
Error: rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier: ms8GWsL02GtHLHc1ul5aOqN4j95QV6pDbkQriCYvAD8=
Subject key identifier: ED:79:34:C5:EB:30:11:A4:5A:5B:4A:74:E0:E1:CD:8E:19:DD:7D:57
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer: /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial: 0AA38EC5B4B50B3D643F4FEADD004498C6D499B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number: 04C9
Signing time: Mon 12 Oct 2026 16:02:25 +0000
Manifest this update: Mon 12 Oct 2026 15:57:25 +0000
Manifest next update: Tue 13 Oct 2026 17:22:25 +0000
Files and hashes: 1: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: FMXM6tkwCOpPm//GFr0xpZdKXbvnih6mt1OxHLNbiTc=)
2: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: dDxwWsuLt6PzSmmxuAc8Yhava3WFV+FXO+12jmUUfts=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 17:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a3:8e:c5:b4:b5:0b:3d:64:3f:4f:ea:dd:00:44:98:c6:d4:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Validity
Not Before: Oct 12 15:57:25 2026 GMT
Not After : Oct 13 17:22:25 2026 GMT
Subject: CN=ED7934C5EB3011A45A5B4A74E0E1CD8E19DD7D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:4c:ac:27:cf:ec:cc:6a:34:05:84:e0:49:
b2:c9:cd:47:98:d1:49:d9:3c:54:a0:e1:ed:c2:32:
b1:6e:7b:d5:d3:ff:f0:24:8c:18:3f:ab:90:9b:73:
cf:42:84:fb:3d:e4:f8:b7:65:0d:4a:41:fe:30:2b:
b3:3d:bf:13:22:67:e3:6a:34:ec:07:01:1f:a2:5e:
ca:1f:3e:ea:f4:40:29:57:fa:1c:32:74:f7:82:c8:
50:fe:80:5b:2e:d2:e5:dd:64:c5:3c:be:39:9a:b0:
d7:71:36:8b:a8:a8:0d:0e:63:69:3a:26:ac:d8:c2:
72:42:b7:bf:9f:de:77:5f:83:8a:ff:76:79:59:53:
7c:21:a5:ce:df:1a:ac:e9:17:0a:75:10:3a:b4:c0:
44:b5:d9:13:95:13:40:3b:14:a3:79:df:20:97:7c:
54:69:b2:9a:13:17:a5:2b:2f:2e:1e:67:7d:a5:16:
82:fb:79:27:c0:06:39:d4:44:5a:64:52:1f:9b:79:
3a:5f:46:32:d7:ff:b7:ee:98:6a:5a:56:f3:74:70:
ba:77:ad:df:e8:63:06:4d:05:9d:68:2f:a6:67:21:
a3:fe:21:4b:07:7e:19:f1:42:f2:e3:67:6b:b7:e4:
87:ed:f0:05:12:a8:ec:f1:cb:91:69:31:87:2d:ab:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:34:C5:EB:30:11:A4:5A:5B:4A:74:E0:E1:CD:8E:19:DD:7D:57
X509v3 Authority Key Identifier:
keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:95:0d:f8:15:90:f9:17:af:5f:b8:44:5e:7e:7d:25:a0:
a1:9e:df:16:46:f7:85:70:52:6b:33:61:26:db:fa:a7:8f:d7:
52:00:fd:be:f5:69:07:00:36:64:8b:f3:61:65:43:16:d3:01:
00:32:f0:df:92:45:be:a2:75:89:d7:69:49:86:a2:22:b6:72:
ae:43:5d:c1:db:2e:34:23:eb:c3:b4:b4:96:5e:30:0a:17:d7:
3c:fc:9a:b9:d2:44:fe:08:10:35:a0:6b:ff:62:94:08:11:b7:
43:d1:c9:cf:0b:fa:57:ed:58:c2:92:4f:5d:be:c9:24:bc:1d:
94:72:85:bc:ce:3a:1c:2f:c0:8e:dd:d6:3f:b6:ed:f4:1a:42:
37:1d:a4:99:45:da:12:94:a7:d1:10:05:72:2f:17:90:f1:6e:
e0:8b:b3:96:7f:a3:00:bc:db:b6:d4:7b:e1:45:94:7c:2b:fa:
06:9e:23:18:57:7f:84:6e:b0:b7:5a:15:74:b9:fd:29:de:7e:
14:bc:da:2c:d9:1e:62:ec:9d:13:f9:0f:f6:a4:57:de:46:4e:
c0:84:04:00:d3:01:71:ae:4e:f7:ff:b2:13:5a:99:77:f4:9e:
6d:02:d4:54:74:c5:d3:8f:32:91:6f:01:69:fc:e7:26:b0:d3:
46:f7:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:16:17 2026 by rpki-client