
Error: rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
File: 02841926F957B15864E9B2B024AD350B3F57EC78.mft (raw, json)
Hash identifier: XmaMl6c6GXlO7eLfJRFmOUq+LPdhkyi68AixKDG+zd0=
Subject key identifier: 1D:3F:F7:CB:D6:88:CD:46:59:D6:68:A6:A4:25:D6:68:31:57:18:40
Authority key identifier: 02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
Certificate issuer: /CN=02841926F957B15864E9B2B024AD350B3F57EC78
Certificate serial: 4799A1C0874DFB17D51023BAFD1E114D6F45A358
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
Manifest number: 60
Signing time: Wed 04 Nov 2026 15:04:54 +0000
Manifest this update: Wed 04 Nov 2026 14:59:54 +0000
Manifest next update: Thu 05 Nov 2026 16:52:54 +0000
Files and hashes: 1: 3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa (hash: B+/3G+PhdEhiOUG1MnlSsGZ+YLMB49aZNWJkioNfOFg=)
2: 323830343a326636383a3a2f33322d313238203d3e20323634383839.roa (hash: SelNCK+n7byE6x3SkITTF46op56QPsSXAXJb+Wg0J/I=)
3: 02841926F957B15864E9B2B024AD350B3F57EC78.crl (hash: yLjYcAE6kXxXacvFlO7XLOJdVaEh0H+MQLJpEqrSias=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 16:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:99:a1:c0:87:4d:fb:17:d5:10:23:ba:fd:1e:11:4d:6f:45:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02841926F957B15864E9B2B024AD350B3F57EC78
Validity
Not Before: Nov 4 14:59:54 2026 GMT
Not After : Nov 5 16:52:54 2026 GMT
Subject: CN=1D3FF7CBD688CD4659D668A6A425D66831571840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:d2:70:cd:3f:70:0c:3f:75:b1:a0:29:cf:
0f:ae:a1:fa:69:b5:13:72:a3:78:49:19:83:be:9b:
e0:2e:cf:95:ab:9a:50:fd:d0:4d:5e:de:62:11:87:
d6:b1:88:b3:25:7a:6f:b7:ab:e0:31:5c:32:7e:87:
40:9f:8d:b4:c9:c5:c8:d3:87:c4:f5:c9:4d:b2:34:
25:de:7b:82:1b:60:66:40:d0:6e:20:11:16:4e:c9:
af:b6:93:cd:d2:c3:dd:1d:4f:3a:c5:7e:32:99:38:
63:37:b4:10:04:c6:0c:e0:00:07:5d:b1:39:74:e1:
64:9c:ac:36:97:f3:3f:dd:5f:53:0f:f0:ca:de:7c:
2d:12:ca:f9:2f:82:69:32:e2:dc:62:4c:9a:0a:61:
25:2e:a8:2c:3a:cd:e4:69:a8:32:52:47:ba:e8:53:
90:81:05:7f:37:23:25:97:e1:08:34:e0:84:1b:eb:
a7:f7:3c:d3:81:0b:80:0e:b7:69:83:15:5a:24:96:
a7:43:a9:bd:7d:09:40:d0:70:15:79:13:d4:3f:9f:
dc:cd:40:bc:fd:a0:b4:48:9c:a9:bd:fa:23:59:3d:
06:e3:20:52:2a:dd:bf:4a:f6:ee:87:dc:70:37:04:
c2:23:40:ac:46:f7:23:46:22:c1:40:91:bb:fe:ed:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:F7:CB:D6:88:CD:46:59:D6:68:A6:A4:25:D6:68:31:57:18:40
X509v3 Authority Key Identifier:
keyid:02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5d:d0:78:06:43:e0:4d:0b:5a:5e:b6:f3:27:c8:eb:17:bc:
fe:48:80:eb:f2:c8:be:05:73:c9:87:40:87:cf:9e:cc:66:51:
32:c7:e3:f2:0c:3d:1e:87:58:76:b4:61:dd:19:7f:06:47:ee:
69:ae:e4:9f:f7:1d:2b:2f:4d:be:65:f3:2f:11:5c:16:86:0b:
37:35:54:50:f2:a9:ac:23:51:f5:f2:27:37:eb:ca:aa:d0:80:
0a:13:6e:cc:d3:9c:9a:78:9d:8e:e8:6b:31:1b:8b:80:47:3d:
b9:dc:74:64:1d:11:05:47:78:55:56:b4:94:65:c5:42:b6:be:
31:18:46:bb:ca:ac:4b:f9:8e:0d:73:cf:87:4d:de:0e:d9:8b:
31:f5:c8:77:60:52:83:90:a8:c6:93:20:2f:7a:da:b4:62:68:
12:af:89:26:ef:30:af:e6:0b:0b:d1:bc:c6:26:42:4d:b5:92:
fa:67:87:30:c7:aa:a7:37:ee:e2:cd:5b:08:9e:43:ed:d0:36:
4e:21:86:bd:ce:ae:62:05:91:6f:17:9e:8c:0d:b4:a9:5d:bf:
9c:cd:29:19:a7:b2:e2:6b:b3:39:29:c3:87:e2:be:c4:38:37:
86:7d:06:69:b8:77:d7:c7:e0:b0:3c:cf:86:70:f2:20:60:30:
cd:a7:a0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:19:24 2026 by rpki-client