
Error: rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
File: 7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft (raw, json)
Hash identifier: F7wmVTGcsS5JfTc6NhRVPAFFqxUHTJUrnrFkjRc6834=
Subject key identifier: D0:0C:1D:2B:17:29:E4:E3:5A:BE:25:EC:9C:15:EF:BA:40:4D:FF:67
Authority key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Certificate issuer: /CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Certificate serial: 3419D483A4F1D2B94B8CD68C5B1D4079E3CB510C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
Manifest number: 037B
Signing time: Sun 18 Oct 2026 00:05:33 +0000
Manifest this update: Sun 18 Oct 2026 00:00:33 +0000
Manifest next update: Mon 19 Oct 2026 02:39:33 +0000
Files and hashes: 1: 3138362e3233332e302e302f32322d3332203d3e20323730373535.roa (hash: 1vkfAgpzpUHxDLEI5zwricuLiS4Zo0mQ78Jl0UGFCoI=)
2: 323830343a373065383a3a2f33322d313238203d3e20323730373535.roa (hash: WFfr+TvX6VUyN+uU+tX9cJIIbzk37xHd/Sm9iaqDzc4=)
3: 7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl (hash: OZ0mf+UlqxgAYl4SioQB5asDkmlWpyN15WWYcdPDm1k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 02:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:19:d4:83:a4:f1:d2:b9:4b:8c:d6:8c:5b:1d:40:79:e3:cb:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Validity
Not Before: Oct 18 00:00:33 2026 GMT
Not After : Oct 19 02:39:33 2026 GMT
Subject: CN=D00C1D2B1729E4E35ABE25EC9C15EFBA404DFF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:f1:3e:95:8c:20:08:31:20:69:df:2c:1b:
f8:6b:18:c5:ec:e9:2e:69:40:cd:9e:fa:2c:3f:58:
3b:c1:95:c2:2e:14:45:c2:f3:0b:f1:c1:db:1d:75:
4a:f7:6d:ac:b7:42:5f:24:db:58:92:be:14:62:b2:
b5:10:1a:46:5c:28:2c:7b:92:4f:c9:a2:5d:79:78:
f2:c4:2d:6c:6e:0c:28:39:20:04:18:f5:f9:91:f6:
73:32:07:38:cc:f9:57:74:6c:df:3a:2d:e2:29:0d:
c8:50:71:dc:ff:4b:b2:97:dc:f7:48:54:29:78:b8:
53:be:24:f7:8d:52:e9:4f:39:97:db:8d:81:e9:97:
a8:f8:ba:e1:45:c8:78:35:ce:65:57:bf:f1:48:ca:
10:0c:95:43:06:33:42:8c:7b:1b:5b:ab:06:dc:86:
fb:f3:8a:29:a8:8b:8c:43:08:21:c2:71:c0:44:3c:
47:4a:44:a4:ad:42:e4:5e:77:6f:33:5e:e4:74:a8:
9b:03:99:66:b4:67:3c:54:10:6c:e5:4a:78:56:c9:
14:79:24:b3:18:35:6a:4e:17:de:f1:f7:83:9e:42:
bd:dc:9d:f7:f0:7a:a0:d5:d2:ad:66:0f:20:34:3b:
1f:09:7b:ad:07:a0:ea:30:b9:f7:70:ee:68:49:13:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:1D:2B:17:29:E4:E3:5A:BE:25:EC:9C:15:EF:BA:40:4D:FF:67
X509v3 Authority Key Identifier:
keyid:7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c6:b1:eb:7d:57:82:ae:f2:9a:da:bb:92:d5:22:a4:fb:79:
5f:cb:c0:c0:77:15:b5:32:35:06:40:b7:7f:5f:9b:28:c2:fd:
e7:da:d3:4c:85:28:77:b5:2d:9c:cf:1e:ec:f9:6f:33:15:b4:
05:5b:3a:15:f2:21:19:46:bf:c4:4a:e0:e6:d1:3a:f0:a6:fb:
5d:59:38:21:f7:ad:4d:8f:21:d3:20:9b:cb:fd:7f:8c:4f:16:
f9:56:1c:44:38:30:29:50:56:c8:52:77:7e:3f:b9:96:15:be:
9b:a4:53:88:f7:79:1f:12:98:5e:45:a3:3b:38:94:b6:a3:f3:
a4:c2:30:bc:71:0d:fb:ca:c7:da:03:ec:2b:09:9b:61:f7:74:
67:51:1a:9d:a9:8a:d8:d3:5c:82:ce:13:8e:0f:18:c3:44:07:
26:00:57:34:1c:53:ab:b3:65:00:43:a5:5f:95:a6:3e:c4:33:
7e:78:1b:4d:a2:37:03:bf:9d:b2:07:5b:05:99:89:e3:c6:5c:
42:f0:cd:5d:23:ad:55:bc:19:8c:b2:4d:7f:8e:21:74:db:ea:
87:a7:aa:51:8c:0d:33:37:d2:e0:70:a4:9c:9b:f8:26:e3:51:
9f:2b:f9:af:36:d1:39:99:a1:6f:58:03:13:ff:52:7f:89:c2:
c4:76:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:49:46 2026 by rpki-client