
Error: rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
File: 6321913B8F265DB266263684C1BC420640061E1A.mft (raw, json)
Hash identifier: gghZ5/+AEZsHp8OeJ3eIJ9efiVXEZFyqzzzANNPMw+8=
Subject key identifier: B3:2E:C0:3E:19:DA:AD:D8:1B:D7:90:5E:FC:DF:E7:72:E7:C5:69:07
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Certificate issuer: /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial: 2FF33DBFB68FD51B811877C61F435BE848EC6340
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
Manifest number: 0428
Signing time: Sun 20 Sep 2026 08:03:35 +0000
Manifest this update: Sun 20 Sep 2026 07:58:35 +0000
Manifest next update: Mon 21 Sep 2026 11:20:35 +0000
Files and hashes: 1: 3137302e36362e302e302f31362d3234203d3e203131393933.roa (hash: Aa6+6KgZHik6+ABzhpmvLEKv4dZCz7fRMiExXTKJrRE=)
2: 3139382e3138342e3136312e302f32342d3234203d3e203131393933.roa (hash: QIRLiXgnYMfb4NQLMga6l9oGFV4HRi7LxF1Dsm3IXgo=)
3: 323830313a38653a3a2f33322d313236203d3e203131393933.roa (hash: Ey7Imlr5pLL+DH2mMRpmrRyRdOVVI3qVj9OnEUUXico=)
4: 6321913B8F265DB266263684C1BC420640061E1A.crl (hash: b3bB06ci2czeRf0ou/VYWUczg4CbmIFNoilTn6S+oIY=)
5: 3137302e36362e302e302f31362d3234203d3e20313938393439.roa (hash: 072VEbaI7xB9Jhovu0RQAyYnQXYwsrJAt5OhwHYTOLE=)
6: 323830313a38653a3a2f33322d3438203d3e20313938393439.roa (hash: CxBZcVcs0zRokgf5NsuyeWExlz9SeC4w5+lGEh2FhQ0=)
7: 3230312e33332e3134342e302f32302d3234203d3e203131393933.roa (hash: TdA9895ONLIzi4qc+d1f2GAp2J5CYRUmZoT7qlO38BY=)
8: 3139382e3138342e3136312e302f32342d3234203d3e20313938393439.roa (hash: 4Z9cha3sVBOlzTrT0dVMcvNNK+EHRcrGLqWw2BwB8zA=)
9: 3230312e33332e3134342e302f32302d3234203d3e20313938393439.roa (hash: lI2E/VYVJ+2wUZmeC41kZFySZrgdHxD6/s3ruqb3rk4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 11:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f3:3d:bf:b6:8f:d5:1b:81:18:77:c6:1f:43:5b:e8:48:ec:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
Validity
Not Before: Sep 20 07:58:35 2026 GMT
Not After : Sep 21 11:20:35 2026 GMT
Subject: CN=B32EC03E19DAADD81BD7905EFCDFE772E7C56907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:19:6b:bf:3f:b6:4f:c4:8d:03:bc:bd:c5:
31:0d:94:bb:49:6e:17:6f:d5:25:46:61:8c:e3:e1:
52:1a:e6:d1:c3:44:e9:e4:fe:0a:7d:0b:a7:c3:21:
86:63:f8:2c:d8:0f:5f:28:99:a0:0c:38:7c:b2:de:
94:d3:06:d1:d3:0a:a2:18:1b:1e:3a:41:62:20:ec:
0f:df:f6:43:b3:0c:f0:83:ce:a2:ac:07:e0:de:5b:
14:84:63:b9:1f:21:f9:d5:67:e4:1d:64:d1:12:2b:
1c:fd:ff:04:0e:94:75:2c:3f:4f:91:2f:89:e9:c5:
0a:d9:8b:fc:57:a1:77:68:67:d9:60:d7:ff:ef:6b:
62:d3:ef:dd:e3:07:40:93:9a:ec:e7:97:ea:6f:c8:
1a:93:e2:7c:9f:ca:93:a4:f1:bf:ed:4d:6a:3e:e2:
02:03:33:07:28:a1:ae:9d:db:76:c8:72:76:c8:57:
44:49:43:cb:49:d0:6c:90:5c:46:76:6b:e4:2c:25:
ad:db:77:24:74:b8:af:c1:11:b2:34:3e:e6:9e:4b:
b3:60:cc:97:87:bc:7c:e1:16:ca:2f:83:46:97:28:
d4:88:9a:8e:65:5e:90:7b:15:aa:75:b5:08:7d:59:
08:d4:d6:dc:95:41:7e:f5:dd:f3:25:97:30:d9:7a:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2E:C0:3E:19:DA:AD:D8:1B:D7:90:5E:FC:DF:E7:72:E7:C5:69:07
X509v3 Authority Key Identifier:
keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8d:bb:d3:32:47:e9:c5:11:2b:e4:0b:ac:2f:70:82:5f:2c:
f5:29:ae:42:a2:da:1c:f0:01:5b:18:25:c0:9d:fe:ff:c9:f5:
d6:9e:6e:69:95:9b:85:34:23:93:4e:81:03:63:99:73:5e:2a:
64:c8:31:60:df:07:23:d7:48:3c:ab:c5:13:19:39:09:a7:f4:
9f:cd:4c:e3:3c:c3:09:da:c7:26:b1:ad:c7:0f:74:e2:b9:75:
49:80:2b:f2:26:1d:d4:d4:ad:5c:5b:89:a6:dc:9f:e1:a1:da:
1a:7a:b5:06:56:af:59:a7:c9:05:a0:01:ef:69:82:a7:ce:c9:
81:7b:69:26:07:74:a5:b8:ce:b9:8d:cc:5f:07:d0:94:da:32:
65:83:81:9e:15:31:cc:cb:e6:9e:21:5e:24:b9:62:0f:96:1d:
50:0c:4c:85:16:a7:e0:5c:91:d9:69:f0:07:12:b6:38:4f:ca:
d9:07:8a:09:38:89:15:2f:95:7f:80:5f:1f:9b:1c:6c:30:58:
8b:b6:a4:c7:70:c6:94:81:12:c1:9e:39:84:db:e5:5c:45:54:
d9:da:58:52:78:90:e8:9a:33:53:44:13:4b:be:a9:f8:95:9f:
0f:aa:7b:38:52:bb:38:d3:1d:06:f1:fb:31:bb:f0:36:98:8e:
79:64:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:19:59 2026 by rpki-client