
Error: rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
File: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft (raw, json)
Hash identifier: KBbeE5NV46GwI6YeLRwNsgSQnwZmXPCzaA5Ih4xk24k=
Subject key identifier: 15:7D:24:56:6E:96:46:80:C3:1C:AD:DB:03:90:EA:64:29:60:EE:3C
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Certificate issuer: /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial: 447AC9E06F65DF031AB224D8612F3C1B0C1BFD08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
Manifest number: 0587
Signing time: Sun 01 Nov 2026 22:00:00 +0000
Manifest this update: Sun 01 Nov 2026 21:55:00 +0000
Manifest next update: Mon 02 Nov 2026 22:00:00 +0000
Files and hashes: 1: AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl (hash: qoMkRoOoKYXxvU60zQuq45gWN11t71ZK/RbLz1t0P+k=)
2: 3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (hash: cnzbZ+PHLAjHkOXuZZHC2S/UIcVEQHtc3vmH6IRoJoo=)
3: 3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (hash: ELHlETihcWqCAwPowAsxt8TR/y+vFXU009Qvsh/V2lU=)
4: 323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (hash: 7bXztEkkjutzCuDzMjrpjB7HukkkBAKAC2suGoA2guQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7a:c9:e0:6f:65:df:03:1a:b2:24:d8:61:2f:3c:1b:0c:1b:fd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Validity
Not Before: Nov 1 21:55:00 2026 GMT
Not After : Nov 2 22:00:00 2026 GMT
Subject: CN=3082010A0282010100B9480E62AEE26992A566D7B5D72C492390B8A4A3B1E089EFB81E7316DD47E87CCF736575284F88B01242117526FF7E2400DE6B7637D198749F6BE9454231D5ACF0281462DD70B63602DCFBFCD900494E79E2D89AB1731F887DC874B9ED16C23D9F04E40C991E8D2BC23A2442290CF257201C0546CBEF6F111D3EEE7A9160EEC55CF4B199C64785AF1D4460A24C29B3BDE86E6E1B538866ACBEF56E3B5A109E3DEF1D7A377DCC615ADB058847C0D18017781190484B71FAEFE703A77F53A51AEF58B8E444FE3BB36BBB0F250E10FC83CD255E57A35B595AD232F625D274F3AC0540765640F03DEA39D0FDC177ED17579CE379DA1BC83E0096B03C0A0109D7B6F50203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:0e:62:ae:e2:69:92:a5:66:d7:b5:d7:2c:
49:23:90:b8:a4:a3:b1:e0:89:ef:b8:1e:73:16:dd:
47:e8:7c:cf:73:65:75:28:4f:88:b0:12:42:11:75:
26:ff:7e:24:00:de:6b:76:37:d1:98:74:9f:6b:e9:
45:42:31:d5:ac:f0:28:14:62:dd:70:b6:36:02:dc:
fb:fc:d9:00:49:4e:79:e2:d8:9a:b1:73:1f:88:7d:
c8:74:b9:ed:16:c2:3d:9f:04:e4:0c:99:1e:8d:2b:
c2:3a:24:42:29:0c:f2:57:20:1c:05:46:cb:ef:6f:
11:1d:3e:ee:7a:91:60:ee:c5:5c:f4:b1:99:c6:47:
85:af:1d:44:60:a2:4c:29:b3:bd:e8:6e:6e:1b:53:
88:66:ac:be:f5:6e:3b:5a:10:9e:3d:ef:1d:7a:37:
7d:cc:61:5a:db:05:88:47:c0:d1:80:17:78:11:90:
48:4b:71:fa:ef:e7:03:a7:7f:53:a5:1a:ef:58:b8:
e4:44:fe:3b:b3:6b:bb:0f:25:0e:10:fc:83:cd:25:
5e:57:a3:5b:59:5a:d2:32:f6:25:d2:74:f3:ac:05:
40:76:56:40:f0:3d:ea:39:d0:fd:c1:77:ed:17:57:
9c:e3:79:da:1b:c8:3e:00:96:b0:3c:0a:01:09:d7:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:24:56:6E:96:46:80:C3:1C:AD:DB:03:90:EA:64:29:60:EE:3C
X509v3 Authority Key Identifier:
keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:7e:40:5f:66:85:6c:2d:25:f2:70:8e:63:ea:31:af:a6:
a3:89:e2:b4:2c:1d:39:9c:71:a1:85:db:9b:73:9b:ae:42:35:
fd:15:22:52:8d:88:fc:90:7d:33:3a:ec:31:eb:ad:30:b7:89:
cf:54:4e:42:a1:b7:0a:6b:74:41:0b:67:a0:31:f0:2a:ac:80:
48:62:40:b9:69:31:6c:c1:2b:72:2a:aa:e2:fb:bc:75:f3:c6:
0f:5e:da:8f:55:bd:28:48:3e:cd:60:29:d1:1c:21:1a:58:74:
05:c0:ab:8c:51:60:58:75:c7:b1:74:0f:42:80:9c:5f:ad:65:
50:ef:cd:1d:05:60:bf:34:26:59:33:94:26:9a:af:29:e0:2c:
e6:9b:dc:01:42:69:8e:7b:89:64:a9:02:7d:b9:72:fc:0f:4d:
e3:e3:ef:c7:27:b5:ba:a5:88:9e:aa:f6:f8:34:b1:1f:98:fb:
72:b8:7f:08:d7:48:70:bc:4e:94:69:46:e3:d6:e1:ec:a0:23:
e5:ee:a1:49:e2:55:d3:4a:45:41:2c:ba:7b:31:f5:5d:6b:58:
bc:d2:0d:2d:e2:f0:8c:ca:9e:a3:b0:a7:cd:6e:d6:a0:f3:4e:
31:57:1c:e7:ef:22:fd:1c:0c:3b:b9:3b:df:2d:22:0f:8d:86:
b1:67:28:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:33:43 2026 by rpki-client