
Error: rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier: NCUzPnVSZ5b81qtfS0tV3866KBF/qT3G2nY+XOHcf+I=
Subject key identifier: 78:78:E1:B1:E2:A4:01:CC:A3:33:3D:3E:D9:95:76:83:D1:A5:2F:B9
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer: /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial: 33BAD2A165AE7B52F8EC23935ED88E577FC0A805
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number: 04C0
Signing time: Tue 13 Oct 2026 02:17:02 +0000
Manifest this update: Tue 13 Oct 2026 02:12:02 +0000
Manifest next update: Wed 14 Oct 2026 05:29:02 +0000
Files and hashes: 1: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: J8jIMCvEjl6vVle5cWfCfgA491Vo8PDn8PBaUGMUX48=)
2: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: /Xtq+qsjoMGvCJ0F64FaVkfa1RHjNitlbm7h2cEX+MA=)
3: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: orL7FTz+mFf13FHlczzu0BX6cB95fhLXUECmK+7Vv0c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 05:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ba:d2:a1:65:ae:7b:52:f8:ec:23:93:5e:d8:8e:57:7f:c0:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Validity
Not Before: Oct 13 02:12:02 2026 GMT
Not After : Oct 14 05:29:02 2026 GMT
Subject: CN=7878E1B1E2A401CCA3333D3ED9957683D1A52FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:01:b7:98:8d:40:cc:68:fc:1a:dc:34:eb:
78:be:5f:6d:bd:d2:d1:a1:7c:92:cd:2e:ed:d1:db:
73:60:fa:1e:a6:97:c1:29:8d:13:27:96:0e:dc:16:
1c:44:5b:95:52:02:d2:5f:70:97:c5:a5:b3:3e:82:
a5:9a:e3:a3:9f:d8:cd:96:41:3d:7c:90:1c:7f:3d:
3f:1d:8e:26:ee:a5:08:5e:70:08:4e:90:91:d5:de:
18:bd:94:33:09:4f:59:81:03:c7:67:57:eb:02:36:
9c:7d:ce:f2:36:a0:17:9d:10:5c:14:6d:a7:25:80:
de:7c:d1:25:3e:45:8b:28:79:09:a0:43:71:e9:f9:
3b:46:5e:ea:89:30:da:ad:17:ae:08:1f:e5:9b:15:
3c:e3:b8:ee:1b:89:ef:c4:04:8a:4e:e4:53:33:c9:
8d:19:b1:cd:5a:86:16:e4:fd:ba:04:88:15:e0:be:
29:45:8f:c6:bd:9d:7b:ff:8c:4a:b7:26:69:05:25:
72:6e:cf:55:f6:8f:ff:60:61:c5:89:73:ea:65:61:
32:88:bb:21:c0:7f:da:7b:11:b2:c4:2e:62:ad:dd:
52:d1:ba:8f:29:d7:2f:b3:42:64:11:c9:84:fe:0f:
f4:e6:f1:6d:ce:b8:ef:60:1c:fd:28:cc:38:41:c9:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:E1:B1:E2:A4:01:CC:A3:33:3D:3E:D9:95:76:83:D1:A5:2F:B9
X509v3 Authority Key Identifier:
keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:3e:00:69:9c:c3:e4:e3:40:2f:ca:8b:27:d1:f5:90:5e:
91:fb:0d:a0:9f:30:2a:c3:c1:c0:02:a9:e0:a9:03:b5:78:60:
1b:36:4f:45:c3:39:e0:56:2c:f8:74:59:5b:d9:c4:66:b0:3a:
10:f3:d8:fc:ef:05:93:f4:a3:4d:40:6b:c2:9c:e9:d7:33:6e:
bf:b4:af:28:95:84:bd:f1:92:25:83:65:02:aa:bd:2a:30:54:
db:1e:e6:94:ff:e3:25:73:5e:1f:56:fa:47:4c:1f:fe:2b:a5:
b8:10:56:8c:3b:2d:1a:49:3c:92:86:be:ea:68:19:ff:22:01:
90:d2:cb:70:b9:78:de:01:22:fa:f5:fc:58:d4:fe:0d:0e:8d:
6b:47:45:49:2c:eb:7f:4b:c3:77:53:5e:9a:0b:6b:13:aa:d7:
6f:e3:c9:e4:53:34:77:2f:e2:1f:2a:d9:10:4a:72:c3:25:51:
6d:8c:7f:6d:42:9a:b3:2c:76:e2:aa:df:a8:36:d6:6d:49:ce:
d4:d7:22:42:77:e7:c5:7c:84:05:a4:57:5a:e9:69:4a:ed:7c:
88:b2:b7:bf:fe:5e:12:46:72:63:8e:25:07:39:e5:e1:f8:ca:
93:f3:44:4d:f9:ad:00:a8:1d:dd:bf:f7:4b:e4:f0:fd:70:14:
a8:1b:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:32:15 2026 by rpki-client