
Error: rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
File: CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft (raw, json)
Hash identifier: XcJiNqmqRIDouE2lcThaqnEEu0N1VT4GFh+lqG5eBPE=
Subject key identifier: CF:09:53:6E:6E:D2:AB:D2:17:A5:DE:D2:88:22:8E:75:08:F8:4A:F7
Authority key identifier: CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
Certificate issuer: /CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
Certificate serial: 3EA7C6984273AD59F53725FAEE929220F93E9958
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
Manifest number: 04CE
Signing time: Mon 12 Oct 2026 20:22:08 +0000
Manifest this update: Mon 12 Oct 2026 20:17:08 +0000
Manifest next update: Tue 13 Oct 2026 22:22:08 +0000
Files and hashes: 1: 3139312e352e3136302e302f32322d3234203d3e20323633353338.roa (hash: 9sfqahRf32d4tqITra5XtXy8DrHNKkUFyCVazU/vd4o=)
2: CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl (hash: 0YOR3jUApWEO0HdQi0OdLdVJzA8YQ1QvDEYVndE1xBg=)
3: 323830343a313339303a3a2f33322d3334203d3e20323633353338.roa (hash: CQhuuxP3PDNvN17OrryRN0Gvyf1aGtJF5/WxPRgfKzE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl
rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 22:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a7:c6:98:42:73:ad:59:f5:37:25:fa:ee:92:92:20:f9:3e:99:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
Validity
Not Before: Oct 12 20:17:08 2026 GMT
Not After : Oct 13 22:22:08 2026 GMT
Subject: CN=CF09536E6ED2ABD217A5DED288228E7508F84AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:70:c1:1b:56:76:31:73:e9:8d:5d:38:3b:
cd:81:df:3d:4f:82:6b:bf:3d:28:f4:0c:21:8e:85:
db:98:25:c0:59:47:77:6f:b7:bc:b4:3e:9d:46:e3:
81:81:5c:7b:41:0d:e5:d3:04:c8:27:34:55:26:20:
cb:4d:6d:31:59:dc:e2:25:f2:05:7d:da:60:66:b3:
24:a4:e4:d0:61:68:32:d6:2b:93:76:41:e4:1e:c6:
2c:4a:f6:8d:50:65:74:e1:56:6a:0e:ea:49:4d:17:
48:d5:31:d7:1b:bd:2a:e3:e9:9f:ee:86:6f:ef:c8:
36:6c:9f:0c:68:95:17:2d:44:81:d9:18:7b:a6:46:
ab:b2:c5:17:2d:2a:3e:00:03:40:c1:8f:3c:61:e9:
05:9b:ec:35:a1:19:75:a4:38:35:03:15:29:c5:18:
79:5f:4e:50:b9:fd:27:5b:11:f7:05:9e:7d:d9:22:
52:c9:be:d3:4c:83:35:a5:51:89:fc:a3:81:d3:05:
7d:9b:ed:ae:c3:74:ef:cf:fd:7b:08:d2:41:91:e6:
79:29:0c:59:82:9c:4e:8b:53:e9:fc:a4:62:60:65:
04:f4:59:6f:41:80:97:3e:57:e3:0b:e9:da:af:aa:
a8:07:97:73:77:b6:21:e7:56:c9:fd:e3:f0:88:6d:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:53:6E:6E:D2:AB:D2:17:A5:DE:D2:88:22:8E:75:08:F8:4A:F7
X509v3 Authority Key Identifier:
keyid:CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:90:6c:ff:6d:27:aa:43:e7:f0:cc:00:be:43:8f:d9:cc:
b2:61:54:c2:9e:41:36:42:f3:f8:19:ac:fd:62:3f:65:5f:57:
c0:20:2b:26:1f:ee:c5:a8:49:df:bd:1b:fc:41:ad:ec:a4:4d:
aa:4a:68:8f:a7:37:84:7e:09:fa:41:2d:c5:f2:7b:32:43:16:
c3:d0:5d:d1:61:69:95:cd:00:42:f3:46:d9:cc:45:91:f8:aa:
40:de:89:14:07:e8:1f:d2:40:22:48:19:49:fa:43:e8:3f:63:
f4:92:53:b1:fb:86:5e:6f:c0:56:fe:65:1e:91:35:fc:ce:8c:
6e:27:40:2e:3d:67:29:dc:f6:14:88:8c:c7:54:f1:05:35:68:
ca:1d:4f:ac:8e:38:2e:31:82:cd:11:59:06:c1:4e:ae:06:48:
d2:57:17:45:77:e1:0a:cb:49:d0:2e:25:7c:62:ef:a4:ef:6e:
03:ed:ab:00:72:1d:89:18:54:23:a1:f0:4a:75:75:94:8d:b9:
ba:3d:fe:f8:7b:31:38:f7:c2:10:6d:88:34:e5:bb:a7:5c:e5:
ef:fb:3f:43:1a:ad:23:bd:49:b3:d9:3a:cf:53:33:ef:6d:88:
04:56:2e:6d:97:50:fe:64:d1:7f:ae:cb:00:44:12:3d:89:ce:
f3:c5:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:03:59 2026 by rpki-client