
Error: rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
File: 783CF2D02131A21E333113BEEE878BC38B6104B6.mft (raw, json)
Hash identifier: xP+Mjwwg4Cmo/ZhcUokXD80Pi+nfYjvwWFOraMXCjHE=
Subject key identifier: DD:19:8F:0F:25:B1:99:64:D3:BE:FC:4B:32:92:BB:97:5B:9B:38:C1
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Certificate issuer: /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial: 60C27EF2E8FB7B642314E544E788AC8AC3E12356
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
Manifest number: 0327
Signing time: Wed 14 Oct 2026 04:28:00 +0000
Manifest this update: Wed 14 Oct 2026 04:23:00 +0000
Manifest next update: Thu 15 Oct 2026 05:23:00 +0000
Files and hashes: 1: 323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (hash: KBQCdFHplWquuT+kab6DZbpDzKtkvdcAkkBTGtbdW8w=)
2: 783CF2D02131A21E333113BEEE878BC38B6104B6.crl (hash: pJYthK6ktE8hcGmseb3VSdwq1ujPskxsX7xrBkylnRU=)
3: 3137392e3132372e33322e302f32312d3235203d3e20323633363337.roa (hash: KKtwa53J2lrY3PPRBn6nepAkzXidOs/IwnWWY6AmEXI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 05:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c2:7e:f2:e8:fb:7b:64:23:14:e5:44:e7:88:ac:8a:c3:e1:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Validity
Not Before: Oct 14 04:23:00 2026 GMT
Not After : Oct 15 05:23:00 2026 GMT
Subject: CN=DD198F0F25B19964D3BEFC4B3292BB975B9B38C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:f6:d8:60:37:09:35:72:7d:1f:66:f4:88:
8f:87:ee:41:a0:1c:c2:15:18:41:83:e3:2e:f8:87:
41:d8:32:81:e7:70:75:73:6d:76:6e:8f:38:48:8e:
27:04:a6:52:23:5d:18:02:c8:02:86:20:fd:44:c4:
6c:65:40:8a:92:81:a7:18:c1:c1:d7:1d:93:cf:93:
a0:3a:db:81:c4:54:85:fd:76:4f:fa:f5:8b:d2:1d:
6a:c4:bb:97:48:cf:75:f2:55:16:30:80:51:18:8a:
88:ed:c7:d0:19:ae:0c:54:12:03:b4:fe:17:f5:c9:
c9:4c:49:dd:7d:bf:e5:a9:0e:d5:8b:d7:b1:d8:46:
6c:48:8f:89:38:db:9d:12:11:cc:d1:7c:da:0c:51:
e6:0c:60:3a:38:df:bb:26:41:3f:4e:c4:f3:d1:b6:
c0:d0:b8:cf:53:a6:59:1f:7f:77:66:4f:7e:91:b0:
8d:a3:db:6c:3e:ee:7d:10:6d:3e:44:5d:80:6d:0d:
6c:26:b0:bd:23:4c:05:de:45:d7:25:ae:a7:3b:e6:
9e:3f:10:9d:36:f9:c9:11:04:5a:b9:ce:93:cd:09:
d6:f8:6c:0f:a3:5d:e0:8d:5c:90:9f:ce:e7:33:a3:
ff:bc:4d:51:7d:08:a9:21:7f:eb:1c:b9:a4:52:dd:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:8F:0F:25:B1:99:64:D3:BE:FC:4B:32:92:BB:97:5B:9B:38:C1
X509v3 Authority Key Identifier:
keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:de:ab:35:87:8c:6e:8e:3d:48:9e:04:c0:71:d0:69:c9:6c:
7c:05:87:7d:b0:82:78:81:91:39:e4:47:31:89:14:2b:6b:9a:
c3:17:99:9f:d8:37:12:6b:9c:c9:8d:b5:aa:7c:80:55:0f:02:
17:9c:ea:05:ef:db:3c:20:71:1a:cd:5c:d6:e8:f6:5a:28:02:
d1:2e:6c:40:61:ae:ec:3a:eb:23:4c:dc:17:d1:f5:9d:8c:0d:
85:74:13:51:b6:60:a2:e3:97:59:eb:30:dc:08:90:4d:59:fa:
34:3c:fb:1a:1c:3e:2f:91:c9:f8:53:2d:9b:15:bf:18:51:a5:
df:e6:4c:71:3f:09:55:e9:d9:70:92:87:35:1a:f1:70:d0:6f:
53:52:19:d9:95:bb:1c:61:4a:0f:ea:e6:ca:2d:b7:b1:2e:fd:
fb:94:27:3f:8e:4d:fd:85:95:66:de:01:27:51:b6:83:69:b1:
5a:83:37:07:9d:52:c3:15:d6:cc:86:f9:c4:df:d6:d3:95:b3:
7c:1b:d5:f0:bf:c7:17:a9:51:95:26:74:ae:c3:49:59:6d:a0:
13:ad:c9:aa:2a:7e:ab:bd:05:4a:8f:fe:6d:b5:87:0a:9b:29:
4d:73:38:29:fd:13:62:94:28:d4:fd:f4:0f:0c:d4:a5:90:93:
84:c6:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:15:08 2026 by rpki-client