
Error: rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier: n9WreNP4pnEVyn3dxMOGrCXj4kU+SqJwpbQJ9K4fX8k=
Subject key identifier: 47:24:65:D8:2C:26:0F:6B:11:5F:86:45:E1:34:B4:47:D9:5F:DC:75
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer: /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial: 236F5B35926FF47ECDA5E8C2551BCA57D11E73B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number: 04D0
Signing time: Thu 15 Oct 2026 21:50:36 +0000
Manifest this update: Thu 15 Oct 2026 21:45:36 +0000
Manifest next update: Fri 16 Oct 2026 23:33:36 +0000
Files and hashes: 1: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: CZVpE3RS6EdJBL+s1oh+60RO519fUscnAr9C3EvwsPI=)
2: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: 6cigMOSfoqE6zvwmb3uMyGKEPSH30r6IbqvU3uHv77s=)
3: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: DotHAXvQTJoa5QK/qy1kOU/pMjzxpOXZwIRnyvXUprk=)
4: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: ljf3kOKKs3HOJctB53yQDyI5LaBzKELDW+vqP0oDMdM=)
5: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: rmlEe09mFumzi++BacY6CaQ0WYwjZ9dIki0JAAJknNY=)
6: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: BSZbCxwHEo+fozwORTwdzT2Defm7bT08xFVueevnm7I=)
7: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: b/jxd0Ies4lj+Bf7n+iSI15tUeChU2EBazK87gFFNJw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 23:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6f:5b:35:92:6f:f4:7e:cd:a5:e8:c2:55:1b:ca:57:d1:1e:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Validity
Not Before: Oct 15 21:45:36 2026 GMT
Not After : Oct 16 23:33:36 2026 GMT
Subject: CN=472465D82C260F6B115F8645E134B447D95FDC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:5c:f6:1d:83:74:f7:e1:dc:1d:b5:e5:76:
2f:4e:41:e0:a5:f5:db:d7:17:14:ba:d4:cc:4f:59:
63:5f:e8:fc:ab:c2:8e:40:aa:39:4d:37:e4:6d:a9:
66:df:86:5e:ba:dc:eb:88:26:39:c2:c4:40:f0:db:
58:b1:28:f7:bd:48:91:cc:db:e0:72:3c:12:03:70:
9c:bd:48:d7:ea:56:03:0b:5e:9e:19:7f:6d:5a:8b:
9d:a1:43:7d:1c:e9:b6:3c:38:0c:77:e6:59:0d:d6:
da:ad:1e:f3:e4:2f:7e:36:50:06:5d:a8:31:37:fd:
e7:06:af:4d:84:7b:92:b0:09:15:78:cd:19:ac:91:
d7:71:00:d9:f5:d8:a1:73:9b:bf:10:27:8f:fe:db:
1b:4e:ee:a0:e9:02:02:6e:1b:af:c8:d9:0a:d5:61:
62:3c:01:f2:78:2e:e6:c6:d5:9a:b7:e9:2b:75:12:
b1:8c:4a:a4:39:0d:bd:8b:ed:12:57:01:86:61:5a:
c0:e5:9e:bd:cc:fb:ed:89:70:dd:13:fd:85:b4:87:
a4:5c:c0:99:d9:8c:ea:dd:bf:b3:1e:0b:b2:bb:54:
cc:c3:10:c8:99:3d:7c:4d:82:0f:46:9c:63:d2:f2:
c7:c3:46:cb:1f:26:e4:7e:01:38:ef:15:0f:d1:6b:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:65:D8:2C:26:0F:6B:11:5F:86:45:E1:34:B4:47:D9:5F:DC:75
X509v3 Authority Key Identifier:
keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:50:40:68:dd:1d:b3:ad:63:e1:61:53:59:50:da:98:c7:
ef:5a:50:00:aa:8b:e7:1e:9d:a0:0e:67:67:00:9c:3f:a2:f1:
97:63:cb:d0:08:1e:69:0f:bc:18:0c:49:16:ea:f5:77:f5:76:
ef:06:db:1e:5f:7a:c7:62:30:cc:56:52:d1:65:c0:a8:68:cb:
e6:c3:38:fb:ac:ad:97:84:fc:f0:e1:a3:fd:bf:ac:88:39:61:
c2:ce:b8:aa:70:8e:6f:b4:d4:0a:08:5f:c8:dc:64:a8:23:16:
b2:27:25:0c:22:ef:ba:e4:a7:ec:d8:22:35:30:23:dd:91:18:
46:f9:99:dc:c9:f2:4a:2c:a6:73:85:2a:fa:27:90:eb:d2:b7:
d9:90:ba:1e:6b:d3:1c:9f:cc:72:a6:0d:de:b7:34:ae:ce:5e:
4a:1b:bd:07:32:83:b1:17:88:c8:25:ee:2f:d6:6e:e6:76:84:
59:b6:46:8b:ff:d7:44:9e:1d:b0:6f:e5:32:9a:4d:4e:20:c3:
7c:62:69:5e:57:87:5d:ba:89:a6:b4:4f:dd:12:a0:f9:a8:e2:
c6:69:40:fb:98:c7:e8:67:83:0d:0b:cb:ea:67:d6:21:5d:9a:
af:94:77:33:71:36:54:77:73:83:84:9d:4c:ef:63:0b:6c:84:
19:92:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:33:18 2026 by rpki-client