
Error: rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
File: 4474057A30776C0D117A5958EDE5DB8636FA5342.mft (raw, json)
Hash identifier: xRrW4FD7wLPNEpKtIWuts/mwXt1Qtcdsx7xsmwR5ybY=
Subject key identifier: 79:3B:06:50:E8:0E:09:0C:D8:B0:4F:3E:91:38:77:44:43:2B:0F:2C
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Certificate issuer: /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial: 2CFA4674178BCACF438B73E9907F0F7A2154F0CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
Manifest number: 04E3
Signing time: Wed 28 Oct 2026 17:10:39 +0000
Manifest this update: Wed 28 Oct 2026 17:05:39 +0000
Manifest next update: Thu 29 Oct 2026 18:30:39 +0000
Files and hashes: 1: 4474057A30776C0D117A5958EDE5DB8636FA5342.crl (hash: 9QE5laVPXgPVdE8sB1jBJ/GZMb3+VSGk7CnrVpTXb9g=)
2: 3137372e33392e3230382e302f32312d3234203d3e20323632343333.roa (hash: TlgVKtI4Em8CkGKODmP8qZy0HTU2b4hW3PEnICyZgtw=)
3: 323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (hash: jUuxCui9gcivkV4zi+gAkJ2TIZj3lrFF+Wmv+A73RR8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 18:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:fa:46:74:17:8b:ca:cf:43:8b:73:e9:90:7f:0f:7a:21:54:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Validity
Not Before: Oct 28 17:05:39 2026 GMT
Not After : Oct 29 18:30:39 2026 GMT
Subject: CN=793B0650E80E090CD8B04F3E91387744432B0F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:ef:c4:17:08:3d:07:4d:db:6e:ba:45:22:
07:23:3a:2b:be:03:05:11:88:b4:5b:df:60:84:14:
4d:58:39:70:8c:b9:a5:e5:d8:b2:ef:bf:d8:82:43:
3d:d3:58:fe:e1:8a:a0:d5:46:1d:0f:05:a0:8c:21:
ff:54:28:77:05:cc:59:1d:38:bb:48:61:d8:ac:4c:
0c:af:aa:d8:84:24:7d:61:88:e8:a6:b1:a0:bf:69:
54:96:2c:48:2a:da:d7:38:3e:ca:d4:34:fb:04:01:
19:ae:06:44:35:ff:16:83:53:16:58:cb:4b:0a:17:
18:88:ed:8c:4b:57:cf:28:89:b6:fa:39:ac:3b:0d:
14:68:91:36:b9:44:3a:4d:0e:38:fd:d6:9a:93:30:
e5:8b:dd:5a:b3:64:06:9a:ad:82:39:e4:d1:44:9a:
ab:f1:f6:b2:09:82:66:27:fa:04:d6:5a:f6:2c:ee:
81:0d:8c:41:62:f7:f7:cd:87:a4:ff:74:27:7a:d8:
e2:9c:7e:4d:e7:6d:55:27:e3:c8:2c:e0:dd:3b:25:
aa:0b:a8:ee:8d:a3:73:be:12:d8:71:89:99:c1:1c:
a7:e9:fe:ec:4e:10:97:d5:f1:d1:2c:ac:f0:3f:7f:
93:af:41:1a:e5:ab:bb:7e:4d:db:ac:3e:15:80:91:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3B:06:50:E8:0E:09:0C:D8:B0:4F:3E:91:38:77:44:43:2B:0F:2C
X509v3 Authority Key Identifier:
keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:46:90:3b:21:95:c9:1b:8f:b3:bf:7d:7a:d8:35:75:e8:
58:b1:a0:d5:6d:7b:fa:c0:42:57:2c:0c:b7:7f:13:bf:64:e5:
34:3c:c8:8c:45:1b:9f:5c:69:fd:e1:5d:41:17:92:20:1c:cb:
b6:82:e1:cb:0f:ad:4d:00:1b:ae:42:71:ad:2d:7c:19:75:53:
c8:86:19:6b:11:aa:69:24:67:2a:46:ff:a5:29:e2:a8:fb:01:
13:7e:02:aa:fb:96:97:6c:df:fb:75:cb:f7:c9:9e:b3:06:70:
a2:9b:c8:33:ce:de:ca:1c:b2:22:d7:19:d9:9e:c7:c7:ec:3a:
26:4f:07:3a:bf:be:5f:fb:2f:e9:0b:70:59:ff:d5:fd:83:80:
68:92:d0:fe:32:e6:96:e6:d8:ca:be:42:4e:f2:c2:de:0e:e4:
90:a0:58:d2:97:11:8f:31:68:fb:83:bc:1e:0d:7b:a3:eb:ef:
c2:b1:20:af:04:02:b2:34:73:08:cc:63:89:05:71:b0:91:db:
3e:c0:45:39:d7:39:95:74:59:b5:1d:d2:72:38:59:44:b9:19:
56:ba:e0:39:a0:72:50:ff:0e:2a:7d:a1:80:b2:76:9b:ba:92:
cd:f3:b5:2c:ad:f4:58:f7:40:e8:96:21:62:79:74:a7:b0:b5:
0b:49:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:58:44 2026 by rpki-client