
Error: rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.mft
File: 06B856638AE7EAC4573FE5307A649D2BB3496452.mft (raw, json)
Hash identifier: dr8qTwncDR/fwK9BDhAQaFdJvYN7fGISydfJ8H7biLQ=
Subject key identifier: 54:6C:99:2D:05:6C:6A:F0:62:6F:7F:40:53:2B:53:B0:D2:E2:24:C4
Authority key identifier: 06:B8:56:63:8A:E7:EA:C4:57:3F:E5:30:7A:64:9D:2B:B3:49:64:52
Certificate issuer: /CN=06B856638AE7EAC4573FE5307A649D2BB3496452
Certificate serial: 0FEAA45225FAA57296E2C16F0280407339A4A4D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B856638AE7EAC4573FE5307A649D2BB3496452.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.mft
Manifest number: C9
Signing time: Sat 22 Aug 2026 15:26:25 +0000
Manifest this update: Sat 22 Aug 2026 15:21:25 +0000
Manifest next update: Sun 23 Aug 2026 18:48:25 +0000
Files and hashes: 1: 3133382e33362e34302e302f32322d3234203d3e20323634353730.roa (hash: KC59XClF2ATec1gVGKmPLIBYNWRmBzJGfLHQu0AINKU=)
2: 323830343a323162633a3a2f33322d313238203d3e20323634353730.roa (hash: 3QDNAkZCxONubzPVVQuPYhie81LobDxL++94V3zft3c=)
3: 06B856638AE7EAC4573FE5307A649D2BB3496452.crl (hash: zpeQrycE+wVp4PCTm3f+59bbfhGpsMh5tG5axQ/yHk0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.crl
rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B856638AE7EAC4573FE5307A649D2BB3496452.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 18:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ea:a4:52:25:fa:a5:72:96:e2:c1:6f:02:80:40:73:39:a4:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06B856638AE7EAC4573FE5307A649D2BB3496452
Validity
Not Before: Aug 22 15:21:25 2026 GMT
Not After : Aug 23 18:48:25 2026 GMT
Subject: CN=546C992D056C6AF0626F7F40532B53B0D2E224C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:b0:27:ca:18:c7:dd:91:18:56:8a:5a:f9:
f7:11:71:1a:34:d2:d6:40:9b:0b:6b:48:21:d2:16:
d8:14:f5:c4:19:88:53:24:23:6e:10:ad:f8:11:38:
5c:1d:39:4d:98:42:4c:fc:7b:ed:b8:dd:a4:9d:2e:
c6:19:3b:ac:d7:88:a1:73:07:90:ad:8f:c5:98:31:
5d:d8:f5:c3:16:e1:4c:4f:04:1d:f5:cb:5b:42:c7:
8b:fa:e0:46:11:cc:96:2c:7d:3c:90:73:43:67:ee:
b6:7b:7c:47:4d:de:23:c8:a2:8e:c3:c8:b4:16:96:
e0:14:b8:01:af:09:f4:42:66:6f:24:64:ef:4e:92:
82:bf:b1:a9:1e:59:6d:27:0d:b5:3b:3e:b9:ba:78:
6f:17:ea:e0:68:95:eb:30:18:19:85:7d:86:bc:9e:
87:a8:9e:26:3c:f1:72:db:a0:ed:0b:c5:06:d3:91:
69:76:7c:41:7d:3f:30:db:18:d6:e6:a9:48:20:c0:
ea:b4:b5:1c:8f:bb:f5:26:00:23:fd:9f:21:b5:70:
ba:3b:99:b0:d2:4a:51:28:66:c9:0b:d0:0e:44:5c:
7d:d9:85:5a:20:71:d9:be:44:ab:ee:2b:30:7c:29:
2b:85:b7:8f:e2:3e:6a:88:ea:e4:99:52:02:1f:e5:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:99:2D:05:6C:6A:F0:62:6F:7F:40:53:2B:53:B0:D2:E2:24:C4
X509v3 Authority Key Identifier:
keyid:06:B8:56:63:8A:E7:EA:C4:57:3F:E5:30:7A:64:9D:2B:B3:49:64:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B856638AE7EAC4573FE5307A649D2BB3496452.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/06B856638AE7EAC4573FE5307A649D2BB3496452.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1d:d6:e5:01:38:0f:e4:04:ce:8a:49:92:3d:37:cb:37:6f:
e1:73:95:0f:60:16:89:ce:7a:93:b8:4c:33:cd:26:fc:93:ca:
ab:de:e0:be:00:78:0d:86:3f:2a:79:8d:a1:65:73:79:ce:98:
81:57:87:d8:a8:ee:9a:24:a3:b8:b7:35:7b:70:7a:38:87:23:
ab:03:97:b2:a9:1c:1a:14:a6:8c:a0:93:c2:2f:5b:d8:1c:bd:
ef:b5:ee:19:d8:a1:d9:21:b7:26:4f:ee:05:1d:a2:f1:08:cc:
57:25:aa:81:24:4d:0c:4d:36:41:42:e2:04:06:a5:4b:3f:4f:
cd:a2:b2:8c:4d:71:90:f7:63:a8:da:75:6e:a6:58:79:10:b4:
73:ea:54:99:af:c3:a0:c3:a7:91:38:36:9e:e5:de:16:b1:0d:
22:c1:12:dc:53:58:27:0e:a3:88:01:70:05:cb:8f:00:78:7f:
e6:69:9b:9e:d1:c2:aa:da:09:5c:a8:c7:2c:9a:5c:04:b5:ac:
ae:31:aa:49:5c:fc:9d:94:2d:af:66:9d:e0:46:a0:3d:ef:4a:
50:08:af:2c:cb:71:45:b3:8e:e1:2a:38:fc:7a:6d:98:db:40:
bd:a2:06:0e:0d:b1:86:5b:b8:e0:d1:be:26:25:04:29:72:ed:
a0:98:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:10:43 2026 by rpki-client