
Error: rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
File: C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft (raw, json)
Hash identifier: yof9QlO8Q4j7EZSF7AeIrHQpM+vRIph2oUEUVtG49dg=
Subject key identifier: 23:9A:EF:EF:AB:73:4D:D2:9C:14:DE:CD:09:4C:E6:97:5B:EC:00:8A
Authority key identifier: C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7
Certificate issuer: /CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
Certificate serial: 2EED58EECDBB17597725F1868F818AFCB03E07DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
Manifest number: 024B
Signing time: Sun 23 Aug 2026 11:58:40 +0000
Manifest this update: Sun 23 Aug 2026 11:53:40 +0000
Manifest next update: Mon 24 Aug 2026 15:25:40 +0000
Files and hashes: 1: C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl (hash: c+Aal13/140+FJjoD7bhLv+AOMNpp9w9Y7m9K3XZ7VQ=)
2: 323830343a343432633a3a2f33322d3438203d3e20323637363037.roa (hash: N17cOgJeE55v29AXz2oKi2gnUum4wO0SpQEcvhUzryE=)
3: 34352e37312e3130302e302f32322d3234203d3e20323637363037.roa (hash: g3KZGLa1nWRTYrqIuRBb7kPpUNAvoGZOmuS26a2eIlg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl
rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ed:58:ee:cd:bb:17:59:77:25:f1:86:8f:81:8a:fc:b0:3e:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
Validity
Not Before: Aug 23 11:53:40 2026 GMT
Not After : Aug 24 15:25:40 2026 GMT
Subject: CN=239AEFEFAB734DD29C14DECD094CE6975BEC008A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:ae:cd:39:86:d3:5c:e4:05:20:09:c5:82:
02:0c:07:8a:0b:45:31:de:2f:3f:c9:d4:d2:b8:f5:
7c:fe:bc:39:18:bb:89:c0:41:59:d2:1f:a0:ce:64:
35:a7:ae:fd:42:71:2e:ee:08:f0:74:50:d2:f9:ef:
e1:01:c9:ab:be:62:7f:2a:78:4a:cf:ba:e8:e0:b7:
c4:66:b1:41:ac:a7:ea:f8:b9:aa:78:64:12:ca:24:
51:d7:e7:e4:4f:dc:dd:24:76:16:f6:db:98:64:53:
d0:c3:a4:3e:5d:4b:fd:55:5c:b4:54:d3:33:0b:9f:
bb:91:87:40:7a:d7:95:46:ab:26:4a:e9:76:d8:ed:
95:b8:f8:3e:9f:ca:ce:7c:82:11:8b:ad:6b:ad:9a:
8e:05:e5:f2:9e:88:ca:06:67:a7:d9:17:ea:af:41:
40:8c:80:a3:2a:20:a6:0a:03:47:b2:41:7d:4a:91:
c6:b4:e7:16:64:f7:23:82:5f:fb:34:c0:07:9a:f5:
f4:0a:03:76:fc:a4:6c:8f:56:68:4f:31:8c:a1:21:
c0:5c:5e:f7:76:03:fc:83:7d:76:b4:44:7e:50:23:
f1:51:c1:2e:81:e6:92:3c:48:dd:7c:00:55:6c:bc:
60:dd:66:95:3f:a4:97:8d:bc:b3:2e:2d:7d:9c:d8:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:EF:EF:AB:73:4D:D2:9C:14:DE:CD:09:4C:E6:97:5B:EC:00:8A
X509v3 Authority Key Identifier:
keyid:C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:85:80:c3:82:a3:9f:32:b0:f9:78:b5:0f:20:51:62:86:
22:6a:02:25:42:a2:eb:4e:14:b0:10:b4:13:e6:6e:d6:ca:11:
7e:bd:46:9c:98:74:17:e2:96:e7:fa:2f:51:cb:b9:d0:ee:3b:
e3:8e:3d:7f:92:62:cd:81:68:19:a4:37:df:c3:4a:8c:83:3d:
f3:7f:81:1a:38:ab:71:9b:20:74:87:83:64:f9:b7:76:02:74:
e3:41:ed:f2:1c:47:03:6f:56:ae:f9:4c:1c:24:fd:e6:78:4f:
80:5a:5f:97:51:c6:6d:b3:9d:75:35:a3:9c:10:3f:c8:2d:87:
9c:7f:be:3f:e0:89:3d:84:65:22:21:e0:98:5d:21:ff:d2:2b:
d4:c9:f8:36:43:36:d6:9d:78:09:9a:bb:df:d7:67:ad:6a:2b:
f3:38:ba:67:23:84:2e:08:e7:b9:82:2c:2f:e0:70:3f:6e:dd:
bd:a3:44:65:b6:e9:96:9c:a1:72:c0:54:11:4a:44:7a:23:4c:
e5:64:16:cc:a6:92:0f:86:11:e3:52:80:b6:01:bb:cc:b9:d5:
f8:8f:da:0e:2b:3e:cc:26:af:47:af:53:e3:64:ea:a4:3f:31:
9e:ed:a7:59:25:a9:81:ae:ac:29:86:fc:81:2e:f1:a2:cc:1d:
4f:2b:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:16:39 2026 by rpki-client