
Error: rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
File: D2FC8637672F6995F171A261D51674A50FE454A6.mft (raw, json)
Hash identifier: q0kpo6gk178qFd8zMbz4/HAeDVr2KVQBfPRe04S1AIM=
Subject key identifier: 72:C1:1A:26:36:5A:4E:E9:E6:0B:6D:97:B5:5D:3E:90:43:83:C3:5D
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Certificate issuer: /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial: 2A7DC436549C2F0BA8A0B4A34BCDE1A1E7F580A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
Manifest number: 04DF
Signing time: Mon 02 Nov 2026 07:50:00 +0000
Manifest this update: Mon 02 Nov 2026 07:45:00 +0000
Manifest next update: Tue 03 Nov 2026 08:12:00 +0000
Files and hashes: 1: 323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (hash: G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=)
2: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (hash: Uc1aN6iWD8f8P9eEDgxgniCHPV3udq5wKyIMhj5Ggxw=)
3: 34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (hash: UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=)
4: 323830343a346265303a383030303a3a2f33342d3334203d3e20323637333334.roa (hash: dbyHcT+WPlp5FVMKEMjK8+it8GRMeEQdQl+5GHqVSuY=)
5: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (hash: ouAK0kg+/aVpVcCbP4bexh8VaG4XPjMUX+oO6I58BDo=)
6: D2FC8637672F6995F171A261D51674A50FE454A6.crl (hash: haz91GlrlG0bTQlzvr+EvAGHF4NErDVfhOGiJgEulQM=)
7: 323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (hash: bPDjHNBUl/H6ulvwmhReA/RBgXTLcWuKJZY4ftKoDkc=)
8: 34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (hash: j2qGuSPvxexL96NEu1I1xCgoaChpbHCA9ZE87e2oaPQ=)
9: 34352e3233332e3235332e302f32342d3234203d3e20323637333334.roa (hash: +RyxeuoxhIKAMJEFMFWIS8Ulh+f+4ywuY0/2h9LL3ZI=)
10: 323830343a346265303a343030303a3a2f33342d3334203d3e20323637333334.roa (hash: wrniQHnF8nS0MuQ4m91PKnaCakmlJ1TuIBqSLuoiyQk=)
11: 34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (hash: YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=)
12: 34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (hash: 1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=)
13: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (hash: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=)
14: 323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (hash: xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=)
15: 323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (hash: 6FiIqFD4BA0F4EwSW3P6ekKNWYGR3g9PC/cmQmzMsCY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 08:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7d:c4:36:54:9c:2f:0b:a8:a0:b4:a3:4b:cd:e1:a1:e7:f5:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
Validity
Not Before: Nov 2 07:45:00 2026 GMT
Not After : Nov 3 08:12:00 2026 GMT
Subject: CN=72C11A26365A4EE9E60B6D97B55D3E904383C35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:aa:96:f3:5e:66:b4:bb:be:27:bf:e9:3e:
5f:20:a0:07:0d:13:39:b5:65:45:da:83:4e:27:65:
8f:8c:9b:4f:a6:f2:59:e2:2b:90:17:af:7e:ed:82:
a1:9e:95:b8:38:cd:87:00:be:7e:db:7b:fc:c8:5c:
c8:23:45:2c:e6:e6:5c:6b:bc:b1:eb:e0:4d:fb:1a:
73:15:ee:2e:33:e7:58:2b:b3:24:b1:b4:1e:20:77:
03:c5:3c:f0:33:a4:4c:c3:66:b2:54:45:77:99:aa:
e5:01:42:d3:f2:a8:1d:d1:07:2b:d5:3d:1d:d6:7a:
76:5e:ef:66:7e:a6:a5:6c:91:35:62:35:39:84:c6:
2e:ce:7a:70:cf:a6:e2:c3:56:e1:dc:0d:be:b3:f0:
c5:57:de:ee:5d:bd:46:70:73:c7:56:1c:aa:7b:86:
8e:33:d0:16:67:04:7f:9c:dd:6e:1f:98:c1:ac:ee:
e2:3d:58:f9:8a:b9:99:0e:0a:e8:b4:b4:17:1a:ea:
4c:56:86:4e:2b:aa:f4:47:45:b6:65:5d:7e:9f:eb:
a2:05:b9:63:87:80:a7:80:49:13:21:74:59:7b:61:
49:9a:38:d3:4e:4d:50:92:58:5f:b5:30:a9:fb:00:
9e:01:a8:69:2b:e7:f1:88:fa:67:51:95:8b:b0:c1:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:1A:26:36:5A:4E:E9:E6:0B:6D:97:B5:5D:3E:90:43:83:C3:5D
X509v3 Authority Key Identifier:
keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7f:2d:06:b8:42:f6:1e:d5:ae:2e:60:49:5e:65:13:5b:7d:
4c:82:5f:10:d6:c2:c3:c5:e7:f5:95:46:a4:eb:b2:ae:38:1c:
c2:49:0d:59:73:1b:d6:ad:a6:41:4f:e6:de:ae:2d:85:bb:bb:
1f:5e:4f:5a:83:42:13:35:f5:bf:24:04:ff:25:86:a9:a5:05:
95:eb:e8:17:cf:74:e4:52:76:ef:25:80:9e:26:8d:4c:be:8b:
a8:2a:28:26:45:8f:f0:c3:64:38:39:01:8c:bd:b2:76:f0:19:
65:b2:53:4c:ca:12:65:bf:e0:b5:a3:fe:30:23:94:ef:91:61:
82:9e:0f:fc:2c:d8:2f:de:5e:0e:2a:7d:08:36:f4:02:7c:9c:
cf:43:b0:5e:00:40:3e:a3:74:51:81:dd:af:1b:42:f1:f4:b5:
b0:54:27:ee:c6:23:41:54:b9:39:f9:dc:77:97:2c:c5:76:d6:
00:8c:12:4b:19:a9:87:f7:0b:17:0e:aa:6c:c3:17:15:d0:0a:
1b:95:8f:20:01:91:25:d7:ee:20:ff:59:8b:53:21:e0:cc:23:
2e:5e:7e:1f:5d:0f:bc:8f:65:e7:6a:d9:ea:3f:88:98:c4:0f:
3e:3d:42:3b:06:ba:81:3e:02:55:96:d8:bd:51:3c:c7:70:0a:
a8:bd:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:55:32 2026 by rpki-client