
Error: rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
File: C70EC4383B792424E71BC6853AD1C792781070B3.mft (raw, json)
Hash identifier: LlyC4RlmyN6YORAdAJCVu//LL1s5I3PMCXhaNuJFaGM=
Subject key identifier: 04:FF:51:54:91:84:2E:5C:0A:47:13:CF:A1:75:1F:42:ED:ED:23:8D
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Certificate issuer: /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial: 44B47F51AAC6CCC52C46BEAFB3E6921A2C5EB5D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
Manifest number: 04E5
Signing time: Tue 03 Nov 2026 15:16:11 +0000
Manifest this update: Tue 03 Nov 2026 15:11:11 +0000
Manifest next update: Wed 04 Nov 2026 18:02:11 +0000
Files and hashes: 1: 323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (hash: b7vJSB62UVprijzpvGjXQYyvzoFOFwI/syYKThLvZOw=)
2: 3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (hash: 91XrLEbGAhmX9qmdm4rnlRyZB2Pvx7to/mxn6O92WaQ=)
3: 3132382e3230312e32392e302f32342d3234203d3e20323636363131.roa (hash: uC47ptownDpAbMBhy25FKAqLxLXpdcveIJQta5Etc8s=)
4: 323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (hash: Pfi9EZ2FpTVV3XGfgK+WESCPSuS/MgJ6SIGRLXgRaW4=)
5: 323830343a336561343a383030303a3a2f33332d3333203d3e20323636363131.roa (hash: qNWVhV6jsfXZ3t3fHwZ3u3WP2ushE50iSVI1mw8jG+I=)
6: C70EC4383B792424E71BC6853AD1C792781070B3.crl (hash: rS2ciGdn7UI37fnxC5FzIAuRek6GpKYY9gdciudD65A=)
7: 3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (hash: WPOPNIWq7LGr+nxAjnXMgjLrMlVsTQM9ZCUnaYyMpJc=)
8: 323830343a336561343a3a2f33332d3333203d3e20323636363131.roa (hash: h/XHV1BXoQHKZwDNIS4eD9cXZU+Y66z9tPmlfa7JaPA=)
9: 323830343a336561343a383030303a3a2f33342d3334203d3e20323636363131.roa (hash: z2j9QAYEjfeUbWxxDkZAU/0VwYUh8k8abyl/G2g9UWo=)
10: 323830343a336561343a343030303a3a2f33342d3334203d3e20323636363131.roa (hash: l10Zl8k9Hyq+z7omktzu5jlfX4+8KhwrbLidEt0TbOc=)
11: 3132382e3230312e32382e302f32342d3234203d3e20323636363131.roa (hash: b0FZsOV4vpVRPOdEl1N2ExcCcc+kvi1mxHfspcITi38=)
12: 3132382e3230312e33302e302f32342d3234203d3e20323636363131.roa (hash: QQpuTYK7XwJ23diiddR8Pvq/ua/DgC5caKAyN1etAp4=)
13: 3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (hash: qkNedzRh4SGev11shMSqweqT06iJNY8gyuMJxZg1caA=)
14: 3132382e3230312e33302e302f32332d3233203d3e20323636363131.roa (hash: RsHERpqTFKOl/Lto+bEOuiL9YIo/GF5iS4QkYD9glfA=)
15: 323830343a336561343a633030303a3a2f33342d3334203d3e20323636363131.roa (hash: OFTkWVRFeqT2VRH0vRziYxaVHs7HhUH48SxSEnd8Ck4=)
16: 323830343a336561343a3a2f33342d3334203d3e20323636363131.roa (hash: 9YN/XX1yMYKmJxe2585WXc0M7LgF0T2EROFMS2lwaVI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b4:7f:51:aa:c6:cc:c5:2c:46:be:af:b3:e6:92:1a:2c:5e:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
Validity
Not Before: Nov 3 15:11:11 2026 GMT
Not After : Nov 4 18:02:11 2026 GMT
Subject: CN=04FF515491842E5C0A4713CFA1751F42EDED238D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7b:1e:ea:5d:0b:75:b0:4f:96:9a:11:03:0b:
7b:9c:eb:7b:c7:bf:9f:06:73:3d:1a:1d:88:4b:97:
f6:58:a6:3c:df:ce:cc:6e:61:de:b5:23:f3:ff:98:
65:dc:78:8c:da:9b:99:b5:4b:90:bb:2c:a4:3c:d5:
e5:21:75:2a:af:dc:d4:95:89:1a:e0:0e:50:0b:39:
48:9f:43:ad:33:a7:87:84:fc:31:03:62:24:7d:c9:
67:d8:38:dd:80:ec:93:20:bf:70:5a:e1:d9:19:4e:
b4:d5:eb:01:2a:19:96:65:04:48:11:5e:96:d2:fa:
2b:f8:43:a7:c2:b7:7a:02:8a:d6:fb:15:a6:a2:39:
ad:ed:29:3a:b7:66:f4:e9:25:38:88:96:b8:ec:26:
fe:dc:de:fe:00:1b:e5:e1:b9:f5:f8:03:c4:00:44:
59:1b:9c:57:56:e3:3d:29:f1:fb:d7:e8:26:4d:e5:
a8:07:be:6f:fa:49:a5:ef:7b:ba:23:21:ae:55:d4:
9f:79:0a:c9:1d:1d:9a:3d:4d:05:23:e3:05:d3:94:
ba:c4:00:18:ca:db:b5:45:74:c6:59:66:21:58:76:
56:c0:5b:59:be:a8:dc:06:96:b5:17:14:c4:81:eb:
03:1b:45:fc:32:d8:7a:cc:9d:a0:3c:50:7d:10:7e:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:51:54:91:84:2E:5C:0A:47:13:CF:A1:75:1F:42:ED:ED:23:8D
X509v3 Authority Key Identifier:
keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:e3:8c:a3:bc:3b:08:2a:e7:8a:fc:95:c9:d6:12:48:1c:
0f:46:62:4e:af:0b:ac:29:87:48:75:9b:b3:98:80:a1:4f:40:
52:b0:82:7b:87:8f:8d:8c:d7:58:21:b0:40:e8:2a:ff:6c:52:
b1:95:15:bb:84:fa:1f:5c:57:4f:19:d8:2e:53:29:66:aa:92:
52:f6:89:7f:8c:84:9b:31:1a:15:e8:6a:ab:84:62:50:8f:45:
9e:60:f5:02:1e:da:ff:e7:25:3d:f7:6c:7f:c2:96:7d:a9:c6:
8f:6a:e7:53:6e:55:1e:5e:fa:2a:7c:0d:50:be:15:51:8a:1b:
fa:b2:7c:de:d7:45:8c:56:24:6d:bb:09:d9:c1:e7:8a:fc:87:
d2:f3:ae:66:44:4e:23:f6:6f:a9:fa:07:5a:c3:e8:61:f3:3a:
a3:15:e4:68:16:80:ee:21:14:05:b4:ef:f0:dc:cf:da:45:76:
5d:bd:0f:b1:14:0a:77:79:8e:ea:e9:3e:50:b4:dd:ab:e7:90:
54:37:27:1b:3d:4a:54:5f:ed:e0:d0:e0:ec:44:00:e4:5b:d4:
84:d8:9c:0b:a8:b3:80:c6:25:5f:0d:9e:db:cb:50:53:cc:1b:
02:04:38:9e:2f:1a:04:07:4f:d6:ec:3a:12:75:5f:ca:84:7a:
96:93:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:57:47 2026 by rpki-client