
Error: rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
File: F4CE893E9874372932D6054F7AFDD9FBBD021974.mft (raw, json)
Hash identifier: 1EdzS2gKm8m6XR6wLIhGbYPnmuA4/PJCCxaUD/SBDVI=
Subject key identifier: 75:F7:6C:64:D9:80:BD:F2:AD:3D:A5:41:28:61:61:F1:6D:04:3E:B9
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Certificate issuer: /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial: 36CA514767293FBFCFA6A4D0AEDF9169626E738E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
Manifest number: 04E7
Signing time: Fri 30 Oct 2026 21:38:06 +0000
Manifest this update: Fri 30 Oct 2026 21:33:06 +0000
Manifest next update: Sat 31 Oct 2026 22:20:06 +0000
Files and hashes: 1: 34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (hash: 0eyF3jxkiTqMJPvWvaIXaVQw4yclLCkPekb7F/LOg8c=)
2: 34352e3138302e39392e302f32342d3234203d3e20323639313238.roa (hash: EvD8bZuIojvbGAUd/7FIqMkjvVmmzMrB1ZPSBWKzSAo=)
3: 323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (hash: x973QcKWMa2kKFVJgixdxY4Yy1ivykJ4K2KrBW9FCmg=)
4: 323830343a356664633a323030303a3a2f33362d3336203d3e20323639313238.roa (hash: s8r72wWlzGe6mae/DSF7TLWlJoar8P48OvwGqSY8Vmg=)
5: 323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa (hash: WuScM7gXN7K5TRfN+s+Tp/cxtEReRpFf4dypgGP45TY=)
6: 34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (hash: P76wIP2is1D+fDVhf/iE6swwxFW9BMmI5bF4u2ueRX8=)
7: F4CE893E9874372932D6054F7AFDD9FBBD021974.crl (hash: XB424K8gluWZs1eLEJLCm1RuSWi9EimcD5H/4n4OsrI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 22:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ca:51:47:67:29:3f:bf:cf:a6:a4:d0:ae:df:91:69:62:6e:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Validity
Not Before: Oct 30 21:33:06 2026 GMT
Not After : Oct 31 22:20:06 2026 GMT
Subject: CN=75F76C64D980BDF2AD3DA541286161F16D043EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:35:b2:14:ba:1b:6a:1c:73:1c:76:3c:c0:
f7:cc:06:a5:31:56:36:a9:20:5f:13:47:66:2f:99:
0b:c0:19:48:2e:b3:d6:1d:d5:82:a9:1e:9c:cd:5c:
62:fd:78:cd:a4:90:e8:56:a9:71:51:4c:0c:3e:01:
34:b3:12:24:ea:fe:b6:9c:aa:b1:4b:09:f9:d2:24:
ee:16:69:11:b6:be:dc:5a:95:2d:80:00:c8:2e:5a:
40:09:13:cc:d6:e4:33:5d:82:a0:e4:eb:d8:b3:5c:
be:b0:8b:eb:b2:e8:32:b3:20:26:58:74:52:0c:7e:
d4:cc:8b:4b:21:f3:d5:56:bb:c5:8e:98:f2:6b:de:
82:48:32:2c:0e:ba:88:cd:9f:0a:48:fc:ae:3f:5e:
47:ed:73:87:4b:ed:bc:19:be:34:e1:61:9c:4f:6e:
83:db:3e:08:9a:a3:b0:35:8e:3c:d6:60:39:a4:25:
7d:28:88:08:89:5d:6a:2a:91:78:50:10:39:e3:8f:
54:24:8b:ba:db:c2:8e:42:45:43:6e:67:c0:0a:37:
90:e5:cb:b0:b5:e1:70:ce:2d:a0:ee:8f:ec:95:39:
a0:63:16:ad:10:62:ed:60:1e:8b:5b:f6:95:23:89:
b0:dc:69:52:8e:ee:6a:b4:f1:5a:e4:97:ad:3e:ac:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F7:6C:64:D9:80:BD:F2:AD:3D:A5:41:28:61:61:F1:6D:04:3E:B9
X509v3 Authority Key Identifier:
keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:f7:4d:2c:15:fc:2c:99:1a:80:4a:43:9c:51:7d:d5:da:
8a:6b:4e:11:4e:9f:20:22:a7:ef:cf:16:1f:35:d0:76:c4:6f:
a4:80:69:bc:fd:2d:b0:64:69:47:f9:10:80:de:60:34:a1:89:
88:27:db:7c:3b:02:1f:b4:4d:f8:e2:17:b6:37:2e:97:23:a9:
f9:c2:44:11:4e:1b:b6:d8:84:25:8b:96:c0:e5:2e:54:17:f1:
5c:e8:6c:69:05:35:97:72:24:66:e3:e2:97:38:7d:7a:2d:57:
15:8b:5e:eb:97:78:16:e4:63:60:34:e7:d7:d3:c0:90:54:a6:
78:41:34:8f:ad:39:bb:5d:1c:20:d7:bc:e4:8b:43:aa:d7:8d:
77:fc:ff:a5:07:0d:f3:92:c0:98:69:af:12:4b:91:5c:51:67:
8a:49:03:04:46:e3:d8:89:7d:f8:b2:51:9b:fd:e6:89:c9:5d:
f1:32:41:87:0c:d7:d8:21:9b:73:b2:43:d4:02:ce:19:24:f2:
6c:c5:08:8f:ce:e2:59:c1:ea:fe:49:72:bf:a0:2d:02:82:79:
41:97:9a:bb:d0:bf:c3:05:f4:cf:dd:e1:81:b1:ac:6c:fe:23:
db:ec:58:4d:0a:15:6b:72:4c:06:49:09:28:df:ec:99:b5:2a:
2f:94:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:22:44 2026 by rpki-client