
Error: rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
File: 810076D4984418ED05F03F761B6CBE5D6F00DC86.mft (raw, json)
Hash identifier: DDcUF5d2ezt+aKl01y7TJPA0rl7Iid5lp96Vi/vaRkc=
Subject key identifier: B5:B7:C2:52:07:48:49:97:77:D7:BC:82:89:3A:65:75:E7:60:D9:62
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Certificate issuer: /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial: 4E959429DBC5489B249C557F72BA7CF46BADCF3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
Manifest number: 04E2
Signing time: Sat 31 Oct 2026 07:16:56 +0000
Manifest this update: Sat 31 Oct 2026 07:11:56 +0000
Manifest next update: Sun 01 Nov 2026 09:50:56 +0000
Files and hashes: 1: 3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa (hash: rbZYOfJRddAk9LwnFp4nOdPQwEySvJEo6840fEgXSI8=)
2: 810076D4984418ED05F03F761B6CBE5D6F00DC86.crl (hash: vo7GvQ+WyuD4Kb+CE2nRSVdyzbKwx1gfBsTN0OiCB7w=)
3: 323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (hash: VyymUYxLBuq4LNhc03tc5cATTlqQ2WLMAR2Y4LwkkmU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 09:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:95:94:29:db:c5:48:9b:24:9c:55:7f:72:ba:7c:f4:6b:ad:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Validity
Not Before: Oct 31 07:11:56 2026 GMT
Not After : Nov 1 09:50:56 2026 GMT
Subject: CN=B5B7C2520748499777D7BC82893A6575E760D962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:26:c5:43:9d:0c:1e:48:c2:ad:d8:6d:b1:
92:e9:22:ab:e5:9e:ad:89:f7:a8:11:6d:cb:41:04:
57:43:94:cf:27:ac:10:14:d2:b3:ed:16:23:4b:0e:
71:1b:6d:d2:21:9b:06:17:82:25:ba:94:ef:f8:28:
d6:51:78:81:53:ab:f5:52:79:4e:b3:18:cd:52:af:
46:ec:bd:b3:5d:36:39:6c:ed:60:8e:3d:94:12:a2:
1c:1e:59:c6:e8:23:37:82:cc:0f:8d:9d:31:2a:90:
21:4d:c8:76:bf:de:9b:9d:90:bc:f1:4c:22:6d:21:
3e:04:13:05:d1:2d:0a:07:42:2c:ae:89:47:c4:1b:
d8:29:ec:61:70:d0:84:34:6b:c4:bd:14:78:eb:25:
ee:b7:a9:b8:3b:7f:42:e4:c5:6f:c6:d4:94:e1:bd:
06:7f:1f:4d:09:19:8b:d6:08:58:7a:ab:bf:02:ba:
82:f3:42:d7:8c:1f:a6:17:a6:6f:e3:52:1a:6e:2d:
75:6c:b6:66:08:a0:dc:66:d6:9a:fa:9a:48:17:dd:
9f:9b:75:c9:3f:b5:61:ef:b6:81:c5:df:f6:59:8c:
a8:3b:89:a0:74:d8:fc:16:36:9f:99:85:bf:a6:4b:
e8:09:b4:6c:d2:b6:48:93:1a:4b:9f:c5:66:45:d0:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B7:C2:52:07:48:49:97:77:D7:BC:82:89:3A:65:75:E7:60:D9:62
X509v3 Authority Key Identifier:
keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:7d:4c:18:c2:ed:32:cb:fb:8e:63:d3:e5:22:28:38:63:
64:89:63:c5:a5:4a:8e:57:cf:69:13:63:b9:96:fb:3a:f1:ac:
15:2c:eb:70:6f:67:31:40:3b:8a:58:a7:ed:d7:96:b4:cd:74:
f7:a8:f5:e5:11:29:37:96:d7:4c:89:a1:36:cb:d6:75:23:83:
2f:80:5b:cb:3b:20:2f:25:69:ef:59:e3:bc:86:b1:b3:70:1b:
78:c2:1c:9b:56:e2:76:02:6c:bc:32:dc:02:72:02:17:1f:3f:
ba:28:e6:09:8f:81:ce:ba:0f:15:12:c5:3f:a8:0d:a4:c2:8f:
bc:9e:0d:59:e1:39:2d:4c:12:4e:4d:03:10:c5:23:b0:f4:14:
bc:43:fd:5f:8d:2e:c5:fd:e5:17:c6:99:00:37:86:a8:8b:b0:
de:f7:fd:4c:eb:e5:97:53:18:c7:3d:dc:c3:88:04:7b:68:7d:
34:83:e3:97:75:9a:8a:43:58:93:ff:61:03:2c:90:22:96:5f:
8d:1c:26:6d:be:32:19:40:43:d8:1c:83:e7:0d:9f:ce:ab:ac:
7a:c9:7c:fd:6b:a9:17:0a:06:10:64:df:88:a4:fc:f3:e0:09:
fb:66:93:b5:bc:6e:45:0d:8f:9c:a4:0e:1c:60:10:45:81:6c:
6e:e6:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:45:10 2026 by rpki-client