
Error: rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.mft
File: 62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.mft (raw, json)
Hash identifier: jBudpdsWgJ9lHL1eh30FEfPTKWIP+ZpUeKh+emwtiFY=
Subject key identifier: A9:82:13:6F:ED:1A:AE:A3:E4:28:58:C9:EA:73:9E:F3:0F:C6:0E:C1
Authority key identifier: 62:50:1D:DF:2E:15:38:4D:F2:0F:DA:DD:FA:FC:4F:85:4C:1C:41:FD
Certificate issuer: /CN=62501DDF2E15384DF20FDADDFAFC4F854C1C41FD
Certificate serial: 7D1ECF039479D408B1FE59A811DBF06A6D189290
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.mft
Manifest number: 048F
Signing time: Sun 01 Nov 2026 18:26:57 +0000
Manifest this update: Sun 01 Nov 2026 18:21:57 +0000
Manifest next update: Mon 02 Nov 2026 21:24:57 +0000
Files and hashes: 1: 62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.crl (hash: nHUine8acFBP3zH1YaFo0FWu6NU+s0zJ5tEccCtp3dw=)
2: 323830343a313338343a3a2f33322d3336203d3e20323633353337.roa (hash: 0KQxHuf+fuBJdEtXrWnADSrkfmY7BWWzWMx7zCxnQ9k=)
3: 34352e37302e3134302e302f32322d3234203d3e20323633353337.roa (hash: GilRLBHvKKSqkaceORiHewmfqxEOsIu4pu6prrHm3yQ=)
4: 3139312e352e3131322e302f32302d3234203d3e20323633353337.roa (hash: /oEheVI3ocnfq9o+L7zIlACfThbgoUdyhjMynxWKgIQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.crl
rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 21:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1e:cf:03:94:79:d4:08:b1:fe:59:a8:11:db:f0:6a:6d:18:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62501DDF2E15384DF20FDADDFAFC4F854C1C41FD
Validity
Not Before: Nov 1 18:21:57 2026 GMT
Not After : Nov 2 21:24:57 2026 GMT
Subject: CN=A982136FED1AAEA3E42858C9EA739EF30FC60EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:c9:bb:75:8d:15:50:17:55:66:01:4a:59:
77:7a:9e:83:93:02:1d:9b:c2:6e:64:e7:dd:75:5f:
34:4e:83:28:30:84:8c:5f:f4:4b:da:25:9a:5c:36:
c6:0b:0b:cc:bc:2f:e1:5c:41:81:56:70:df:18:bd:
f5:c6:53:4c:e9:70:3f:6e:9b:04:9e:ed:9e:e4:27:
8a:ed:a9:a5:ee:6d:4f:1d:50:6e:3c:2a:42:60:fa:
23:7d:5c:90:62:fa:32:c0:2a:23:99:f8:e3:9a:dd:
f6:62:e1:26:17:ae:79:3b:5d:dd:ec:a3:b0:5b:ab:
74:51:e5:d7:a5:27:6f:ad:a0:60:44:25:39:93:3f:
5d:93:38:75:04:6d:1f:cb:0e:7a:74:19:f1:f9:bf:
ae:ad:a3:58:74:71:93:11:6d:11:07:67:ee:9c:7f:
0c:54:1a:33:7b:aa:cf:97:29:02:8b:bb:8a:97:ca:
dc:d1:4b:90:0e:92:f6:9d:bf:76:4e:6c:a0:56:03:
a2:08:13:f6:86:e3:c9:2f:17:69:33:11:c5:d3:17:
a9:f3:2b:63:d1:e8:16:a4:8f:cb:b1:bb:3f:da:00:
13:31:54:11:71:42:f9:88:b0:eb:de:62:21:d4:b8:
d4:29:f6:91:f0:a4:e9:5a:30:6f:80:83:8b:52:cb:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:13:6F:ED:1A:AE:A3:E4:28:58:C9:EA:73:9E:F3:0F:C6:0E:C1
X509v3 Authority Key Identifier:
keyid:62:50:1D:DF:2E:15:38:4D:F2:0F:DA:DD:FA:FC:4F:85:4C:1C:41:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/62501DDF2E15384DF20FDADDFAFC4F854C1C41FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:9e:bc:e1:f9:d1:50:ef:52:c8:36:2e:dd:c1:8c:e8:28:
00:c2:83:bb:d1:f3:37:29:de:34:60:1f:e5:ea:96:90:a8:5f:
94:98:61:d4:c4:74:84:17:83:4b:26:28:f5:41:7f:d6:b9:0c:
ab:55:32:d4:f8:ca:e8:30:a6:40:dd:7d:de:bb:ee:6d:07:71:
79:32:8b:86:04:52:3d:6e:b0:9c:9a:de:c4:b5:ec:37:97:83:
70:55:9d:b6:82:4b:97:53:42:86:2d:f6:6a:c9:d3:65:77:27:
2f:38:5d:e3:60:61:86:58:12:44:96:5e:79:71:39:54:43:32:
b4:75:41:60:70:0b:53:88:9e:91:8b:48:4a:b4:6b:86:31:a0:
ec:c0:18:35:0a:3f:b0:99:a0:89:a1:59:2b:ec:38:91:47:56:
4e:a2:bf:eb:0b:19:c1:ac:a6:0a:2b:35:3f:22:91:01:ad:16:
35:bf:0c:f7:9e:8a:39:37:ba:4a:1b:cb:eb:8c:b7:a8:08:a2:
d0:dd:88:33:0a:f7:8c:52:ad:e6:b9:d8:e0:75:1c:05:10:6b:
fd:d9:32:c2:f0:e9:d3:36:7a:c5:8d:a7:9c:1a:39:c8:75:40:
d4:5a:0e:5d:56:37:b7:c8:d7:01:5e:7f:7b:69:15:35:06:5d:
30:f0:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:29:34 2026 by rpki-client