
Error: rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json)
Hash identifier: DDWVQ19oXaXEv/ENO6QBZS2moValXw8ibBT+D5DFrIk=
Subject key identifier: F2:98:80:EB:55:57:88:A7:23:5D:1E:2D:E4:31:66:F1:C2:B7:2B:9E
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial: F6D8502ABEF75E6BE194EE629E2C720275948D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
Manifest number: 029A
Signing time: Mon 12 Oct 2026 21:10:00 +0000
Manifest this update: Mon 12 Oct 2026 21:05:00 +0000
Manifest next update: Tue 13 Oct 2026 23:04:00 +0000
Files and hashes: 1: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: mRoJxlUfwEBjFf9wX960FoxB74HITXgomDbH50/+HOk=)
2: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: 6PShaX8h/AVJp6bPgeVzA4tURjIZtwXwMwIPwhids84=)
3: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: uJPZpGqlp2+6BM8e5FiCaFRRh4X3aiGqt7DY2Tt6jT8=)
4: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: vcEGgbMylYii2pRVgpNlGpz2Ml6VZONVctEZkry1l6A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 23:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f6:d8:50:2a:be:f7:5e:6b:e1:94:ee:62:9e:2c:72:02:75:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Validity
Not Before: Oct 12 21:05:00 2026 GMT
Not After : Oct 13 23:04:00 2026 GMT
Subject: CN=F29880EB555788A7235D1E2DE43166F1C2B72B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:eb:20:c7:56:64:a3:a2:2e:2d:ba:9c:c0:
a0:df:cf:9d:11:bc:9f:ec:8e:66:4c:49:0e:a3:0a:
c0:91:15:10:f8:b4:d9:ae:a0:bb:5b:89:5b:8c:5f:
96:4c:98:89:3d:ef:31:f8:44:a4:4b:26:41:91:dd:
64:11:78:57:b2:49:39:62:5f:d0:93:6d:c4:20:79:
77:e3:38:64:e9:78:00:f2:a0:9c:eb:38:70:22:32:
7a:b1:22:aa:9f:33:29:5b:28:4b:82:43:74:d8:2c:
83:2a:26:4a:9c:bd:62:63:cb:13:c2:b4:44:8e:13:
68:b6:7d:f2:e4:ef:58:bc:21:fa:64:30:df:cf:16:
d5:03:83:12:64:0a:15:d7:81:12:5e:d5:25:a8:9d:
49:bc:ee:df:78:62:e4:70:16:de:e4:9b:a9:63:f5:
2a:48:44:26:59:7f:41:09:3a:2c:14:9e:d5:88:6f:
3e:6c:57:fd:c5:6b:f8:08:b7:64:15:b8:42:cd:bd:
8c:d8:7d:ea:73:ba:a0:1a:4e:38:21:d2:90:09:ca:
28:8f:94:29:b8:ca:36:0d:fd:4a:9a:56:77:a3:48:
fd:86:fc:6e:06:d1:20:3b:9c:c0:9f:c8:d7:71:f5:
85:00:a8:69:1b:f3:8d:c3:4f:45:18:92:e3:f2:81:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:98:80:EB:55:57:88:A7:23:5D:1E:2D:E4:31:66:F1:C2:B7:2B:9E
X509v3 Authority Key Identifier:
keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:19:db:e9:76:95:f1:b1:df:28:f9:0c:66:f4:ef:fc:fe:
f6:0b:3e:2a:36:48:85:e2:7e:b3:80:a0:6a:d1:66:59:43:2a:
66:82:6d:ac:23:19:97:95:e7:0c:44:74:15:b0:34:67:6a:f1:
b8:f9:61:85:d9:3c:57:b3:92:dd:34:0a:19:b7:7a:a6:22:12:
ac:20:ba:02:b4:b4:9f:fa:d0:fc:bc:1f:df:12:39:50:47:2b:
6f:b6:b9:a1:92:79:59:7b:63:12:63:94:8c:d7:85:c7:fc:0f:
78:0a:4d:1d:c1:7c:f9:7d:df:83:03:7c:61:17:18:2e:7b:1a:
85:8c:d0:87:90:36:b5:8b:77:76:99:69:c0:4c:49:95:4d:a1:
bf:3d:a6:ad:2b:80:25:f1:af:b7:f6:bd:34:2c:a4:1d:df:c0:
29:59:e7:db:79:73:bf:db:18:9c:ae:95:46:9a:a1:c8:85:66:
4b:03:f8:07:c6:91:c6:05:73:21:27:ad:4b:a4:39:25:17:11:
f9:18:75:10:30:71:39:4a:88:3b:76:19:23:9c:26:46:de:91:
ef:e5:38:4f:6f:df:dd:10:3d:d5:b9:ed:45:f0:0f:72:cc:22:
d5:b8:b4:3e:ee:75:b8:26:ab:8b:73:32:57:90:43:71:4f:fa:
3a:81:a1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:59:31 2026 by rpki-client