
Error: rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
File: 98504EF12C8DFCB2080B1982C7232BD80D712E62.mft (raw, json)
Hash identifier: rT1MfpVlXhlsNmZmncSdqrg8TG9SlBe1bwFj7oRl1Z4=
Subject key identifier: A2:84:83:F8:06:93:93:E3:41:8D:1D:D1:D1:E5:B9:5F:52:98:D1:53
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Certificate issuer: /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial: 0F05BEAAD869499290A3E793E796C0E12EA79E80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
Manifest number: 04DC
Signing time: Thu 29 Oct 2026 09:42:22 +0000
Manifest this update: Thu 29 Oct 2026 09:37:22 +0000
Manifest next update: Fri 30 Oct 2026 10:54:22 +0000
Files and hashes: 1: 98504EF12C8DFCB2080B1982C7232BD80D712E62.crl (hash: gYCDC09c6Ae3kUVdqYOwO1rgM/ljyqmLrr7ya/Z+Pqc=)
2: 3137372e34342e3230382e302f32312d3234203d3e203533323330.roa (hash: oYiE7r8XtjQ++JhetipICwmyKZD4M+/WWQJQGI6kC4s=)
3: 34352e3233382e3132382e302f32322d3234203d3e203533323330.roa (hash: 0aRiUrIwUVlwkkNP+z/48j96Ib9aFE2YMhTMbto20sY=)
4: 3137372e31302e302e302f32302d3234203d3e203533323330.roa (hash: iuiG3vNKCj1+Ulk7yDShRi2AwPf/0ltsexPx0sYzYHc=)
5: 323830343a3264303a3a2f33322d313238203d3e203533323330.roa (hash: /m9rWEB8UMzydQnaWFwGuKPn7uM4orHcJMSF3PaGT04=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 10:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:05:be:aa:d8:69:49:92:90:a3:e7:93:e7:96:c0:e1:2e:a7:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Validity
Not Before: Oct 29 09:37:22 2026 GMT
Not After : Oct 30 10:54:22 2026 GMT
Subject: CN=A28483F8069393E3418D1DD1D1E5B95F5298D153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:b4:a7:ca:c8:c0:9e:d0:c9:b9:64:42:63:
87:f5:85:8a:45:2a:72:5d:75:3f:91:05:5a:31:40:
2f:4c:e4:53:64:6c:a2:b8:b6:2c:1a:e2:f5:6a:6a:
41:6d:c1:0e:ad:4c:f6:3e:e0:fd:a6:b2:aa:8f:3d:
9c:48:07:12:44:9e:b2:e5:15:e9:d1:64:25:55:f4:
0a:00:e6:56:8f:81:87:f4:ad:05:58:11:be:e5:31:
eb:d1:48:fa:6a:8c:e9:fc:ee:28:1e:bd:90:2d:17:
d6:1f:88:0b:b1:2b:45:7b:20:14:90:5e:11:74:e2:
67:56:27:02:fa:f7:33:eb:f3:37:08:1b:42:f7:57:
9e:9d:eb:6f:d6:11:62:fb:27:2f:d1:7f:25:18:9a:
07:22:6e:5b:4b:63:ee:46:e5:8b:97:38:c4:47:b7:
44:fd:0b:05:e6:48:35:e0:b4:21:ce:03:d7:f9:6b:
8c:9f:fe:4c:d4:1a:70:a8:0b:ee:83:40:cc:06:46:
14:60:9b:eb:a5:f5:b4:ad:2b:c6:aa:30:59:ee:17:
9d:67:57:f5:39:a3:82:15:10:b4:a0:d6:3d:b7:94:
3f:3a:08:26:6b:4a:83:b5:83:81:76:8b:ad:41:07:
8d:ba:0a:f2:dd:b2:94:f9:bc:3f:1e:37:8b:94:74:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:83:F8:06:93:93:E3:41:8D:1D:D1:D1:E5:B9:5F:52:98:D1:53
X509v3 Authority Key Identifier:
keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9a:97:35:86:50:07:22:b6:cd:53:de:bd:dc:02:35:75:95:
e7:39:a4:0a:32:f3:cb:b5:96:c1:11:21:49:e5:98:76:f9:ed:
35:b8:40:2d:8b:a2:bd:82:e8:71:b7:cf:69:c1:c6:a9:ff:d9:
1b:1b:d6:e3:3c:58:02:f2:68:bd:53:cc:db:3b:79:0e:d9:66:
f3:f4:46:91:77:71:ad:21:20:21:13:4e:73:21:64:15:75:bb:
9d:7a:ee:0e:7f:ec:36:6e:e3:fb:3f:31:15:a7:3c:c1:06:52:
60:e2:e7:5e:84:7e:45:79:d6:4c:e3:03:dc:18:25:f6:5e:80:
25:74:31:96:22:ef:ad:38:b0:be:d2:6b:7e:5b:42:76:9d:a7:
db:67:12:ff:6f:bc:15:d4:06:0f:20:c4:53:7b:24:f1:c8:e3:
12:13:93:cb:4f:93:12:e3:e6:86:56:0c:97:c7:3f:1b:4d:6c:
eb:97:54:44:c5:c0:07:cd:c1:5f:82:2c:bd:5c:f3:fa:d1:08:
0a:2d:36:ba:25:51:b2:cc:3c:16:ab:1d:f6:3b:7a:39:46:0d:
9e:ea:eb:41:4e:f3:6b:c6:ca:87:27:c7:c4:51:0c:12:9b:5d:
f6:2d:8b:84:94:33:fc:ed:56:de:23:97:14:8c:8b:ab:68:43:
14:74:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 00:48:45 2026 by rpki-client