
Error: rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
File: 69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft (raw, json)
Hash identifier: a3lCgFEV1pAueh2JiF81ymZj3I+S2snWLtM3RugQO7o=
Subject key identifier: 63:15:36:D0:4D:25:62:AE:DF:E6:92:CE:5A:73:97:C1:8F:73:54:C4
Authority key identifier: 69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D
Certificate issuer: /CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
Certificate serial: 31469A25C895A4A209BCFFCC950655B9E73CA644
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
Manifest number: 01EB
Signing time: Mon 24 Aug 2026 21:24:06 +0000
Manifest this update: Mon 24 Aug 2026 21:19:06 +0000
Manifest next update: Tue 25 Aug 2026 22:52:06 +0000
Files and hashes: 1: 69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl (hash: S6FOahP/d7puwbqcSbyWe/C1jKQZLeMgXGDYLGEc1mk=)
2: 323830343a363833303a3a2f33322d313238203d3e20323639363734.roa (hash: Fdw1r4HO1Z5ucfsNC4mM3ebSjPR3pr2NgPtWlCVYxZU=)
3: 34352e3139312e3134302e302f32322d3332203d3e20323639363734.roa (hash: ucwOTAiUpC1umNO4VLlILmuim9sLKQLMNZlZJo6/fsc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl
rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 22:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:46:9a:25:c8:95:a4:a2:09:bc:ff:cc:95:06:55:b9:e7:3c:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69CE20FA9020F27973CD76BE91FBDEB28AD7336D
Validity
Not Before: Aug 24 21:19:06 2026 GMT
Not After : Aug 25 22:52:06 2026 GMT
Subject: CN=631536D04D2562AEDFE692CE5A7397C18F7354C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:7a:dc:b7:dd:02:84:34:3d:be:8b:d8:b7:
b6:5b:50:d0:98:4d:34:c5:c3:eb:79:b5:c7:7c:7a:
ac:c7:a7:8e:f1:37:85:0e:1d:bd:39:c1:cf:f4:16:
49:12:62:da:ed:09:7b:91:b1:bc:9e:b5:be:c6:ab:
86:14:3b:51:ae:93:62:54:7a:07:9e:93:5f:2e:10:
bd:e3:d0:54:23:f0:f9:3f:28:df:32:c1:ac:13:d8:
50:d8:17:4a:15:48:2a:54:b4:02:ca:47:35:9b:aa:
7b:42:94:f0:36:1a:54:aa:6a:4c:a1:8e:7d:a1:1d:
1b:fe:15:74:e4:f0:d6:a2:22:c6:23:2f:d2:f2:c4:
ad:4a:ca:17:50:a6:8b:f0:e3:ae:89:40:26:1a:d5:
1a:59:3a:2f:62:20:00:f9:ca:b2:8d:a0:8f:f1:c7:
24:77:5a:df:e1:13:20:17:d9:91:43:20:17:fc:55:
36:be:07:3f:b9:09:75:67:43:07:50:1e:92:85:d4:
b3:2d:53:26:12:36:09:f2:33:5b:5a:88:a2:f7:16:
7c:ab:1e:72:43:56:dd:31:ee:95:ec:00:b0:8e:01:
c1:51:33:a1:9b:2c:21:0b:9f:d0:6d:fd:14:af:b7:
4d:83:d3:a5:28:68:da:ba:0f:d0:14:42:8e:de:27:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:36:D0:4D:25:62:AE:DF:E6:92:CE:5A:73:97:C1:8F:73:54:C4
X509v3 Authority Key Identifier:
keyid:69:CE:20:FA:90:20:F2:79:73:CD:76:BE:91:FB:DE:B2:8A:D7:33:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/69CE20FA9020F27973CD76BE91FBDEB28AD7336D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8f:c6:35:7f:bd:f1:a1:d6:f6:f1:cb:a5:2a:94:62:a9:c1:
28:70:f4:c9:de:9a:d5:9f:d7:2e:b8:5d:95:08:fb:7b:c1:4a:
f3:a9:c9:6e:3f:0f:26:42:3b:4c:10:7b:07:bc:67:5e:56:62:
b9:b3:ad:95:6b:87:24:58:c6:61:78:81:68:1c:8d:54:2d:a6:
57:e6:f9:20:9c:be:1c:3a:97:f6:b1:d9:44:f9:aa:f5:d7:d6:
a5:86:cc:53:7b:63:d8:6e:14:0b:9a:7b:ae:71:df:a9:d2:b3:
a6:64:cf:ea:cc:5a:c9:8a:59:3c:01:b2:e9:29:49:27:a8:37:
ad:14:ef:fc:ca:00:6e:f6:c1:40:c6:54:64:1a:3f:24:e9:8b:
78:c3:f9:0e:d1:8a:b4:31:28:a7:c8:d8:b1:b8:9e:b0:54:4b:
ef:f9:4b:2e:df:18:00:59:05:94:8a:44:65:4d:17:d2:e7:31:
84:83:10:32:80:47:d9:85:b2:88:c7:c8:fb:0e:93:2f:3b:75:
f9:7f:1d:1f:95:ed:30:5c:5b:55:65:d3:3e:37:97:32:3c:49:
ae:3f:b7:e1:8b:8a:41:c5:65:a9:81:71:29:86:a4:27:b3:4c:
5f:07:c8:c8:8e:f6:e5:0c:08:e6:26:ec:f4:e2:5a:6f:52:81:
dd:14:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:35:20 2026 by rpki-client