
Error: rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
File: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft (raw, json)
Hash identifier: qvjOWzhIU8iuYEpikNW1allRAF2tqViyJ6DX6DbhwME=
Subject key identifier: 78:A3:DA:A7:76:7C:65:89:0D:3A:01:DB:81:6B:5F:8F:23:46:31:29
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Certificate issuer: /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial: 4E90887EB14EEC1D658EA9E67C4731BFCB8225F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
Manifest number: 04D2
Signing time: Sat 17 Oct 2026 05:23:04 +0000
Manifest this update: Sat 17 Oct 2026 05:18:04 +0000
Manifest next update: Sun 18 Oct 2026 06:41:04 +0000
Files and hashes: 1: 323830343a343936633a3a2f33322d3438203d3e20323637313833.roa (hash: kevyB7jY+PN1TCkpj0asr6YBwDrRTPOwCbgfcYWuOEY=)
2: ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl (hash: eeZfIhsX+fwEAVPwCUIW5pt1pOYH5SiujrQyKg7MIGM=)
3: 34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (hash: GLexGPRhkdBlNHjUGZYzbUF/kmashIXlWNVS+yboaa8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 06:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:90:88:7e:b1:4e:ec:1d:65:8e:a9:e6:7c:47:31:bf:cb:82:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Validity
Not Before: Oct 17 05:18:04 2026 GMT
Not After : Oct 18 06:41:04 2026 GMT
Subject: CN=78A3DAA7767C65890D3A01DB816B5F8F23463129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:06:32:c1:9a:44:e7:fa:0a:85:7a:04:78:
28:29:72:66:d7:6b:d0:ad:55:d0:e5:95:da:4b:b3:
a9:73:d0:92:f2:dd:53:6a:9b:f8:6a:2a:04:25:fa:
44:be:16:3b:6a:ac:2e:a0:a5:3f:1e:c6:4b:e4:ea:
2d:6e:eb:9e:1f:77:d4:99:94:24:25:12:00:a9:76:
61:13:01:09:66:23:c7:5b:af:d3:ab:b2:c6:37:e6:
57:33:15:10:b7:90:6c:3c:1b:5a:ef:b2:67:d8:37:
6b:71:c2:15:33:89:17:43:de:b3:47:ba:3c:1d:cc:
36:6f:eb:ae:8d:9f:01:b7:39:a8:5a:b0:01:e7:e2:
94:9a:8b:36:ac:e6:24:37:74:28:02:2a:03:17:65:
67:7a:13:5b:b9:31:33:22:94:6e:2c:ea:91:a4:84:
2f:a1:53:9f:97:02:33:eb:ea:4b:3f:f9:37:75:cf:
0b:1e:6f:b7:42:bd:13:f7:b0:ca:ae:57:d5:f5:62:
8d:6c:0c:ff:43:6e:0e:24:07:da:97:82:82:9b:f3:
cc:81:b1:a0:23:af:fd:b6:7b:fd:86:64:ff:55:25:
47:2d:84:65:55:0b:4e:c9:bc:25:f6:39:81:fe:95:
63:a8:76:0d:68:4e:87:3d:88:71:a2:50:8e:b4:af:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:DA:A7:76:7C:65:89:0D:3A:01:DB:81:6B:5F:8F:23:46:31:29
X509v3 Authority Key Identifier:
keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:33:ac:a1:46:2d:d8:22:d1:a7:ca:65:94:68:d5:e1:67:ce:
f6:e8:93:31:1d:ee:62:95:14:e6:61:31:4c:15:f2:75:fa:2a:
95:42:6c:f8:9b:b7:0b:2b:e6:26:72:d6:3c:8c:bb:a3:7c:3c:
2c:a6:c2:a8:7f:ea:17:99:79:da:3e:dc:36:5a:b5:10:d9:f3:
75:ef:ea:05:08:69:1a:68:77:83:dc:34:10:85:07:15:70:3d:
7f:5c:ea:16:d4:4c:dc:5c:b4:c8:b2:9d:5e:08:22:50:b2:e3:
83:15:3e:9c:b4:5c:37:5c:32:cb:c9:da:65:68:bd:e6:09:be:
d1:f1:64:8b:5c:e3:f6:76:ee:9b:d7:94:fb:fa:72:38:85:26:
e2:3b:5f:02:e4:bb:75:b1:9b:98:e2:61:90:22:69:62:11:ea:
61:14:97:fd:a9:4c:60:fe:c5:4c:0c:6c:9b:3e:ae:a6:3c:35:
6b:db:ec:84:a1:88:bf:86:0f:d2:ab:f6:68:b1:f9:02:77:72:
1a:f4:c7:51:c8:4d:68:bc:0a:78:25:34:f6:fa:4c:e1:1e:da:
71:07:91:03:79:ad:9c:ca:ab:30:52:72:98:f0:dd:71:35:d1:
bd:6f:34:9a:5d:e5:c0:3e:66:dc:96:06:99:c7:ad:a8:2b:40:
d7:dd:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:42:00 2026 by rpki-client