
Error: rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
File: 638087ED81E6ABF3705A6FE4584C399C4C56720F.mft (raw, json)
Hash identifier: SzPIq4zfWV7uW2bit4Nnhck0rTt4xz702nGyzJHE6OU=
Subject key identifier: 56:E8:5B:3A:5A:69:EE:F1:36:B3:95:D8:5C:BC:3C:0C:99:56:08:BC
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Certificate issuer: /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial: 2EB63EDE2712614AF2F6478BD4D56D7B8EFD94E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
Manifest number: 04DF
Signing time: Thu 29 Oct 2026 18:26:30 +0000
Manifest this update: Thu 29 Oct 2026 18:21:30 +0000
Manifest next update: Fri 30 Oct 2026 20:47:30 +0000
Files and hashes: 1: 323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (hash: 2kr5rfRzMzD1wPmAIdWvagse3SQ92MFtEsM3GOb9H6U=)
2: 34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (hash: NcX8DmYwOhidfbgXFtgECDJPrZ1DsIjYcSX1IcC6GEo=)
3: 638087ED81E6ABF3705A6FE4584C399C4C56720F.crl (hash: CV/8fpD6uBlbq4+C7TskyHTOvzZQOlxTVIojK7fA87E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 20:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b6:3e:de:27:12:61:4a:f2:f6:47:8b:d4:d5:6d:7b:8e:fd:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Validity
Not Before: Oct 29 18:21:30 2026 GMT
Not After : Oct 30 20:47:30 2026 GMT
Subject: CN=56E85B3A5A69EEF136B395D85CBC3C0C995608BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:9a:21:1b:79:51:59:3e:f0:fb:26:27:60:
ed:d8:4c:f4:88:56:21:7e:ae:b3:57:da:21:83:99:
84:b4:e6:6b:e4:65:d9:bf:91:27:5f:29:bc:89:46:
f2:70:3e:02:48:c4:d8:59:e6:4b:e5:fc:0d:22:f5:
85:60:7d:1e:55:96:ca:36:b3:12:c8:1e:87:2c:7e:
62:f0:01:45:5d:8e:56:66:47:cd:d3:98:aa:29:22:
b3:77:38:ac:5a:88:ec:de:0b:fb:cb:00:12:fe:df:
3e:f7:0c:bf:07:23:b6:e3:03:8d:12:c5:39:72:08:
cb:5d:d6:b6:a0:f3:3e:33:a8:6b:27:98:d9:1e:bb:
2e:4d:3e:07:94:84:92:4d:75:d0:b2:dc:e8:07:0c:
8d:f7:95:fc:15:76:8d:33:4d:0a:7e:8b:05:06:1e:
e5:71:c4:e4:f0:6f:59:71:6e:3b:79:04:6a:65:85:
82:a2:77:c7:c4:16:a0:5e:b0:76:ea:77:ee:5e:c2:
80:73:f4:8e:4a:c6:73:a6:93:41:85:fa:55:f3:9a:
4c:8f:48:26:01:ce:93:bc:b7:ed:8a:51:a6:d7:aa:
96:b5:ec:bf:46:19:dc:b5:4d:97:fb:8f:ee:50:e9:
9b:c1:df:b7:e7:50:31:7b:64:13:1f:19:32:94:a8:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:5B:3A:5A:69:EE:F1:36:B3:95:D8:5C:BC:3C:0C:99:56:08:BC
X509v3 Authority Key Identifier:
keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ff:e9:ff:24:25:e5:7e:67:f3:dc:8a:09:c3:6a:4f:82:fc:
e2:15:dd:1e:cd:30:bf:de:49:68:0a:dd:17:ce:99:94:44:c3:
95:80:5c:00:e9:c0:20:91:b7:c2:7f:c7:83:e5:23:8a:f3:22:
57:66:db:58:7b:e7:46:59:54:45:34:85:55:d0:6a:8f:a5:de:
65:98:03:15:42:7e:c9:09:6b:14:6c:3a:b2:f2:94:7a:bd:d9:
7e:90:1b:d5:4f:f4:db:78:68:b3:f2:37:e2:48:2c:03:3e:14:
d3:18:20:58:fd:27:e0:d1:7f:ba:dc:6d:c0:d9:87:72:6b:92:
51:d9:64:c8:96:18:31:ef:19:d0:6e:69:42:58:f6:69:5a:f8:
0e:51:4c:57:18:b6:91:b9:b5:c9:91:d0:15:a4:57:fb:03:ad:
99:ac:e9:c0:c6:b7:8b:0b:74:ef:d8:4c:d6:ef:d1:78:0b:05:
82:5c:30:1d:b2:4b:d1:5b:d0:70:40:9e:da:c8:3b:5f:b5:7d:
b2:81:78:29:d2:d9:3a:9d:ec:42:03:86:4c:57:74:06:54:19:
d7:73:f1:3d:5c:5a:87:41:ca:2a:11:3c:05:1d:97:59:77:a0:
22:bc:28:1e:c4:89:70:93:f8:45:2c:47:02:e3:9b:a2:65:11:
2d:27:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:20:11 2026 by rpki-client