
Error: rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier: 5c4scqxDcaY+9QddpItUmwRR0of15lzb+ztUU3wF8Dw=
Subject key identifier: 3B:A0:7D:3C:F8:CE:52:71:A5:EF:04:73:6C:AD:C2:C3:84:7B:27:EA
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial: 3D27C345CFBC883FCE92A16EA7EB2C87E14B7018
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number: 04D9
Signing time: Mon 02 Nov 2026 20:50:28 +0000
Manifest this update: Mon 02 Nov 2026 20:45:28 +0000
Manifest next update: Tue 03 Nov 2026 22:45:28 +0000
Files and hashes: 1: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: rzWVq85ZSWJewtSyfCZDpAtJ4Sv0DAeOqFJOHI4kZQE=)
2: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
3: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
4: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
5: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 22:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:27:c3:45:cf:bc:88:3f:ce:92:a1:6e:a7:eb:2c:87:e1:4b:70:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Validity
Not Before: Nov 2 20:45:28 2026 GMT
Not After : Nov 3 22:45:28 2026 GMT
Subject: CN=3BA07D3CF8CE5271A5EF04736CADC2C3847B27EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:43:82:7e:ed:fa:b4:0a:a5:f0:13:09:c3:
08:7a:31:03:bc:e6:c1:cf:15:8e:0e:83:0c:bb:96:
75:b2:b6:33:9d:4a:25:25:9f:fd:82:6e:59:c6:27:
f4:1b:d0:d7:67:65:89:89:cd:31:7c:43:22:6c:fb:
59:93:d7:92:fa:f4:35:4e:f2:c9:f5:64:38:05:ea:
3f:c4:93:79:ef:82:fc:4a:a7:d7:0c:a4:cd:be:25:
22:48:de:14:ec:91:30:b9:47:f4:43:14:2b:73:2d:
e9:9c:19:d6:7d:6c:c0:93:51:0b:ea:3b:86:20:7b:
0d:fe:47:5d:86:23:f0:55:01:38:e3:a7:c1:d1:bd:
6c:68:e8:76:4a:f6:6b:93:90:a8:39:f5:bd:04:2c:
25:f1:a6:96:c5:ab:0e:e0:b0:7a:40:6a:0f:39:55:
29:ad:44:d5:bb:68:8b:f7:80:18:26:c4:7b:34:03:
f3:2a:ec:31:a5:c3:ac:73:7c:bd:cc:8d:0d:6f:e1:
14:9c:46:d8:8f:18:87:04:0b:7c:35:30:52:3a:e2:
c6:9b:fc:17:a2:09:0d:39:d0:82:db:75:3e:e3:fd:
d4:1c:54:ae:da:32:f0:60:de:e1:89:75:3c:7c:b9:
f9:c9:98:81:d6:07:1d:2d:cf:61:a3:be:19:76:e5:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:7D:3C:F8:CE:52:71:A5:EF:04:73:6C:AD:C2:C3:84:7B:27:EA
X509v3 Authority Key Identifier:
keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6f:09:d6:f7:0d:e6:ba:05:2f:95:a0:ba:14:ed:9d:3d:0b:
e0:7a:71:cc:e3:48:a9:f7:6a:8f:5a:f6:78:6a:20:4a:13:a1:
02:7a:38:9d:6b:cc:9c:0f:0b:f1:70:46:01:c6:84:c7:e1:6b:
e5:5f:71:4e:1f:e1:b5:2a:c4:87:04:c4:19:0c:1a:76:28:9d:
7f:ca:1d:7d:9d:d8:20:69:7e:fe:41:7f:6f:c2:3b:12:93:67:
07:59:93:99:9c:6d:7d:bb:05:4f:a9:ab:69:b1:fd:aa:8e:2f:
19:e8:d5:b0:69:43:c3:c4:e8:c1:4e:db:fa:10:65:73:f7:e0:
4b:3f:d2:92:d9:c5:62:7f:b5:a3:c4:e5:3e:4a:4c:d3:2b:a8:
f0:2d:d3:d0:eb:4f:9f:1c:73:2e:ed:32:e2:f4:de:e5:bf:5e:
7b:b1:64:39:d1:1f:d0:4d:3d:6a:11:8c:4b:78:16:6e:2d:2f:
0e:a0:01:09:da:46:95:f5:ff:a0:8b:97:27:2c:dd:2e:a3:e8:
57:41:65:bf:b8:3e:a7:1a:72:a5:22:29:3f:00:41:16:22:48:
94:01:39:b6:12:fa:6b:33:bb:cb:db:88:28:0d:38:23:dc:37:
70:4e:ee:38:d8:96:98:fe:7c:7a:ee:69:fe:3d:60:fd:17:84:
5a:36:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:06:31 2026 by rpki-client