
Error: rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
File: C3976BFC098E04D93A5507BBB046C3608B889670.mft (raw, json)
Hash identifier: a+IcBXJrGmEHuq0FAm9AEqAWYMovHD4SFmy2ST/LYOY=
Subject key identifier: D6:77:0D:04:60:50:4A:72:6A:CC:31:1C:E6:AE:C8:D2:22:1B:07:AD
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Certificate issuer: /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial: 4E5F91895F6BEE179E210B7278C09D224FCD1D2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
Manifest number: 0585
Signing time: Wed 28 Oct 2026 09:00:00 +0000
Manifest this update: Wed 28 Oct 2026 08:55:00 +0000
Manifest next update: Thu 29 Oct 2026 09:00:00 +0000
Files and hashes: 1: 323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (hash: ZbjsSwMRWm9SrcYoBYdOEKdQGPU9q8shbg/hbHCpkQk=)
2: 34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (hash: 0m8+zDBDxvXL3n0SvabbxLxFpASSiSoHHAJ2i6fBMTU=)
3: 323830343a363631343a3a2f33342d3334203d3e20323639353332.roa (hash: FRp9INqXDhAYwybC+EuExcMHfp69A1qO1NeFzfuwAqE=)
4: 34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (hash: LaVXT9Gat57OXh1VksRLfzPee1kgO9ByuhkPIGFEVpA=)
5: 323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (hash: tMQrDW5AQq55OX25vS7sR8u3kgrjVThIuO5ojnSvHXA=)
6: 323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa (hash: a+0x97JcmUKYtxw1wlbVLfBbMv5HN34KM6tNZbfzoCk=)
7: 323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (hash: 3pDxFqA/yFfHk+CAtGXogl/uiNeu0UZ54S2QUNUdoNA=)
8: 323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa (hash: znG6mVdtuJf7OTpvcebCRJ6rRcTUzVPFmAEWycFohbI=)
9: C3976BFC098E04D93A5507BBB046C3608B889670.crl (hash: 6PUbLSlofW7+xm45mz/cytUBPkUW852EMn+/19nGzDI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5f:91:89:5f:6b:ee:17:9e:21:0b:72:78:c0:9d:22:4f:cd:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
Validity
Not Before: Oct 28 08:55:00 2026 GMT
Not After : Oct 29 09:00:00 2026 GMT
Subject: CN=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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:3e:a2:68:e9:95:a3:5d:dc:0e:e7:6a:15:
0d:78:76:d8:40:68:4b:b5:42:0c:aa:7f:d8:8c:a7:
7b:92:22:b2:39:67:89:8e:ce:17:35:73:ef:69:0c:
e6:3c:6a:3c:c4:3a:7e:6a:11:48:c3:ff:f4:14:9e:
97:a2:5d:7f:ec:19:e7:ca:fe:d8:f7:87:08:08:0f:
38:66:78:4b:6d:fc:70:74:77:71:a0:da:73:f3:13:
f1:18:f9:97:69:dd:3d:8c:93:81:86:93:44:25:04:
36:45:ee:e6:f2:ce:c8:ce:6a:95:e9:8f:71:4c:72:
05:46:3c:1f:0d:b5:79:26:ef:c7:8f:26:8f:d9:07:
d4:5f:81:86:57:d9:36:8a:09:f4:da:82:12:00:dd:
31:6d:c5:c7:88:8f:6d:70:4f:ae:b3:de:e5:da:65:
90:1e:f0:9f:a7:2a:6e:75:d5:75:5a:c1:e9:46:c4:
80:8c:61:d0:8b:3d:32:11:57:38:2f:ce:37:4b:0e:
c2:4d:cc:23:9a:0e:83:a8:8c:ac:9d:98:18:69:ba:
4b:61:45:ee:c0:b8:1b:22:66:d0:95:7b:ed:ce:c3:
85:77:5a:81:01:e3:6d:62:03:97:1e:82:82:d6:78:
58:24:4f:f4:06:d4:00:2d:45:33:4a:b4:79:c4:e4:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:0D:04:60:50:4A:72:6A:CC:31:1C:E6:AE:C8:D2:22:1B:07:AD
X509v3 Authority Key Identifier:
keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:70:a9:84:54:33:6f:f3:af:60:f6:87:a8:8a:13:62:84:
19:48:b5:7d:87:d0:02:90:c7:29:b1:61:df:b3:5f:72:1b:a9:
3c:a8:05:38:25:90:39:b7:8a:5b:2e:1a:0b:c3:90:c4:5d:77:
54:48:6f:f9:ca:e1:12:ba:7b:2f:02:1d:ac:50:ca:55:29:d3:
2a:89:03:50:fc:58:02:13:22:29:32:bc:7c:95:20:05:46:b9:
70:3a:1e:77:76:c7:0e:11:4d:15:69:13:1d:66:29:a5:0f:df:
4d:fe:79:08:67:41:3f:48:b3:b1:97:ab:06:21:08:d6:b2:b2:
0b:28:99:24:51:66:f0:08:d5:38:a6:f5:f0:7d:d2:8a:ca:99:
e9:26:18:73:41:d3:1e:38:bb:db:10:74:a1:55:28:bd:d3:0c:
1f:f8:0b:80:6d:bd:ab:fe:c8:e6:3b:0f:d8:72:9d:b0:1a:c3:
18:90:8c:32:a8:9e:97:99:dd:27:0a:1d:a9:d5:3c:7e:ea:dd:
00:a9:31:26:f4:a3:e4:b2:5d:3e:04:b5:0d:38:2f:6a:ab:a8:
d3:ed:19:cc:2e:67:c5:84:7c:c3:eb:7f:f9:d5:e0:77:be:52:
1f:5e:d9:88:a6:42:a4:67:90:16:f6:02:58:75:31:92:15:a4:
be:8a:f8:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:00:38 2026 by rpki-client