:
f2:f1:08:d0:81:83:c5:aa:9c:75:ca:06:41:20:c3:23:b0:55:
d2:8b:71:61:07:96:6a:bf:25:68:28:22:4d:b9:a0:7a:a1:16:
88:71:c6:aa:47:fd:9c:b4:17:47:8e:c8:d5:ce:46:95:36:0a:
d8:69:af:41:e8:77:ac:f0:65:1d:50:1c:5f:b6:71:ff:9e:20:
38:9f:81:29:fb:f4:7a:da:ea:9f:2a:7a:c4:d7:02:fe:36:02:
2d:65:c0:3e:7b:70:3e:9b:91:91:db:0e:60:18:27:b7:42:1f:
76:84:24:98:29:d0:6d:73:1d:2c:b1:8d:8c:7f:14:8d:00:7c:
6a:a5:6a:8f:3a:78:a1:a6:d4:8a:71:80:69:a7:43:27:15:24:
ce:03:53:0d:e6:a9:6a:92:4a:bb:2e:77:2a:5c:62:a8:ae:be:
ee:e0:f3:3f:10:53:71:77:cf:a1:8f:4d:f7:c1:52:4a:5d:fb:
b0:db:1d:9e:1d:53:30:e2:b3:26:48:78:fa:55:42:fe:4f:20:
6f:4b:a0:a2:37:a0:68:5f:7e:45:3c:4f:11:86:8d:df:d3:e3:
8e:cc:c1:f4:a5:77:53:21:bb:99:05:b5:57:7c:d9:83:ef:77:
db:92:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:47:58 2026 by rpki-client