
Error: rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.mft
File: E3F6EE39830426870D612FD7EB39952823C11BF7.mft (raw, json)
Hash identifier: gRYNxfrErHl3GmOz79JPSnPDkKQp7a1IHu3vUPjua6c=
Subject key identifier: 2C:DD:D9:50:75:58:6B:27:8E:E4:17:6A:1E:32:D1:2C:3D:75:C1:B8
Authority key identifier: E3:F6:EE:39:83:04:26:87:0D:61:2F:D7:EB:39:95:28:23:C1:1B:F7
Certificate issuer: /CN=E3F6EE39830426870D612FD7EB39952823C11BF7
Certificate serial: 568C6171DEDE026AA0FEBFD03658FD02998B3C76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.mft
Manifest number: 04C6
Signing time: Mon 12 Oct 2026 11:47:56 +0000
Manifest this update: Mon 12 Oct 2026 11:42:56 +0000
Manifest next update: Tue 13 Oct 2026 15:03:56 +0000
Files and hashes: 1: 323830343a386163343a3a2f33322d3438203d3e20323733363931.roa (hash: JZFYsyeU17bUeXqrYDmVklEp7TbipUCrTMvg5FaRYYM=)
2: E3F6EE39830426870D612FD7EB39952823C11BF7.crl (hash: pDYb6Wq41a/dV4CbYwYJqYooI2sLH5P1U7o6DjFH3Mg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.crl
rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 15:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8c:61:71:de:de:02:6a:a0:fe:bf:d0:36:58:fd:02:99:8b:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3F6EE39830426870D612FD7EB39952823C11BF7
Validity
Not Before: Oct 12 11:42:56 2026 GMT
Not After : Oct 13 15:03:56 2026 GMT
Subject: CN=2CDDD95075586B278EE4176A1E32D12C3D75C1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:cd:08:54:b4:75:ed:cf:34:70:d9:0b:b2:
41:54:e5:a0:e0:5c:02:3f:81:55:50:11:c0:5a:35:
cd:fa:5c:45:25:c2:06:05:c0:6f:b5:31:d6:46:4f:
a9:0e:29:3e:b1:f4:75:98:dd:37:92:5b:80:a4:36:
4f:b7:d4:26:34:c6:f0:e4:1c:f0:93:80:b1:87:7c:
52:74:b4:79:c7:e7:c2:28:24:26:25:81:c4:fc:0c:
13:26:ed:69:82:86:df:7a:c8:d8:67:69:5f:18:53:
78:53:0d:c0:99:eb:b3:fb:83:a8:44:d0:2d:73:fc:
9f:33:12:17:4b:58:4b:25:32:b9:21:d4:58:71:6a:
3d:74:b8:c6:05:55:fd:1c:fd:48:bd:cc:ad:42:d2:
c2:83:25:87:b6:73:fb:8a:26:a0:24:db:67:bd:32:
f8:fa:a6:0f:78:00:0d:a8:a4:64:32:80:4e:69:10:
69:c5:f9:1c:bb:50:33:3e:74:9d:67:3f:42:7f:25:
44:71:9c:3e:3e:dd:3f:ae:87:bd:be:1d:28:23:c4:
7a:c0:f0:27:6a:33:f2:71:fd:85:41:83:8a:2f:8a:
c8:7c:71:86:ab:d7:db:b4:77:50:9e:e4:2e:25:40:
01:15:db:76:82:2f:5b:b1:5d:b6:1d:da:6f:9d:10:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:D9:50:75:58:6B:27:8E:E4:17:6A:1E:32:D1:2C:3D:75:C1:B8
X509v3 Authority Key Identifier:
keyid:E3:F6:EE:39:83:04:26:87:0D:61:2F:D7:EB:39:95:28:23:C1:1B:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F6EE39830426870D612FD7EB39952823C11BF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/1/E3F6EE39830426870D612FD7EB39952823C11BF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:36:07:db:64:b5:a7:18:26:ce:2e:26:3a:7f:fc:9a:14:f4:
2e:73:f6:1e:fb:c8:47:75:c0:0d:60:ab:68:b8:a0:99:55:bb:
02:53:d4:a7:a6:44:f9:9d:9d:da:5a:92:14:6e:02:f9:f7:e2:
db:9a:cf:38:6a:2b:7d:57:b6:7d:4e:73:64:05:94:a4:e0:e4:
f6:f0:d9:96:f5:55:7b:86:3e:9e:85:45:31:d2:e5:e2:bd:1a:
63:bd:ac:13:65:5e:16:0d:3f:51:dd:9a:24:7b:c5:4f:0d:35:
fe:6e:82:7d:8c:81:71:72:5d:7b:58:ad:f5:3d:7f:b0:36:df:
11:d4:a0:90:3a:26:83:a0:f5:c2:b9:e9:d0:39:1f:c8:58:78:
33:13:f0:6c:3b:c6:d7:c2:6f:a1:38:a6:2c:49:4f:4e:48:ef:
ab:b7:1d:fa:f9:3d:41:8a:7f:36:52:75:25:5c:60:4e:f4:4f:
38:2c:e8:18:b3:f0:3a:3a:ff:66:dc:9f:39:31:17:cf:40:cb:
e1:1a:36:c9:8e:21:57:db:ac:1c:86:7a:cf:9d:7e:8c:8e:57:
9f:bc:e5:49:a8:e5:fd:5a:36:ef:79:50:48:c5:aa:82:83:6d:
de:15:01:81:e0:32:bc:43:60:c9:85:3d:8c:82:87:2c:3b:91:
9c:2b:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:51:54 2026 by rpki-client