
Error: rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
File: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft (raw, json)
Hash identifier: CZbh9b29kPjaJl2i1Ms/dYcftrl7FfqvkRMrhYTZAc4=
Subject key identifier: F6:25:5C:34:50:FE:7E:01:C5:BB:08:E0:CA:6A:6B:96:4E:8D:46:06
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Certificate issuer: /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial: 5F186D05B757D0F61F62CFCDF2DF7BB0FB2D2B2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
Manifest number: 0280
Signing time: Wed 14 Oct 2026 05:23:21 +0000
Manifest this update: Wed 14 Oct 2026 05:18:21 +0000
Manifest next update: Thu 15 Oct 2026 09:18:21 +0000
Files and hashes: 1: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: ZK94GCJeDueUtLX2HGlkBARJezl5um7V/VRRTMCjtxs=)
2: 3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (hash: BDByrLzTnWdKH66ft4GYs1p0O6zDU2ZSnyP1zi+H6o0=)
3: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: 49HXvbcey1ft5bTAbb2mm1Ivl/ApvZVY5rl5p+M4brE=)
4: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl (hash: LS+mvOU7Nw2zmsnCOxmvXjzb9gZ5LuL8IcIzDqNkPXw=)
5: 323830343a386165303a3a2f33322d3335203d3e203631363130.roa (hash: Lq/M7HyDrQmzxkTrgCJloswHG80yJe4W8wxfKyuxsX0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 09:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:18:6d:05:b7:57:d0:f6:1f:62:cf:cd:f2:df:7b:b0:fb:2d:2b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Validity
Not Before: Oct 14 05:18:21 2026 GMT
Not After : Oct 15 09:18:21 2026 GMT
Subject: CN=F6255C3450FE7E01C5BB08E0CA6A6B964E8D4606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:00:45:72:0b:0b:ac:1e:c9:f2:45:c5:6d:
ec:88:5e:ae:f5:9c:55:fa:e1:d1:2e:11:f6:94:b3:
d2:0e:91:57:4f:81:48:cd:de:c4:2c:de:55:b5:ba:
fb:3a:02:be:38:46:6b:9b:82:a6:83:fc:27:43:83:
45:6b:1a:46:f9:2d:8d:b7:31:58:f2:28:91:30:d7:
0a:d3:18:b1:d9:45:ec:e6:2b:88:96:e7:56:fa:79:
68:f8:b7:52:af:00:d1:da:ff:26:74:8c:d8:6f:5c:
0c:be:ba:e3:73:33:2a:87:13:cc:7d:4b:60:1f:0c:
11:d7:1c:32:b8:1d:61:34:1f:69:ea:e1:bd:b0:aa:
77:39:44:da:f4:f9:68:09:c5:27:31:c3:6a:13:da:
ea:4f:cd:b2:8e:a0:f2:61:60:37:98:b6:ca:60:d7:
c9:08:76:a0:dc:2e:e2:e5:9b:a4:25:65:2a:b3:c1:
2e:39:d0:5f:cc:5e:a2:78:c6:61:f9:10:5e:8d:ab:
44:d0:93:11:90:4d:6b:34:94:4a:5d:0b:ba:a1:26:
b8:72:e3:67:d9:64:24:55:89:d5:ae:25:a4:d9:82:
dc:f9:31:14:47:a0:93:a9:f1:00:0a:da:3c:1f:14:
80:75:80:73:73:7e:ad:5b:60:f5:ce:de:d2:bc:59:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:5C:34:50:FE:7E:01:C5:BB:08:E0:CA:6A:6B:96:4E:8D:46:06
X509v3 Authority Key Identifier:
keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:37:5a:4f:96:d7:7f:76:56:21:8b:38:5d:68:c3:6e:10:74:
21:2b:44:2d:62:93:42:da:76:b2:7d:65:f4:27:67:97:1f:ba:
1b:61:a8:b9:a5:d9:e6:49:4d:2c:ca:83:f6:3a:e2:30:36:ed:
9d:1c:4d:a0:78:a2:66:bd:a0:65:99:95:5a:3b:5a:75:21:69:
13:53:0a:8f:b5:c9:a9:b3:d9:61:29:4c:44:00:2d:93:8d:6e:
35:12:c7:19:cd:1e:dd:fd:91:5b:2d:17:d4:36:6b:de:74:28:
59:a5:d6:b6:83:51:5d:ef:df:1a:c9:b3:b6:1a:5d:fe:07:86:
9d:10:fe:0b:99:2e:10:a2:ed:31:01:71:c3:3c:6d:6d:b4:9a:
00:61:31:89:ce:17:b3:7f:1a:8e:d2:36:72:16:e4:5b:1d:34:
c4:51:64:b3:20:e4:d8:42:a5:c8:5e:e9:7d:07:e7:db:94:05:
50:18:37:8f:0d:70:58:d0:aa:c2:fb:d0:32:a5:9e:39:50:55:
39:20:87:2f:b4:fb:aa:69:59:77:77:7f:64:ad:01:5a:51:22:
a6:6d:71:35:21:b9:c9:ed:a4:7b:c0:0e:ee:49:53:4c:ee:bb:
34:02:5d:eb:51:ee:d2:82:46:17:f2:08:7b:d2:39:46:88:4e:
03:d2:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:27:16 2026 by rpki-client