
Error: rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
File: FF2D630E978417F06D6A73D00219A91B07536236.mft (raw, json)
Hash identifier: Q5OSi6MnILqd9c9XhAjcLjZkoEEF+q8RhCJbkt/UoNk=
Subject key identifier: 7B:68:E3:88:E6:78:A4:63:A3:7F:E7:BE:83:0C:B3:01:74:B7:E5:35
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Certificate issuer: /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial: 52EF30D6ADF685E6DDDEAE098C388722D04192F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
Manifest number: 04CD
Signing time: Sat 17 Oct 2026 17:20:00 +0000
Manifest this update: Sat 17 Oct 2026 17:15:00 +0000
Manifest next update: Sun 18 Oct 2026 20:00:00 +0000
Files and hashes: 1: 323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (hash: 7bKq2ImSu9HDgOmEe0l4CF6dj5HQWrW83cLCgx9PXcA=)
2: 34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (hash: tlMkqHSQTNEifoLRoyyP4xM6jhVB7QcDI9pX1vY4cDY=)
3: FF2D630E978417F06D6A73D00219A91B07536236.crl (hash: 6fGLyXmRaTAJ89nKd9WArHOZ/1mb08F7rk0KyJd/1LA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ef:30:d6:ad:f6:85:e6:dd:de:ae:09:8c:38:87:22:d0:41:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
Validity
Not Before: Oct 17 17:15:00 2026 GMT
Not After : Oct 18 20:00:00 2026 GMT
Subject: CN=7B68E388E678A463A37FE7BE830CB30174B7E535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:e4:67:4e:68:a8:cb:3d:b7:ae:31:e5:e6:
5e:cb:82:f1:54:fc:c6:a0:7a:05:b8:87:76:5e:57:
4e:48:8f:32:b4:83:2c:a1:9c:17:cc:95:2a:de:4b:
e0:e6:78:33:b9:5b:9a:aa:91:b7:4f:c4:37:6f:31:
5b:5e:20:d0:9c:85:c3:21:a4:a3:05:e3:80:20:5b:
23:51:71:3c:7c:26:76:f1:ce:99:4b:48:ac:fb:44:
da:99:40:86:bc:de:4d:26:1d:7e:f7:67:7c:5a:05:
75:47:1e:08:79:fd:f8:51:a3:1f:8a:60:00:88:07:
d6:94:cd:c0:5b:10:12:34:29:cf:b4:32:5c:2d:16:
ee:45:83:cc:c4:96:5b:7a:df:56:08:99:fc:d6:f0:
fd:82:30:c3:f6:5f:7f:67:30:97:64:07:a9:e2:71:
45:18:5a:3e:70:8f:3e:76:f4:a3:f6:ad:34:03:1a:
f7:29:01:9b:f7:d9:b1:83:30:b9:72:bb:1e:29:9a:
73:f0:39:c8:d0:88:1b:9e:05:5c:09:79:50:ef:21:
d3:95:c0:15:30:88:35:62:fc:c3:91:cc:48:46:09:
08:39:ae:0c:eb:2b:b2:50:6e:a0:1d:cd:1b:5a:8e:
91:c0:b6:56:76:da:06:44:50:88:88:19:9e:0b:fd:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:E3:88:E6:78:A4:63:A3:7F:E7:BE:83:0C:B3:01:74:B7:E5:35
X509v3 Authority Key Identifier:
keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:06:9a:c7:de:08:03:9c:aa:c4:9e:40:60:31:76:96:40:6c:
2d:cc:f4:36:1a:6f:a2:f3:98:1f:6d:6e:33:91:09:85:83:2a:
49:47:e0:13:11:9a:4a:06:27:74:54:f5:6f:d3:09:a5:bd:37:
29:b8:74:0c:d5:16:ab:eb:47:1c:83:47:f4:7f:3b:a0:fc:f5:
98:04:0d:89:0b:0e:40:95:49:a0:94:71:e4:53:44:26:ef:41:
02:bc:06:9d:16:8c:ba:df:46:24:03:44:df:fc:f7:45:ba:e0:
25:a1:f0:7e:3e:df:8f:dd:45:fa:99:61:88:28:97:8b:85:a3:
49:28:bc:0d:7e:8b:e2:ee:7a:ca:a6:c5:8b:91:f9:4d:70:9e:
25:16:95:f1:6f:a0:8a:d3:45:c9:3a:ef:9a:c7:40:24:e1:e5:
e4:84:87:46:a4:14:a0:97:a4:75:36:3e:73:b5:5c:3b:a3:f9:
d1:62:87:77:a9:8b:64:0c:b2:f2:98:fc:38:61:23:41:f9:98:
4c:80:10:da:bf:3c:13:d4:96:c0:93:4d:6f:6d:99:61:04:43:
f1:f0:ac:e8:96:72:bc:8a:b8:3c:c3:96:5e:53:f7:e5:b2:a3:
56:c2:ce:03:7f:a2:b5:a2:d9:2b:e1:49:81:80:3f:63:54:c8:
8b:a6:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:27:11 2026 by rpki-client