
Error: rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
File: 824E306D67C40D73D502C221E4F1A4CFFC71485A.mft (raw, json)
Hash identifier: 3aQhPVClDkBZ45wAvK739XJwL/h/WQ14tmBStehXduc=
Subject key identifier: FD:63:77:04:55:D1:22:A3:BE:E2:B8:A8:54:B7:21:80:25:EE:2B:B5
Authority key identifier: 82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A
Certificate issuer: /CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
Certificate serial: 0C531AC851466919B9E30DD053594E916C989E10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
Manifest number: 76
Signing time: Sun 01 Nov 2026 12:51:50 +0000
Manifest this update: Sun 01 Nov 2026 12:46:50 +0000
Manifest next update: Mon 02 Nov 2026 14:07:50 +0000
Files and hashes: 1: 3139302e3137312e38342e302f32322d3234203d3e20323731323630.roa (hash: Fq5P2Pq5d7tfWM4rnQ58/Ke6FtzMqN484d7AKlL1fB8=)
2: 323830343a373862343a3a2f33322d3438203d3e20323731323630.roa (hash: NJluVR5LwLr0AMMNNbPRGRGpM84MelSrKC4L3ONMETY=)
3: 824E306D67C40D73D502C221E4F1A4CFFC71485A.crl (hash: EpUQe+c8QsG1EF1lQIVoTkirBuALiIIatWi24X8QcRA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl
rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 14:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:53:1a:c8:51:46:69:19:b9:e3:0d:d0:53:59:4e:91:6c:98:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824E306D67C40D73D502C221E4F1A4CFFC71485A
Validity
Not Before: Nov 1 12:46:50 2026 GMT
Not After : Nov 2 14:07:50 2026 GMT
Subject: CN=FD63770455D122A3BEE2B8A854B7218025EE2BB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:a3:df:cb:8a:1b:93:cf:dc:ac:03:79:31:
62:26:a6:08:2b:50:b5:5a:27:cc:4d:a1:b0:86:89:
90:4b:42:ab:de:e6:37:ed:04:b4:9a:d1:51:49:0d:
e4:50:04:2e:15:51:41:2f:37:6f:31:c8:8e:f3:4a:
af:1d:eb:99:df:03:8e:0c:c9:db:80:98:da:6d:a7:
2b:10:33:91:af:4f:f0:50:8b:a5:52:21:77:8f:39:
83:99:fb:f9:c1:23:06:dc:51:1b:58:39:b6:88:dc:
f2:d7:19:64:da:1f:86:4f:e9:f3:f8:62:fb:b2:a1:
0c:f2:70:4a:3c:9b:6a:c1:f0:df:a6:d3:e7:3d:2c:
61:97:7f:ad:b6:c9:99:27:fa:17:f4:c8:06:39:4f:
5a:80:53:e3:08:0e:c4:46:54:68:70:cb:b9:e5:8f:
dd:73:04:cd:3f:17:df:b9:ee:da:2b:02:e6:ec:96:
7b:b0:6b:90:e4:ca:e5:8b:f9:bf:46:f1:84:7a:6c:
c7:44:70:4e:fc:71:3b:4e:fa:0e:a4:55:de:9b:94:
d6:5e:67:f3:ff:28:a6:8e:70:78:2b:4e:b6:6b:e1:
9a:8a:92:8e:a4:be:86:b4:43:b3:ff:a0:18:c6:bb:
5d:ae:33:99:96:e7:8b:d4:80:e8:4d:f4:84:b7:ed:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:77:04:55:D1:22:A3:BE:E2:B8:A8:54:B7:21:80:25:EE:2B:B5
X509v3 Authority Key Identifier:
keyid:82:4E:30:6D:67:C4:0D:73:D5:02:C2:21:E4:F1:A4:CF:FC:71:48:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/824E306D67C40D73D502C221E4F1A4CFFC71485A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/824E306D67C40D73D502C221E4F1A4CFFC71485A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7b:29:b0:e7:6d:32:01:23:b8:fd:88:c8:5c:a1:d7:c5:9e:
dc:66:1f:99:10:7f:fd:75:78:5f:74:01:36:64:3d:3f:b6:8b:
df:ab:ea:92:3a:0d:40:a8:f0:32:62:88:6d:69:8b:86:1e:7d:
40:af:26:bc:6b:19:5f:4c:1e:2f:5d:f9:ca:df:95:2c:d7:66:
01:2e:b1:e5:b4:8a:2e:ac:9a:76:cc:e3:16:f8:f6:55:88:bc:
80:ca:29:b3:86:9e:a2:1b:d1:68:0e:ca:b0:73:c0:c2:c7:93:
d5:03:31:2e:bd:14:19:fd:2b:15:5a:a3:6e:b1:7d:e8:81:b6:
a2:e4:89:43:44:9e:83:e6:93:89:ee:76:6a:49:3c:5e:58:39:
e6:7d:b1:ef:9f:69:05:97:52:d6:fc:9e:a1:71:0e:71:d4:ab:
aa:cf:f2:76:f9:39:02:30:28:98:b9:9a:1c:a1:67:e9:ed:5d:
3a:79:84:ed:52:d1:7f:93:73:fa:94:23:4b:b5:2d:ec:1f:d8:
aa:f8:3e:76:9a:5b:84:1e:be:59:9f:67:a6:bc:5f:fa:34:83:
30:1e:48:72:1d:26:39:fb:8f:ab:bf:65:be:40:b6:c7:ec:29:
3a:63:1f:5e:ab:e9:8e:bb:bf:b3:bb:72:6f:3a:9a:f2:21:ef:
e7:f2:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:29:06 2026 by rpki-client