
Error: rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
File: D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft (raw, json)
Hash identifier: MRzWnf+IxNPhE1q7uIJHG8JHscwPstsRi6aAfa9zVqw=
Subject key identifier: D2:52:B2:D0:60:74:2A:9F:13:EF:5D:D6:BF:A9:47:23:D7:F2:5F:23
Authority key identifier: D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Certificate issuer: /CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Certificate serial: 2C0BBD56D740EF86C5A2069A693C4FA497A6C13D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
Manifest number: 32
Signing time: Thu 15 Oct 2026 00:19:05 +0000
Manifest this update: Thu 15 Oct 2026 00:14:05 +0000
Manifest next update: Fri 16 Oct 2026 04:07:05 +0000
Files and hashes: 1: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: 6usHz3+mqcfGTvGn4dRYN3S7uTdqwQG5qEnYsoLEnl4=)
2: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: AOVxgLFY04uhIZbI/8DqQGdXzhrDBnsmgZoUxJXyeEg=)
3: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: PS+XeGhXOEmD+nirZe3TWzTMK43VyxVVxjALwkpvPBs=)
4: 323830343a6131383a3a2f33322d3334203d3e20323633303232.roa (hash: z7PegJXqQ0sB+NbE4LvDulgB8YzcMK7gQvzkM6Rxg/A=)
5: 3138362e3234392e31362e302f32312d3234203d3e20323633303232.roa (hash: nus+ZX1/L4riIe5h7MirtLUd0sb2JMc7KIsmO+pjLXA=)
6: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: euFs/tw+SFJKOPYfLqxSd0sFuD7nvLGJcHdUe81QfXc=)
7: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: Wa/V4eertNy3OlZH2Xftrx0fU6Y3WcRTDr5j1dScR54=)
8: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: bpCZuy4rAYg1IgAyehuvFWnQ2ATRS4GhKwrH84MNFpI=)
9: D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl (hash: QekL6yoFVSGPHTT8Hti2rFu3/AJKtHb7XnpPpvp/naU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 04:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0b:bd:56:d7:40:ef:86:c5:a2:06:9a:69:3c:4f:a4:97:a6:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Validity
Not Before: Oct 15 00:14:05 2026 GMT
Not After : Oct 16 04:07:05 2026 GMT
Subject: CN=D252B2D060742A9F13EF5DD6BFA94723D7F25F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:ee:7f:b9:8b:b0:43:42:d9:6b:dd:32:cd:
1a:a0:c2:af:a8:52:b9:7b:42:e0:21:78:23:11:d8:
7f:69:03:28:c6:69:c8:50:05:d1:1e:d6:88:ec:c7:
85:b5:b1:41:85:67:d9:f8:21:3e:eb:4b:cd:9a:6b:
64:e7:cf:56:a1:18:b2:58:60:02:fa:e0:b2:eb:24:
91:ad:01:cd:8a:a3:32:32:38:99:13:b1:bb:5f:c4:
22:8a:9a:84:f8:f4:c0:d1:0a:7c:79:d2:8d:6f:1f:
4d:7b:05:80:af:04:99:8c:3b:ed:49:b7:b3:fb:b8:
14:9f:47:5f:74:03:c1:ad:a4:5f:66:11:67:a0:3c:
e2:02:5b:70:20:3d:11:17:0a:d0:ec:0d:85:51:da:
14:16:27:1b:de:2c:ee:ec:23:65:ac:d2:da:2b:0b:
b7:37:f5:b7:7f:78:83:1d:b9:67:35:b9:10:72:92:
8b:f5:2c:b8:7f:e6:27:58:3e:0c:72:3f:02:14:80:
af:5c:11:38:d6:1c:4b:18:5b:e7:70:71:46:fb:44:
34:d0:dd:b0:17:b3:20:d4:3e:b5:cc:cc:d4:63:ae:
48:9a:10:b1:fd:ed:86:57:96:17:09:80:11:c5:7d:
ca:9d:13:55:e2:04:9f:59:8f:f6:c9:b9:58:47:59:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:B2:D0:60:74:2A:9F:13:EF:5D:D6:BF:A9:47:23:D7:F2:5F:23
X509v3 Authority Key Identifier:
keyid:D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a8:be:c4:c4:41:6b:12:cb:26:20:08:46:9c:a1:df:cc:2d:
69:2d:4b:5b:80:9f:cf:a0:bf:ed:19:8c:71:52:93:36:04:2a:
a8:10:e7:df:b6:bc:99:42:bb:2a:4a:78:06:56:f9:6b:cb:94:
39:b1:f0:bb:a4:0b:dc:8a:a5:2e:4b:29:1e:c4:49:19:25:28:
de:d4:52:b2:20:05:fc:b9:b2:8e:7b:af:f0:7f:5e:7b:77:39:
7d:be:a1:8f:28:8a:b0:fa:02:5f:67:a2:04:7a:00:8a:be:ad:
34:54:fc:b3:be:78:96:63:5c:c4:2e:ab:48:5e:52:56:83:5c:
21:a1:be:b6:f6:cf:f7:54:56:f6:c2:ac:eb:12:b5:24:b0:18:
b6:90:29:36:95:a2:e5:58:29:50:ba:58:a4:a3:2a:e9:8b:9e:
b6:8f:57:5b:46:66:1b:b5:d7:6b:36:e3:c4:6f:38:22:c5:81:
0c:19:fb:a7:ee:d3:08:fd:7f:d0:60:bf:5b:08:83:98:46:1a:
40:75:2e:87:1b:ff:98:54:bf:b7:27:d2:48:a9:88:e2:6d:3a:
76:29:1a:2c:4a:68:05:95:27:39:bc:10:de:17:ce:d0:47:eb:
79:90:9b:1e:2d:84:3f:d5:bf:11:95:f1:8b:17:cc:2f:b2:51:
27:44:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:55 2026 by rpki-client