
Error: rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
File: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft (raw, json)
Hash identifier: QYPIDhp2s7GAeky8B4vLmV5afAPTygEW0Fzse+HG868=
Subject key identifier: 20:82:F7:E2:75:FC:1E:6A:FA:A5:E3:A4:D0:24:5A:AC:35:03:FB:51
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Certificate issuer: /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial: 795F4FF142C1FE25E6FB69840C9146360B1F8D0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
Manifest number: 04EA
Signing time: Sat 31 Oct 2026 22:09:20 +0000
Manifest this update: Sat 31 Oct 2026 22:04:20 +0000
Manifest next update: Mon 02 Nov 2026 01:46:20 +0000
Files and hashes: 1: 3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (hash: rBAbkLxpstl492bwOlcO3XkZLL4/sgn5F1uThWdeChU=)
2: 809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl (hash: oMsTCIckcfYF3whaInkdxrTkcJG7oBkSKy9KrfxQcs8=)
3: 323830343a323961303a3a2f33322d3334203d3e203238323139.roa (hash: TRItQeOpYsval/Vw31Qq22xuamczIyowVsrzAj+NZsU=)
4: 3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (hash: OaRBRoXvuxGmVV2EVrrO1/Yn76dygcVn77XVv7r8z7Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 01:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5f:4f:f1:42:c1:fe:25:e6:fb:69:84:0c:91:46:36:0b:1f:8d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Validity
Not Before: Oct 31 22:04:20 2026 GMT
Not After : Nov 2 01:46:20 2026 GMT
Subject: CN=2082F7E275FC1E6AFAA5E3A4D0245AAC3503FB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:42:19:cf:08:bc:67:78:c9:17:96:e6:cc:
35:58:e2:c6:b9:7e:14:f8:a2:6c:09:e9:44:ad:cc:
2e:63:48:fb:ef:46:ef:43:e8:1b:83:ba:54:ce:8d:
77:d0:f3:de:c9:eb:f2:b8:05:f9:0e:40:e9:0d:41:
b8:29:23:14:e7:a1:62:18:60:3d:50:e9:6d:ea:fd:
57:f3:b4:a3:23:97:6b:d4:9b:7d:2a:7c:a9:26:fe:
90:e8:a0:b2:1a:61:10:3c:9b:e7:14:a0:44:63:95:
e0:ce:db:37:64:e6:5c:35:cd:9a:72:f9:36:a2:ef:
d6:30:11:4e:da:88:e0:42:c6:fa:90:d3:b2:fd:9c:
4f:e9:8e:77:f4:a0:3d:d7:2a:3a:47:73:4a:a1:7c:
20:6a:24:b6:53:fd:30:d5:e6:bc:1d:2b:dd:5f:a6:
35:3c:63:b0:2c:79:8f:f4:85:65:5f:c6:74:88:42:
e8:7a:f0:f4:c7:83:67:9f:61:0a:43:5e:7c:ff:45:
4f:fd:52:6f:07:8f:6b:2b:64:c8:a5:46:cd:c3:74:
b1:3a:59:50:b1:1b:3d:83:c6:be:11:34:f2:02:6b:
94:6b:dc:4a:25:9b:3d:e0:f8:93:2e:b8:48:49:e9:
a1:88:6d:78:8b:d9:85:81:4a:18:d7:39:35:79:2a:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:F7:E2:75:FC:1E:6A:FA:A5:E3:A4:D0:24:5A:AC:35:03:FB:51
X509v3 Authority Key Identifier:
keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:24:3a:96:6b:b6:2d:83:1a:ea:46:a9:e2:2b:63:a4:9e:
7d:ea:55:62:20:21:8f:62:8d:39:31:93:d6:de:6f:fb:6d:b8:
1a:59:94:ba:52:c0:f2:09:01:39:db:f2:bf:3b:17:5b:76:11:
76:6d:a9:fc:fd:63:35:48:f8:c8:4c:08:af:18:35:2f:0d:3a:
ac:50:10:33:29:0d:3b:6c:f9:ff:0a:b7:f7:9d:d0:62:39:44:
6e:2c:7d:99:df:2e:67:a6:4a:11:3a:c4:a1:fe:1e:06:80:72:
d5:c1:7e:50:0d:d8:b1:ec:20:ac:61:52:69:58:1c:3d:d3:29:
3d:0b:e8:33:53:a9:d4:79:b6:3e:bb:fc:28:ed:5c:d4:72:72:
e6:3d:ad:c5:34:85:95:28:23:13:e5:f2:8a:56:e3:06:91:89:
1e:fa:81:15:d7:b4:7c:27:d5:66:09:50:09:84:69:c3:fd:0b:
54:40:9d:9d:e9:6e:34:17:a8:61:a6:e8:b5:41:44:1e:91:46:
f8:60:26:aa:f7:f7:e6:30:01:16:5a:a4:45:5b:e4:3b:4e:54:
1e:22:c7:5a:01:2a:14:67:ed:fc:a0:88:9e:7e:82:fa:a4:ad:
39:bb:5f:b9:a1:d9:44:ed:ea:0e:a1:69:d8:e0:3a:a9:5e:ff:
75:ae:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:40 2026 by rpki-client