
Error: rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
File: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft (raw, json)
Hash identifier: ILIG7FQ4gN/WdtbJjUIENlmwaMFSQi9RZehrNsZTrWE=
Subject key identifier: 27:C5:AF:16:13:47:CF:84:54:34:EC:51:C5:40:29:31:F0:31:CF:01
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Certificate issuer: /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial: 4CE8B129D79D01199EC88F90845561472C3810ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
Manifest number: 04EA
Signing time: Fri 30 Oct 2026 12:24:25 +0000
Manifest this update: Fri 30 Oct 2026 12:19:25 +0000
Manifest next update: Sat 31 Oct 2026 14:15:25 +0000
Files and hashes: 1: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: WEANhVMN0FEEGQBH8SIdobfXyU0uk68mBo1xV757N2k=)
2: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: 14DVZX6+lrWsUnFwcaIY2YQwsSYL4SGq5WA45/ugDFg=)
3: 323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (hash: Iegqjvpt7xD+5+IM0EUE5suoELW/Irgw5yY5ioACdFA=)
4: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl (hash: oNcIh3W8MfeNTrkAfO17usgJ+S1RP9UDU8XKvEWPKck=)
5: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: an5Qs1cRubZBVqVzqQB2Xa+oY52qYd0b7fndSzp2AhQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 14:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e8:b1:29:d7:9d:01:19:9e:c8:8f:90:84:55:61:47:2c:38:10:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Validity
Not Before: Oct 30 12:19:25 2026 GMT
Not After : Oct 31 14:15:25 2026 GMT
Subject: CN=27C5AF161347CF845434EC51C5402931F031CF01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:3e:ca:1e:e3:60:f7:31:71:cd:c7:50:9f:
71:ac:ed:cf:2e:67:59:07:c6:58:be:e0:0d:a2:86:
b7:34:aa:82:93:19:37:42:0c:a7:86:c4:c4:6b:b3:
6f:8b:5c:b9:c1:65:74:60:f4:3c:f0:9c:5e:a3:ef:
b8:43:12:21:1c:e6:c3:b5:03:40:2a:e9:91:ed:23:
d8:c3:f0:d7:73:b9:99:a9:6d:2f:01:1d:36:4b:c4:
7e:cf:85:f1:65:41:10:27:f9:9e:81:5c:19:6b:ab:
dc:4d:af:e2:c6:a1:ec:4d:d2:e0:d6:43:fa:c3:cb:
58:3c:4a:27:22:fa:e1:cc:54:16:88:f4:04:76:17:
de:9c:a1:dd:a0:68:c3:02:bc:c4:46:8f:ac:18:0f:
1a:a1:8a:df:d1:2c:c7:eb:8e:b3:9f:26:e2:4e:4f:
18:13:d0:a3:b2:f0:33:f5:f4:ed:60:d1:a8:11:72:
b4:ee:20:68:16:1f:95:c6:15:da:20:5c:e3:e8:2a:
e8:c4:c9:eb:4a:13:a1:be:dc:97:22:f3:84:be:ff:
ea:4b:02:8e:0b:6e:77:4e:1d:9e:eb:6b:56:17:19:
9b:b8:79:ab:a4:dc:61:ad:4f:94:81:5e:48:2a:1f:
5e:c5:88:fd:67:d4:af:72:a8:87:2b:ab:74:22:5b:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:AF:16:13:47:CF:84:54:34:EC:51:C5:40:29:31:F0:31:CF:01
X509v3 Authority Key Identifier:
keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:54:dc:bd:78:9e:8a:e8:7a:fa:3f:3b:50:b1:f2:6a:d8:
c9:8e:e8:63:50:7f:05:23:37:98:72:05:df:c5:72:6e:2a:1a:
cd:82:7f:78:b1:10:55:40:dc:85:09:fe:d5:77:c1:86:f3:bc:
81:a9:70:fd:38:ea:f3:b4:7b:39:2c:c9:3c:04:98:a8:24:e9:
2e:aa:c4:c8:f4:67:c2:45:de:fb:98:e7:49:e0:4e:9a:3c:ba:
36:35:01:46:46:14:87:9c:2c:93:6a:5c:19:e3:90:68:be:89:
3f:d0:b5:7d:21:c0:14:02:b7:64:05:0e:c3:a8:ba:14:7a:22:
d3:54:1e:c3:34:85:40:52:f1:21:78:a8:4f:4c:51:ce:ae:bb:
67:14:d7:79:53:37:39:7b:36:bc:fa:00:6b:31:cb:e7:bf:cd:
b2:04:57:3c:cd:55:e7:1f:9a:b7:dc:46:89:39:d3:e4:ee:80:
37:a1:d8:32:56:d8:94:69:ec:7c:c1:a1:b5:4a:c7:25:4e:10:
f4:01:d2:52:54:91:ef:20:81:73:a4:bd:b0:5b:e1:46:65:f5:
25:6c:69:fc:86:2d:67:ed:9d:f1:ca:7c:66:08:33:c2:f2:2d:
ec:d1:55:f8:7f:e4:49:1c:a8:81:22:ea:18:02:44:82:5d:4a:
0d:7d:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 00:29:38 2026 by rpki-client