
Error: rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
File: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft (raw, json)
Hash identifier: Vqwbyrxr0JOnqc1ZpXbT3UJijoUptPqCgq8C1bjcUIU=
Subject key identifier: 6B:E4:DC:3F:70:2A:E0:A5:13:38:78:8F:8F:E2:D7:7C:DE:EB:7E:0D
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Certificate issuer: /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial: 503846EECB6C12CC72686D38C96727E230A2FC3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
Manifest number: 04E4
Signing time: Sat 31 Oct 2026 23:00:14 +0000
Manifest this update: Sat 31 Oct 2026 22:55:14 +0000
Manifest next update: Mon 02 Nov 2026 00:42:14 +0000
Files and hashes: 1: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl (hash: 9gQqnCTlniHe6/9TEfJfPfrusSAp1oee0b0RG+1quwg=)
2: 34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (hash: C+AgJIRk/earQAls+lntGGddukh7mvvIDu73Xt4Rp+o=)
3: 323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (hash: zIoVW5kLsGVprEH16+sBlNuGz6phhnOlnr6gicTVECU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 00:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:38:46:ee:cb:6c:12:cc:72:68:6d:38:c9:67:27:e2:30:a2:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Validity
Not Before: Oct 31 22:55:14 2026 GMT
Not After : Nov 2 00:42:14 2026 GMT
Subject: CN=6BE4DC3F702AE0A51338788F8FE2D77CDEEB7E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:46:41:84:45:75:35:5e:2a:46:16:87:07:
5a:71:05:bc:dd:2b:e5:5f:ea:24:55:7d:39:c2:92:
2e:b1:53:29:9e:81:a3:50:f4:cc:24:80:05:73:6b:
da:ea:f6:32:c5:d1:bd:9f:0c:58:0e:5d:eb:bb:b6:
a6:ce:dc:dc:63:31:ab:8b:2c:79:ea:b0:c6:f9:10:
49:54:8f:1b:e7:cb:36:b1:b5:a8:6a:da:7d:10:bd:
88:ee:08:90:fb:19:86:5e:a1:4e:e6:cd:00:71:af:
5e:40:10:47:02:53:1b:5c:b4:49:c6:22:55:81:02:
2f:ba:e1:e5:52:06:c2:70:2a:c9:f1:3f:a2:0d:ee:
28:52:e6:3b:16:a9:74:20:fd:65:a6:53:80:65:6d:
8d:d0:f7:57:df:2a:b3:b0:d1:7e:7f:57:6d:83:f2:
8e:ea:24:88:c7:bf:53:0b:7d:72:c1:bd:a6:21:d1:
bd:8e:a7:85:e4:63:a2:1c:f1:ba:06:45:f9:44:6e:
e2:1d:c7:c6:84:84:36:36:55:a5:a1:cb:d1:df:2b:
cb:c7:ea:21:85:9b:91:64:42:2f:0b:9f:ec:eb:e2:
40:1a:6e:da:a9:ed:b7:86:51:a1:47:b7:2b:b1:3b:
17:bc:78:5c:9c:8c:0c:b0:16:c9:d8:d1:70:bb:ba:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:DC:3F:70:2A:E0:A5:13:38:78:8F:8F:E2:D7:7C:DE:EB:7E:0D
X509v3 Authority Key Identifier:
keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:57:76:e8:cf:9e:c6:8a:d8:e5:9d:ef:cf:cb:86:ac:2b:43:
e3:3d:e8:3e:f8:75:b6:2d:17:9b:bc:c1:e9:91:0f:bf:03:c4:
bf:83:a9:38:3a:2d:6e:c5:57:4c:8c:94:59:86:8f:d9:4f:61:
e2:08:9f:20:46:2f:df:bb:e9:9a:e1:ab:b7:dd:f1:39:e7:0f:
e2:da:8d:c1:be:79:eb:f1:1c:23:25:8d:c1:05:24:ba:f6:c0:
57:8a:cd:54:59:48:9f:22:a2:5a:e1:a3:73:1c:c8:0a:07:0c:
a1:0a:73:dc:6c:21:01:03:06:a0:d3:43:81:65:1d:65:c1:f4:
42:c2:b8:a0:4a:47:6a:ab:a2:e7:0c:ca:c9:1c:cb:19:9b:04:
2b:b0:ba:d4:5c:e5:12:a3:7b:6d:7b:d5:9c:76:7b:c8:79:a1:
71:ac:53:32:2e:36:46:4f:d5:1e:31:c1:8f:e2:08:66:12:8b:
60:ab:a6:bd:1b:65:c9:d7:fb:34:69:da:2c:fe:f5:44:17:0d:
a9:37:c6:e5:37:6b:91:dd:6f:f1:60:d1:14:6c:a8:79:66:6f:
2f:66:1a:cd:2a:1e:e9:6c:f3:bc:0c:04:4b:74:36:ea:cf:38:
a5:3b:c6:6e:27:37:ba:8b:cf:d4:f6:28:23:aa:d1:16:e4:1d:
ed:cb:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:38:43 2026 by rpki-client