
Error: rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
File: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft (raw, json)
Hash identifier: 4ROTTf4LO05/Qnkeq4JweNkiwVlAZmNEFpMip2v2GJ4=
Subject key identifier: 20:54:DE:F1:6A:93:56:0D:CC:01:C2:24:44:46:1C:C9:14:EE:0B:8C
Authority key identifier: 00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
Certificate issuer: /CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Certificate serial: 27189DCFEE6B8413D615C3346E8642E2BBE43A32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
Manifest number: 043F
Signing time: Mon 12 Oct 2026 03:05:25 +0000
Manifest this update: Mon 12 Oct 2026 03:00:25 +0000
Manifest next update: Tue 13 Oct 2026 05:59:25 +0000
Files and hashes: 1: 3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa (hash: GZOOzF6+huX11NA1xpK042Y7OosAXZgQwOe/WfZ3Cq4=)
2: 323830343a323366303a3a2f33322d313238203d3e20323634313932.roa (hash: FaS/h3hHnQoJmaMtssOoo07jHkcwOfGokdxSZrzDKNY=)
3: 006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl (hash: JbirxG81JUgGw37hxK86INJpVP4ppWk8jSksc+UGfvw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl
rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 05:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:18:9d:cf:ee:6b:84:13:d6:15:c3:34:6e:86:42:e2:bb:e4:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Validity
Not Before: Oct 12 03:00:25 2026 GMT
Not After : Oct 13 05:59:25 2026 GMT
Subject: CN=2054DEF16A93560DCC01C22444461CC914EE0B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:be:92:1e:6e:74:ed:a2:09:6e:f2:53:80:
b8:a8:97:4a:12:da:08:3d:2b:b0:88:8e:35:35:36:
3f:3b:92:49:84:ac:d6:7e:81:34:29:97:00:a5:e8:
eb:53:9b:67:1b:6b:58:c9:2d:77:19:b6:7d:33:cf:
14:91:de:a3:86:e1:0d:23:88:5e:6a:54:07:e2:26:
6b:59:da:80:33:a4:84:4c:4b:6b:ce:2f:6d:b4:9b:
2d:1d:b2:fc:30:20:0d:61:d8:9b:df:f3:d5:8a:e6:
27:7a:7b:13:5c:4b:56:91:e7:e0:6e:fe:79:48:73:
b5:8f:96:a4:93:88:25:62:a2:5c:aa:6a:1f:1f:b1:
62:77:c9:01:c6:14:98:f9:c2:58:cd:c3:e6:83:c8:
ac:c4:ae:25:67:6d:a4:bc:e3:df:f4:52:ad:de:2e:
22:c8:e0:99:7a:0e:a0:7d:9b:52:84:11:8d:00:c2:
01:d2:16:cd:19:6a:e5:84:51:1e:ff:9f:1c:5b:40:
36:dd:4a:05:f6:cf:ea:8c:e8:13:a7:44:3f:da:3c:
41:c1:bb:0e:53:f0:81:76:e6:0e:e1:07:2d:1f:c1:
ee:b8:85:01:ed:41:f7:97:30:03:79:d0:ff:10:08:
34:84:0d:a7:28:50:ab:dd:90:cf:42:79:58:a1:ae:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:DE:F1:6A:93:56:0D:CC:01:C2:24:44:46:1C:C9:14:EE:0B:8C
X509v3 Authority Key Identifier:
keyid:00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:d2:7a:6e:5c:59:56:16:f4:bf:a8:a4:31:14:d7:9d:b7:
39:78:57:37:32:35:00:c7:d2:d4:6d:77:38:ee:8c:c0:81:1b:
30:53:10:46:20:4c:19:8e:27:b4:e6:21:d2:35:b4:9b:5b:cb:
df:37:ea:d4:88:03:be:6e:73:1d:d5:d5:89:07:b4:b3:c7:3e:
b2:4b:41:ce:e4:75:e4:18:8e:b2:6b:22:c1:da:d9:9a:58:1b:
15:e2:9b:5c:2d:96:81:fe:1f:13:7e:58:71:26:ac:17:7f:6d:
84:27:86:6e:21:6c:25:4f:ae:ee:42:d0:68:5b:40:c8:25:38:
3e:50:63:c6:ab:95:86:a6:e3:44:19:e6:39:07:05:47:ff:6c:
41:92:c4:5e:31:f8:41:2e:9f:7a:37:f6:7e:cf:7d:47:de:ff:
c6:ae:6b:f8:84:44:2d:c2:5b:6e:cb:17:59:ff:d0:34:26:13:
bd:fe:37:47:84:7e:ca:a3:55:97:81:ac:69:8c:5d:c7:4e:61:
4c:11:a8:05:8b:d1:3e:f7:dc:a7:45:8f:35:e0:4c:ba:fe:7a:
ab:2a:93:8d:68:7a:b8:c4:d8:84:94:3b:b9:f4:29:e5:8d:10:
f5:00:fc:4c:a7:18:23:65:95:68:78:6f:30:be:70:91:5a:ce:
2e:ed:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:55:19 2026 by rpki-client