
Error: rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
File: 36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json)
Hash identifier: IJx2lYAvmS89fhsPcRI+gX0+siFO3AdusyPbmmDLxcA=
Subject key identifier: 2C:80:A4:FF:0F:55:38:A3:93:B8:E3:DF:09:D1:78:D6:20:5D:CF:04
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Certificate issuer: /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial: 08028258E6B9688FA0C34FEC707C5C57725001FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
Manifest number: 04A0
Signing time: Fri 30 Oct 2026 17:13:16 +0000
Manifest this update: Fri 30 Oct 2026 17:08:16 +0000
Manifest next update: Sat 31 Oct 2026 20:24:16 +0000
Files and hashes: 1: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: n+HoyJG26++b3FJA1fVxT685DhRMUTDWbcID6VZG3yc=)
2: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: Pz5jvf5pyC7yvc8HVLt0O6AXU3kBiFIaZeqlerxaAYg=)
3: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: S1m+mn1VWKsMo1O/x0wU+kh3FiDlayobWz5zpBgZYBQ=)
4: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: 634Zk57vNJ6xS0Y4+2TCXWt9fxtitSuJc1Ql07m+6BM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:02:82:58:e6:b9:68:8f:a0:c3:4f:ec:70:7c:5c:57:72:50:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
Validity
Not Before: Oct 30 17:08:16 2026 GMT
Not After : Oct 31 20:24:16 2026 GMT
Subject: CN=2C80A4FF0F5538A393B8E3DF09D178D6205DCF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:8f:e7:6e:6f:fb:fc:8b:ed:ce:7a:94:a2:
d8:4e:bc:f3:ed:5a:ee:a7:be:2c:11:f9:e6:44:be:
47:64:c6:4e:11:d2:2e:7a:9b:c9:d3:f7:e4:16:89:
89:9d:88:df:19:49:e8:42:85:70:8a:0a:af:d3:6b:
1c:bb:20:b1:a6:79:95:38:e6:07:38:59:09:84:5a:
10:7d:c7:bd:5c:f1:63:59:15:a4:15:19:a2:05:f8:
11:9c:f5:1a:a1:69:1b:ed:eb:f5:1c:39:2b:b3:dd:
05:ee:7b:48:09:fe:6f:7d:18:78:2d:68:7b:0b:11:
25:1b:11:84:79:5d:d2:4b:67:dd:40:bf:fb:33:da:
e9:6e:6f:5c:4b:44:e2:62:b2:2a:6c:21:c4:42:dd:
e4:8a:d6:6b:5e:73:d8:f0:24:29:26:c8:9a:31:de:
52:be:37:3b:71:69:05:01:ff:ba:82:53:c3:f7:4c:
a9:ff:e8:fb:e1:c4:8e:8d:0a:4f:f1:84:3c:02:c0:
95:de:6d:cc:63:95:88:f3:ba:90:37:99:1a:80:8b:
8d:e1:b5:9e:63:b9:dd:bc:a7:10:35:50:ac:c0:70:
fe:79:04:2d:ce:3d:91:e6:f6:62:24:ab:ad:36:fe:
7d:a2:87:c0:e4:96:87:77:05:cd:98:fd:7c:16:c7:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:A4:FF:0F:55:38:A3:93:B8:E3:DF:09:D1:78:D6:20:5D:CF:04
X509v3 Authority Key Identifier:
keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0d:b8:04:70:27:68:d5:0b:dc:0e:20:8b:ac:6c:74:47:5d:
1b:02:2e:9c:b1:fe:8a:01:9e:bc:31:f3:a3:02:90:e8:a6:43:
32:68:a5:2a:9a:22:04:81:04:ac:fb:4a:0c:51:4b:8a:fa:92:
19:c2:f4:11:f3:79:2a:67:97:6f:df:0f:ef:11:80:c2:a9:1e:
90:13:a8:83:87:09:77:fb:3a:40:03:ae:0b:bc:c7:e2:d4:86:
1d:31:09:2c:27:7a:04:61:6c:d0:06:cb:20:a2:72:56:97:9c:
fd:d8:19:ac:0c:88:b5:51:9f:72:8a:e8:20:81:4a:29:eb:2e:
f6:3f:d1:50:ea:bb:ac:ee:88:f1:9d:0f:4d:97:ef:a1:d8:76:
18:cd:7a:d0:f2:02:7d:3f:6f:6c:75:f5:dc:1a:28:a3:81:54:
d9:4c:88:84:6d:a3:ff:95:fc:01:de:9d:19:b9:e7:09:8e:24:
dd:a8:1c:44:88:6b:e5:26:dc:25:0e:fb:cb:b2:cd:1e:85:cb:
b1:0a:01:ca:01:cc:e7:4c:9f:41:0d:f5:77:dd:80:88:f2:a7:
aa:ad:2f:59:d3:c4:2a:78:7f:0d:20:39:0e:e8:f5:60:9f:c3:
f9:4b:e4:2e:30:fe:23:f3:4a:a2:f6:05:0d:5a:d5:a6:85:19:
47:d3:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:38:18 2026 by rpki-client