
Error: rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
File: B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft (raw, json)
Hash identifier: LvC0o3TbCav1hKsJb3v6XuAQuLIhwjkXC1OxqaeykGs=
Subject key identifier: EF:10:B6:84:B0:84:07:BE:8E:85:9C:F6:8A:77:32:68:C7:AF:25:ED
Authority key identifier: B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
Certificate issuer: /CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Certificate serial: 6772436C63173DA0C2111AAD4D42E5DEC9B18A38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
Manifest number: 04C2
Signing time: Wed 14 Oct 2026 14:54:20 +0000
Manifest this update: Wed 14 Oct 2026 14:49:20 +0000
Manifest next update: Thu 15 Oct 2026 15:33:20 +0000
Files and hashes: 1: B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl (hash: d8o67Bf6OoSLcs3fyV00Urbqshappuhdx+8xm6qzhwI=)
2: 323830343a376530343a3a2f33322d3334203d3e20323731353937.roa (hash: ERY7fX2dsrKpFlE8bq7J/GcWuqcAKTCxzmCk9TGWSMo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 15:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:72:43:6c:63:17:3d:a0:c2:11:1a:ad:4d:42:e5:de:c9:b1:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B191DF220BC62DB6A525C9A4D6A09F762F806D45
Validity
Not Before: Oct 14 14:49:20 2026 GMT
Not After : Oct 15 15:33:20 2026 GMT
Subject: CN=EF10B684B08407BE8E859CF68A773268C7AF25ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:40:ce:ba:2d:d4:27:ba:d3:d8:02:b7:b8:
ae:44:63:64:18:13:97:7e:a9:60:de:24:db:42:05:
4f:1b:39:a3:43:44:34:81:3a:39:c7:bd:85:e2:52:
a6:78:60:b8:d9:dd:ce:8f:d6:c1:9a:2d:66:8a:d4:
59:63:dc:cc:a8:fb:cd:6b:39:8d:dd:c8:11:99:58:
ee:62:0f:69:3b:4d:67:e3:51:09:8d:33:a7:16:97:
40:17:16:ea:90:0b:0f:ad:55:c7:87:fa:e5:84:1d:
cc:e8:64:fa:6f:b4:b7:51:89:e1:db:9f:9b:58:4f:
d3:22:ba:67:04:70:cc:82:34:65:58:e9:ed:b5:01:
3a:47:1f:1d:41:a9:11:42:5a:94:e3:38:14:1a:29:
3d:0d:1b:54:a7:2c:f4:f8:4a:29:34:73:b7:4b:d7:
3c:be:e7:03:f1:d1:45:7b:0b:98:3d:39:cb:64:bd:
28:e3:77:d2:51:51:a7:f3:cf:14:50:b6:18:c5:3d:
59:6f:66:8f:32:2a:5b:08:28:0f:21:c9:5d:b8:10:
1a:5f:b0:5a:37:c8:57:fd:5d:3a:d7:ab:6c:51:45:
6b:4e:5f:ff:35:d3:8c:56:91:b0:3a:72:4d:18:3f:
cd:81:61:a8:55:2e:5c:17:86:d9:7b:ad:bd:4d:ce:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:B6:84:B0:84:07:BE:8E:85:9C:F6:8A:77:32:68:C7:AF:25:ED
X509v3 Authority Key Identifier:
keyid:B1:91:DF:22:0B:C6:2D:B6:A5:25:C9:A4:D6:A0:9F:76:2F:80:6D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/1/B191DF220BC62DB6A525C9A4D6A09F762F806D45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:e5:7d:ff:cc:14:b7:21:b0:6e:05:79:d7:24:fb:f0:a5:
a9:da:44:cc:49:36:35:37:ac:f6:86:da:8f:62:27:37:f2:0b:
ad:d0:e7:3f:04:35:53:de:53:44:d7:e0:0e:af:4c:a5:8f:b7:
db:b2:cf:15:38:d9:13:f6:0a:f9:c4:48:f1:71:ea:a9:41:8a:
fa:7f:30:c0:ea:27:25:bf:bb:bc:e9:56:3a:7e:3e:0e:1a:b2:
6a:b4:3d:0f:97:15:53:4a:eb:37:22:dd:fd:a8:26:da:e7:a9:
a7:4a:87:88:a3:22:b2:dc:6c:8d:12:ad:2a:9b:ff:3a:f2:97:
41:b4:e0:11:a3:c5:70:89:69:7b:14:8e:ea:a6:45:a8:89:0d:
bf:45:63:4b:28:1c:9a:3e:d0:a7:9e:2a:90:48:6e:a7:bc:23:
8b:2a:0b:3b:ad:60:ed:6b:c3:63:96:50:89:4a:88:ea:07:1e:
ae:15:e6:bf:4d:b5:c3:b9:16:aa:3e:0d:3a:bb:5e:df:3b:ca:
53:41:45:78:eb:06:dd:7b:d1:d3:91:82:c5:bf:3f:26:9b:33:
8a:c8:ba:31:b7:49:d8:ad:cc:62:cb:35:52:aa:79:7a:9d:65:
8c:22:8d:c0:de:1e:93:84:fb:4b:5e:0b:9a:b0:57:79:84:90:
ba:0c:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:48:17 2026 by rpki-client