
Error: rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
File: D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft (raw, json)
Hash identifier: S3p9vfN28nSx3+oNSaDcc1V1qnuypTgP+L+G2vCMdJw=
Subject key identifier: 80:0A:B6:03:9C:2D:9B:D9:3E:76:3C:9A:DA:8C:A5:12:FD:30:47:28
Authority key identifier: D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Certificate issuer: /CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Certificate serial: 4BA736D5CE22E3822148B665861BB3385505BFB1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
Manifest number: 3E
Signing time: Sat 24 Oct 2026 04:13:59 +0000
Manifest this update: Sat 24 Oct 2026 04:08:59 +0000
Manifest next update: Sun 25 Oct 2026 07:52:59 +0000
Files and hashes: 1: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: 6usHz3+mqcfGTvGn4dRYN3S7uTdqwQG5qEnYsoLEnl4=)
2: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: Wa/V4eertNy3OlZH2Xftrx0fU6Y3WcRTDr5j1dScR54=)
3: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: euFs/tw+SFJKOPYfLqxSd0sFuD7nvLGJcHdUe81QfXc=)
4: 3138362e3234392e31362e302f32312d3234203d3e20323633303232.roa (hash: nus+ZX1/L4riIe5h7MirtLUd0sb2JMc7KIsmO+pjLXA=)
5: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: bpCZuy4rAYg1IgAyehuvFWnQ2ATRS4GhKwrH84MNFpI=)
6: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: AOVxgLFY04uhIZbI/8DqQGdXzhrDBnsmgZoUxJXyeEg=)
7: 323830343a6131383a3a2f33322d3334203d3e20323633303232.roa (hash: z7PegJXqQ0sB+NbE4LvDulgB8YzcMK7gQvzkM6Rxg/A=)
8: D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl (hash: /2CkfE2tiR6yqowuUpD8fcJJC2MPQyFPds8s6u+gm5Q=)
9: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: PS+XeGhXOEmD+nirZe3TWzTMK43VyxVVxjALwkpvPBs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Oct 2026 07:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a7:36:d5:ce:22:e3:82:21:48:b6:65:86:1b:b3:38:55:05:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Validity
Not Before: Oct 24 04:08:59 2026 GMT
Not After : Oct 25 07:52:59 2026 GMT
Subject: CN=800AB6039C2D9BD93E763C9ADA8CA512FD304728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:df:33:1c:3b:3c:18:0d:59:3f:fe:e5:30:
a4:59:52:25:ae:43:51:17:57:6b:52:27:21:74:dd:
7c:25:67:56:5e:3b:7d:c0:51:16:2d:c4:6a:61:b9:
09:d9:5f:8e:b7:51:79:9b:0e:9a:1f:d8:72:1f:39:
df:59:e0:9e:53:10:32:14:66:1c:46:2c:a8:5c:1f:
80:86:14:26:ee:34:02:3f:7f:87:1a:8a:99:37:30:
6b:e7:fc:9c:44:36:60:cd:e5:51:b3:30:93:15:3f:
a2:cc:a7:88:50:a6:b4:e3:28:c6:8a:96:1b:21:15:
5b:80:db:35:5c:94:75:43:3f:63:6f:cd:5d:11:d3:
d5:5e:da:34:5c:e4:c2:ee:f1:83:f1:75:00:5c:98:
b1:75:c4:fa:d5:04:9a:b2:c7:f7:cf:4d:d8:76:f8:
a8:cf:7a:d8:8e:ba:58:b4:f5:fa:51:a1:3b:45:4b:
7c:6f:24:64:e6:c9:4d:28:26:e8:96:7c:f2:b5:33:
3b:73:ba:fe:61:10:d9:b7:ec:41:67:03:c6:82:87:
23:08:fe:7e:fc:0b:fd:3b:f9:4e:e7:5d:74:d8:09:
16:4c:1c:27:5c:b4:c7:19:58:45:73:85:e7:65:32:
ba:47:e6:6e:23:e2:a9:87:95:88:42:c1:ca:57:90:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:B6:03:9C:2D:9B:D9:3E:76:3C:9A:DA:8C:A5:12:FD:30:47:28
X509v3 Authority Key Identifier:
keyid:D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:95:ed:9a:f6:09:f9:b9:79:fb:fb:fe:56:f9:09:4e:92:78:
90:2a:5d:82:99:e4:9d:73:61:2c:7f:6c:c6:44:b2:02:b7:86:
3c:b5:1c:6a:c7:ed:2a:6a:c2:bc:68:50:fb:34:cb:44:bf:94:
68:2e:0a:27:4e:c9:78:ea:ec:cd:1d:02:e3:46:68:98:00:2c:
99:17:21:d7:4e:ce:aa:a0:6f:dd:87:43:79:73:54:bf:c1:54:
b1:d7:be:d5:08:94:00:b7:d0:b9:a7:77:45:d5:06:18:71:b7:
33:9f:b6:db:96:28:ee:00:6d:69:96:6f:1e:08:5a:fb:b5:8a:
9c:a4:71:bc:df:c6:b3:de:cc:8c:c2:b5:be:e9:bb:da:ae:0e:
06:13:3d:97:c7:6d:e4:69:fc:7e:da:07:a1:73:bf:f6:6a:3e:
6c:ee:f5:4c:65:21:97:f8:e1:f3:00:4c:83:c0:f3:f5:94:83:
07:61:c4:1d:a7:c8:d3:f5:de:be:ab:13:64:c9:a1:fb:37:1b:
3f:ed:ca:42:df:d3:c9:9e:10:a6:7a:a0:be:0a:36:3c:b9:c1:
6d:52:57:3f:b2:d8:a3:2b:55:09:24:9c:44:d8:1c:9a:9a:81:
de:1e:d7:88:98:a5:79:1e:17:e9:a7:10:f7:93:1f:36:26:5d:
a2:3e:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:25:26 2026 by rpki-client