
Error: rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
File: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft (raw, json)
Hash identifier: xRiBdDZmcYp2JscwGHe0bz16ODU5fcG8JElthha5s6E=
Subject key identifier: 7B:25:55:4B:ED:E3:D7:E1:CB:D7:6D:B2:B7:8A:F7:D9:F2:98:F4:8A
Authority key identifier: 00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
Certificate issuer: /CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Certificate serial: 65EFA7AAA2512CFDDE985FCBF7D65E09B92807D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
Manifest number: 0458
Signing time: Fri 30 Oct 2026 22:59:03 +0000
Manifest this update: Fri 30 Oct 2026 22:54:03 +0000
Manifest next update: Sun 01 Nov 2026 02:26:03 +0000
Files and hashes: 1: 3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa (hash: GZOOzF6+huX11NA1xpK042Y7OosAXZgQwOe/WfZ3Cq4=)
2: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl (hash: uaXCJBZ6C7qn4EVk1g6h+//O2xkbK5PnjgxhMMBY1HA=)
3: 323830343a323366303a3a2f33322d313238203d3e20323634313932.roa (hash: FaS/h3hHnQoJmaMtssOoo07jHkcwOfGokdxSZrzDKNY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl
rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 02:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:a7:aa:a2:51:2c:fd:de:98:5f:cb:f7:d6:5e:09:b9:28:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Validity
Not Before: Oct 30 22:54:03 2026 GMT
Not After : Nov 1 02:26:03 2026 GMT
Subject: CN=7B25554BEDE3D7E1CBD76DB2B78AF7D9F298F48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:e5:03:77:eb:89:21:07:f9:2a:6d:fe:60:
95:e3:54:67:0c:8c:48:0f:e9:6e:69:ab:ed:af:2d:
41:db:a8:f6:b3:43:84:6f:07:d6:21:80:9b:6a:4c:
4c:ca:5b:9a:fc:df:77:5c:79:db:62:63:d4:fc:82:
bd:77:91:d8:4f:63:b6:0d:ec:1c:36:23:d8:65:66:
f5:45:f5:6c:59:16:1a:24:db:3d:20:be:9c:d0:86:
d3:f2:a9:a3:b1:0d:00:73:7c:0d:55:79:6d:e3:5a:
4c:ce:84:df:24:82:a0:86:87:d2:e1:e6:17:5e:60:
6e:e3:22:13:7f:97:55:d3:54:0e:5c:5e:db:a5:d9:
62:56:a3:2d:48:14:37:af:e2:20:0d:d9:4a:02:4e:
2e:45:85:74:00:48:1f:23:a5:7e:ef:49:02:50:6f:
b0:a9:df:df:5c:a3:25:5d:bf:69:5c:ff:71:37:2f:
d7:94:ea:c2:61:aa:b4:1a:53:52:d5:0e:18:ea:96:
00:20:35:6b:ce:7e:93:4d:45:56:9a:3f:bc:60:ef:
1c:93:85:c4:b6:27:c1:32:67:5b:ef:8a:b2:94:15:
ec:cf:c5:36:be:2b:86:45:73:98:6d:12:7b:81:b6:
96:86:16:a0:57:90:6e:3b:1b:f1:ba:59:3a:8a:12:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:55:4B:ED:E3:D7:E1:CB:D7:6D:B2:B7:8A:F7:D9:F2:98:F4:8A
X509v3 Authority Key Identifier:
keyid:00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:25:b9:a1:9a:01:3d:bc:1b:86:d4:bb:39:f3:93:15:f4:18:
5f:ae:79:f9:be:e3:1e:43:06:ad:40:3e:00:6c:d6:f2:17:86:
45:44:7a:fe:1b:3d:a8:6d:89:a8:5d:ad:28:b2:57:6e:2e:c6:
77:5c:13:d5:fe:52:52:5a:b0:d8:6d:44:cf:75:54:16:43:33:
19:ff:04:2a:08:b3:92:ae:f1:6b:0f:75:9d:a1:ea:69:d6:4f:
cd:f9:81:02:80:3c:83:39:6f:0b:42:6a:83:69:a7:ff:63:69:
a0:31:e4:b3:46:65:76:6e:15:a3:4b:9d:e3:29:2d:d4:31:44:
d3:fb:3a:68:a3:40:96:c7:e8:3c:3a:eb:0b:68:39:5c:cf:a7:
6d:b4:6f:8b:4a:8e:71:7b:dc:f1:b7:af:a1:5a:ca:a8:9b:04:
34:70:6e:da:8b:ee:7e:35:e7:06:9d:8a:0d:64:3e:63:43:ba:
d1:24:a8:5c:35:fc:3b:b9:cb:32:4a:8f:a4:cf:39:1b:a6:cf:
af:86:45:c7:19:2c:91:ec:26:1e:f6:b6:c1:09:2b:b6:fd:39:
a1:da:e1:a9:5b:a0:6f:b8:e8:23:5c:98:95:53:3d:da:35:97:
87:80:a5:66:0d:cf:38:7c:23:81:4a:d7:00:50:3b:89:ad:9d:
c6:37:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:22:43 2026 by rpki-client