
Error: rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json)
Hash identifier: FqZNuMCnC1gf6VPV8Mm4Vbn3SvW7lUtzWq+1RN3knL8=
Subject key identifier: 67:6C:F1:4B:69:3E:68:00:A0:B9:4C:25:FD:C6:06:89:C9:4A:4E:B4
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial: 2210A71C2EAC986ED5B33FFAF626F8BE4A5258A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
Manifest number: 04D4
Signing time: Wed 28 Oct 2026 11:49:08 +0000
Manifest this update: Wed 28 Oct 2026 11:44:08 +0000
Manifest next update: Thu 29 Oct 2026 13:24:08 +0000
Files and hashes: 1: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: RZ00+qXW/BPYoY+V3LazcZSeSl7+kD6hzoXFr0qzr8Q=)
2: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=)
3: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: OO+jhtaXfsaCCyJk7xtpW0RV0WEIE/D/reE7X0pm+IA=)
4: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: QymnaSDu1ODQfT5ybG3gM6X4xk9jNNtTQ+zkNvj0XzM=)
5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 13:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:10:a7:1c:2e:ac:98:6e:d5:b3:3f:fa:f6:26:f8:be:4a:52:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Validity
Not Before: Oct 28 11:44:08 2026 GMT
Not After : Oct 29 13:24:08 2026 GMT
Subject: CN=676CF14B693E6800A0B94C25FDC60689C94A4EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:ce:bc:89:d9:c8:00:da:de:3b:84:b4:40:
82:f9:0f:f8:87:a1:2c:04:f0:5d:58:cd:1e:36:ea:
3a:84:0f:e8:32:13:0b:05:20:83:36:c0:45:a1:ab:
9f:d4:eb:db:05:23:fc:54:fd:48:e4:8b:00:90:a7:
35:05:6d:9d:e8:2d:11:f8:b0:80:b0:13:fb:53:6e:
9a:28:09:18:c0:88:e5:bf:1e:ca:77:4a:79:8d:15:
27:e8:c7:78:ce:f0:fd:0b:6b:c1:98:f7:b2:df:1f:
c2:41:a3:7d:c8:98:93:57:92:a2:37:96:f6:4b:03:
b4:dc:2e:d6:c9:67:6d:21:bd:5d:54:9b:41:d3:8c:
b7:98:a8:35:33:17:74:6c:59:a8:19:86:a2:c6:d2:
88:b9:75:29:8b:0e:5d:e3:47:64:09:80:d7:3d:e8:
6c:f5:7a:25:95:1a:41:9f:1a:ed:a1:8a:c2:f1:36:
23:ed:fa:5f:88:6f:b3:00:e4:f3:8a:67:6a:c2:23:
d8:bf:a6:19:0f:1b:a1:f8:b6:1d:94:4b:e1:48:26:
98:4b:f5:55:27:ba:9d:9b:d0:cd:6c:7c:b7:15:c8:
dc:a6:35:40:cc:86:a4:d8:36:e7:55:01:bc:a6:f9:
32:30:b7:da:b6:a7:ca:a6:a8:cf:5b:7b:6a:15:4c:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:F1:4B:69:3E:68:00:A0:B9:4C:25:FD:C6:06:89:C9:4A:4E:B4
X509v3 Authority Key Identifier:
keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:44:ac:47:da:ef:2b:f8:b7:9f:69:51:09:54:18:e3:db:
44:51:bf:38:bd:6f:d3:db:24:b2:1a:0b:b2:a0:65:0f:f8:05:
8b:3a:b8:59:11:6e:95:a4:cd:a8:8e:30:fb:55:d8:87:8c:c1:
87:76:d3:44:45:52:2f:42:0c:f3:7d:dc:df:a1:26:09:d7:bb:
e7:7b:bf:88:87:c8:e5:48:f5:c6:13:7e:df:d8:10:c2:f5:e9:
c2:90:3d:5c:b4:7d:aa:71:81:40:13:34:11:01:51:5c:ff:be:
0f:f2:c2:e4:2b:88:e1:c4:55:41:00:69:9b:15:81:40:d3:3f:
ea:59:a5:4a:a4:71:61:ca:8d:a5:d8:77:85:79:e9:0a:2b:45:
65:a9:df:9c:05:90:fc:9f:5b:0b:0d:65:25:06:13:3c:ad:1a:
a3:60:92:ec:fc:05:51:9b:53:bb:b1:a1:91:c7:fb:c9:03:b4:
df:21:5e:4f:0f:e8:30:69:8a:5a:ae:f5:10:84:3d:12:0e:3a:
bc:69:a0:e0:0f:df:5b:49:e0:df:13:50:b2:1a:8a:f8:d0:0f:
a1:a4:d0:0d:a5:81:8c:36:45:59:0b:c0:4c:c0:2a:08:f8:0f:
c3:ea:37:21:0b:12:a7:c0:ea:e3:41:ce:94:49:2b:27:3d:3e:
eb:48:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:42:30 2026 by rpki-client