
Error: rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
File: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json)
Hash identifier: O/61a3Dhbja8KUBY/7lbWq5vAYmdRdtpxrkbUpsIYCI=
Subject key identifier: C4:36:EB:EC:FD:2F:0E:43:EC:2D:61:D8:52:7A:86:6E:2F:69:F4:2B
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Certificate issuer: /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial: 0FFCB2FE2FA9324FE85ABD93BA3E5AE80D779213
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
Manifest number: 04BC
Signing time: Thu 15 Oct 2026 06:09:29 +0000
Manifest this update: Thu 15 Oct 2026 06:04:29 +0000
Manifest next update: Fri 16 Oct 2026 06:21:29 +0000
Files and hashes: 1: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: p7GlGlTBUM8MNoeB951V8kzLDKKuinrohI+QwoaeSMg=)
2: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: B1qj5H95iAFViQXKUAZBh1CF0OK++m7Hb8x8x8RW7oM=)
3: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: eE7Q0OD7F5xMUEU7LWhkf8npt2OMJAjI8Sl0qnqPWEw=)
4: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: a+s2eCS1Qi9XdN+0NGZcybpvGXeVSYAA51idoewPqEg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 06:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fc:b2:fe:2f:a9:32:4f:e8:5a:bd:93:ba:3e:5a:e8:0d:77:92:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Validity
Not Before: Oct 15 06:04:29 2026 GMT
Not After : Oct 16 06:21:29 2026 GMT
Subject: CN=C436EBECFD2F0E43EC2D61D8527A866E2F69F42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:da:d2:bd:f1:8e:29:c1:47:1d:00:9c:61:
d4:09:f6:99:5b:53:dd:94:10:4b:3c:08:7e:df:35:
ae:86:78:2f:3e:ed:a1:39:c6:a6:d7:15:c7:2e:fb:
82:5b:38:c0:4e:ae:b2:9d:01:a0:0d:a6:51:bf:9b:
fd:f9:9b:ba:f1:77:d8:1f:22:f7:c4:32:7f:9c:ad:
bd:cd:09:5a:10:e8:9b:7d:89:fa:3c:61:36:c5:4a:
ae:65:0e:f5:5c:30:11:6f:0e:3a:d0:7f:a5:3f:82:
59:c6:a5:ad:ec:63:fb:b2:84:46:8b:93:7a:69:aa:
29:2a:06:8e:9f:87:b8:69:a1:b7:11:c1:07:7a:37:
d9:2a:9e:43:26:dc:d4:a7:1f:09:e1:4c:a0:7b:d7:
6b:16:11:bd:0f:e6:1f:45:c5:13:b7:7e:40:08:1f:
2e:26:99:e5:dd:61:dc:12:02:99:13:cc:bc:f7:ce:
b4:2d:a6:63:36:ce:fd:0c:4f:06:99:0f:84:f2:96:
b4:c7:6d:b4:77:be:ec:56:a3:1a:85:5a:19:4c:dc:
d2:d9:10:4a:b8:60:96:af:52:37:d0:f4:1c:8d:14:
78:13:90:5d:70:d6:cf:05:df:df:34:ff:26:b8:95:
b1:97:4d:ce:b9:0f:55:c2:7e:ea:89:10:ab:37:91:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:EB:EC:FD:2F:0E:43:EC:2D:61:D8:52:7A:86:6E:2F:69:F4:2B
X509v3 Authority Key Identifier:
keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ce:dd:2f:23:d7:e6:86:b1:81:17:7d:d9:2f:10:02:b9:02:
c5:04:04:0d:8d:51:27:95:6a:7e:ba:e1:d5:bc:13:c2:32:6f:
81:4f:a6:d3:a1:dd:1c:72:f2:de:dd:f8:d7:b1:4c:64:ca:da:
77:32:eb:df:87:7c:b8:e3:c0:81:24:b2:4d:26:f8:0a:1c:6e:
5b:6a:46:59:80:cd:17:e2:aa:ff:a6:99:08:63:1f:de:73:77:
e2:67:b7:15:14:19:21:91:cb:62:e0:29:ca:d9:0d:65:66:d9:
4e:44:30:c9:cc:ed:d4:9e:23:02:09:b7:b6:a8:22:56:59:99:
ba:cf:c3:f5:34:8a:21:51:3e:b3:5e:77:59:2d:1e:a4:26:8b:
3d:b6:09:36:27:bd:d1:35:4c:2a:8a:76:d8:43:09:4d:8b:95:
ca:f9:a3:94:ec:5d:38:c2:9e:74:73:65:f1:fd:12:45:1c:82:
96:22:af:27:46:04:e3:47:6b:6e:9f:ee:74:d8:5c:05:0a:ad:
28:51:dc:11:09:61:24:47:cc:5e:e9:f6:a0:b6:70:bc:d4:50:
74:71:90:5c:0a:fa:c3:04:d6:25:5a:39:4b:91:61:ab:19:7a:
df:b6:a3:85:1d:d1:e9:dc:e0:79:5f:d7:32:8a:60:e9:dd:b5:
95:ba:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:49:47 2026 by rpki-client