
Error: rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
File: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft (raw, json)
Hash identifier: yBHLHZ9WAOSNCedeMmrJ9de774Mhj1QD9SGljZAGAS4=
Subject key identifier: B5:58:B3:03:5A:CF:D0:02:F3:CB:1F:84:CB:63:28:59:66:AC:BA:B5
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Certificate issuer: /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial: 6B43C024406ABD25EC810A2AB4D4DCC491BD31C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
Manifest number: 55
Signing time: Fri 30 Oct 2026 20:20:43 +0000
Manifest this update: Fri 30 Oct 2026 20:15:43 +0000
Manifest next update: Sat 31 Oct 2026 21:30:43 +0000
Files and hashes: 1: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=)
2: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=)
3: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl (hash: 7N1v6BjofsCXKbETuXfPkZkfp2vNMFjopSyGgL3YwlM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 21:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:43:c0:24:40:6a:bd:25:ec:81:0a:2a:b4:d4:dc:c4:91:bd:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Validity
Not Before: Oct 30 20:15:43 2026 GMT
Not After : Oct 31 21:30:43 2026 GMT
Subject: CN=B558B3035ACFD002F3CB1F84CB63285966ACBAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:b0:82:fd:90:39:2a:db:ee:21:37:99:f3:
b0:df:a5:75:02:a1:1b:c3:0f:16:a7:13:7c:6d:8f:
c2:01:b5:c8:9d:ac:65:6c:46:ec:89:cf:fe:37:ca:
47:2e:72:53:67:f1:20:dc:c3:f0:ea:5e:e6:1b:c8:
15:c5:ab:ca:4f:fd:39:5a:bc:4e:ad:c9:41:13:ef:
64:ca:d4:9e:99:32:57:0a:bb:3a:44:14:fb:1c:0f:
b5:26:60:a1:bd:3e:46:64:75:1d:7f:34:34:4f:21:
38:17:e2:a2:70:86:c0:04:34:44:7a:7b:cd:33:6b:
8a:30:1f:2d:e7:52:40:24:61:90:4c:65:bb:6d:c9:
cf:a9:45:5d:ec:53:c3:59:60:e9:0b:75:ee:f2:48:
1f:2b:ff:b2:a6:6e:7d:4a:9c:1f:dc:86:a9:c0:a6:
23:10:c3:de:2b:43:00:f8:43:68:bb:e8:50:e4:88:
6a:a7:cb:dd:1f:b7:39:3f:ce:08:60:e1:fc:df:50:
4f:2a:7f:b9:7a:04:11:94:69:d9:c7:87:74:ac:22:
42:f4:d6:95:5d:7b:79:0c:73:52:c8:59:18:86:45:
cd:f0:10:c5:c0:ac:90:e0:46:3e:41:6f:e7:59:f2:
8c:c1:87:41:e5:c8:65:ae:74:28:f9:09:34:d9:be:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:B3:03:5A:CF:D0:02:F3:CB:1F:84:CB:63:28:59:66:AC:BA:B5
X509v3 Authority Key Identifier:
keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:95:8d:10:c2:ab:f5:40:6a:f9:cc:20:dd:20:0c:2a:ef:
be:bb:38:01:23:63:17:ea:35:c8:d9:85:7d:d6:1b:0c:9e:e4:
c6:2e:33:50:94:ea:cd:3d:63:93:f1:ca:fe:ed:cf:ed:94:bd:
5a:49:f9:9e:12:1f:91:bc:d6:3e:3b:fb:10:4c:16:9c:c5:be:
8d:51:4c:d2:91:fc:af:0b:e8:55:8f:cc:84:98:3b:68:3c:04:
4f:00:0c:2d:8e:41:89:b1:67:f6:7a:87:cc:ec:e9:09:a6:9e:
6b:52:db:9c:8b:09:87:52:a8:70:96:20:73:44:e8:26:92:55:
f2:dd:cd:c8:f0:0e:b0:32:08:38:17:45:f4:e5:5a:31:17:af:
df:8d:83:94:cd:70:3d:45:f6:ca:df:4b:ad:b2:4b:a7:bc:3a:
77:9f:05:0c:7d:cc:5a:68:cb:41:de:89:15:f6:40:a4:b1:90:
7c:23:33:c7:67:8f:bf:cc:bb:1e:d0:03:cd:5a:bd:49:fe:31:
31:f3:c5:8f:9d:f7:e6:1a:f8:f5:e3:4f:dc:d3:ee:d4:3d:52:
b8:98:41:84:85:3e:7b:03:c3:18:7b:18:29:bc:b0:c1:35:d4:
3d:1d:e2:61:aa:e1:71:8b:bd:49:c0:d7:b1:76:68:e9:7c:59:
ce:dc:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:51 2026 by rpki-client