
Error: rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
File: 4474057A30776C0D117A5958EDE5DB8636FA5342.mft (raw, json)
Hash identifier: 54H2n/wfwQQWdcOsyM2/6oblAYxnF/8/6N/dm7HaMeY=
Subject key identifier: 6F:F7:CE:A9:D1:11:BA:29:1D:01:14:CC:58:33:B9:B2:73:A2:4C:4E
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Certificate issuer: /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial: 6994CE953786DFC34E0186AF68832030CB8BCA0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
Manifest number: 04A4
Signing time: Fri 11 Sep 2026 08:56:20 +0000
Manifest this update: Fri 11 Sep 2026 08:51:20 +0000
Manifest next update: Sat 12 Sep 2026 11:24:20 +0000
Files and hashes: 1: 323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (hash: jUuxCui9gcivkV4zi+gAkJ2TIZj3lrFF+Wmv+A73RR8=)
2: 3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa (hash: TlgVKtI4Em8CkGKODmP8qZy0HTU2b4hW3PEnICyZgtw=)
3: 4474057A30776C0D117A5958EDE5DB8636FA5342.crl (hash: 61BCgX7Mdl5FhtyCMb7B8YtrXycA7DNSe3evN9MVd/A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 12 Sep 2026 11:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:94:ce:95:37:86:df:c3:4e:01:86:af:68:83:20:30:cb:8b:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Validity
Not Before: Sep 11 08:51:20 2026 GMT
Not After : Sep 12 11:24:20 2026 GMT
Subject: CN=6FF7CEA9D111BA291D0114CC5833B9B273A24C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:9e:2a:95:69:56:79:33:34:72:79:e5:c4:
e3:d9:79:f3:17:46:e4:ae:96:ce:17:86:ef:b6:3c:
ce:c8:49:44:88:98:16:a1:93:ab:38:c2:e5:5b:09:
33:b0:56:33:8b:63:b3:3d:17:63:8b:c5:07:17:d9:
d9:af:7a:f9:f2:93:6c:d7:96:64:26:db:54:29:13:
0a:48:8e:0a:03:21:52:d3:72:5e:7d:cc:b8:d9:3b:
15:a4:57:03:9b:d2:55:5d:b5:71:74:2f:f4:28:e6:
65:3c:8a:f2:ee:64:f8:02:12:64:ed:83:c7:28:96:
bf:5b:ed:fd:67:94:a8:d6:19:0b:de:b5:ab:9e:01:
9e:b3:a3:35:51:71:d3:2c:2d:d1:e2:4a:14:2f:65:
6c:2f:75:34:b4:5d:fe:5d:57:ff:0c:18:fe:f1:76:
88:84:b8:2d:13:65:8d:e3:73:54:db:17:68:9f:cc:
32:c5:75:86:48:9d:9a:81:54:6c:97:60:85:43:bc:
2f:da:52:1f:bf:42:75:bb:d9:01:93:29:8c:b5:ec:
91:82:43:ba:08:0e:de:62:89:e0:eb:d1:77:64:0b:
4b:00:ef:3a:92:83:aa:0b:1a:7e:44:bb:13:b6:0e:
01:44:6d:ef:36:01:eb:a8:46:7c:c7:be:47:34:61:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:CE:A9:D1:11:BA:29:1D:01:14:CC:58:33:B9:B2:73:A2:4C:4E
X509v3 Authority Key Identifier:
keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:ea:bd:c1:c6:0e:7a:eb:69:7f:f7:77:0e:65:63:6f:69:
5d:00:d9:14:14:5c:b1:b4:ac:11:03:bf:b3:66:1e:d3:20:a4:
3c:67:6f:1c:93:c3:5d:e3:9f:63:ae:5c:2b:b6:56:08:c1:d3:
17:c8:de:7a:14:9e:96:85:61:72:91:7b:7d:07:3b:23:d6:0b:
02:75:be:95:41:d2:72:bc:3f:e1:f7:5f:37:d8:3d:b9:b3:4f:
7b:aa:1d:9a:cd:82:0e:4f:ae:37:17:d8:0f:2e:eb:fc:60:7f:
b8:84:9e:82:8b:e1:2f:47:28:f5:28:85:56:20:f7:6c:0d:e9:
06:6c:bd:2a:8d:35:fb:81:25:53:e8:e9:b3:68:31:a5:e3:14:
3d:ce:0e:c5:91:92:a1:8e:46:2f:c2:50:fb:5b:63:d8:15:62:
e5:c6:56:d0:ff:19:5c:c8:df:43:05:75:8e:55:99:6e:fc:3f:
49:32:3c:db:74:93:62:7b:83:5d:da:64:95:2a:d8:5c:4a:7c:
93:df:47:e0:fd:ed:a0:b9:43:ed:70:e6:a9:5b:26:49:06:27:
4b:d8:43:7f:16:8e:54:b0:10:32:ac:25:a9:29:c4:81:97:8b:
93:f8:2c:c5:7d:cc:8a:82:10:4e:1e:5e:c2:03:d1:5c:da:a8:
b6:7f:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:16:46 2026 by rpki-client