
Error: rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft
File: EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft (raw, json)
Hash identifier: Jo1uuL0+qgPxreT8JzZNtRFwXrvnnS2XJ7OuxwgDlBg=
Subject key identifier: E1:F0:4B:07:0E:62:1B:B9:10:DA:31:07:D2:04:D9:D3:7A:6D:B1:44
Authority key identifier: EE:0E:1A:EE:6B:3F:10:00:ED:CC:60:18:E5:5D:71:32:E8:3A:EA:E4
Certificate issuer: /CN=EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4
Certificate serial: 1406DCFF6A3134C282372929B6D8FE61C4E1B273
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft
Manifest number: 7D
Signing time: Sun 25 Oct 2026 14:58:48 +0000
Manifest this update: Sun 25 Oct 2026 14:53:48 +0000
Manifest next update: Mon 26 Oct 2026 15:07:48 +0000
Files and hashes: 1: 323830343a356434633a3a2f33322d313238203d3e20323638393633.roa (hash: iwXe9zp4PFkoAx48SefDtMK/vKTCbIAMHTK/7NbWX/M=)
2: EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl (hash: fKhij2xMTyAWktO9IbdXRI5nIYwssFpIUddrqgepT3A=)
3: 34352e3137372e32382e302f32322d3332203d3e20323638393633.roa (hash: 5JLk1JCJThX2LDR3ZfXIl6tl/+FwKrAB1H2ZagBTN0g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl
rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Oct 2026 15:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:06:dc:ff:6a:31:34:c2:82:37:29:29:b6:d8:fe:61:c4:e1:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4
Validity
Not Before: Oct 25 14:53:48 2026 GMT
Not After : Oct 26 15:07:48 2026 GMT
Subject: CN=E1F04B070E621BB910DA3107D204D9D37A6DB144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:e7:03:1c:cc:0e:88:7d:fc:11:e8:82:a7:
14:16:66:25:d0:76:8b:16:65:9e:74:71:22:50:2e:
8a:05:e1:4b:04:25:58:6e:e1:aa:12:b0:c0:0d:71:
49:16:f0:98:99:11:0d:34:76:b5:43:bc:9e:11:ed:
63:34:bc:45:64:a8:0e:80:cc:0e:70:f4:8d:e4:78:
ac:a2:0c:61:19:19:be:51:b5:0f:dd:b0:06:39:6d:
59:43:0b:64:56:e6:0b:fa:a9:ce:6e:3b:4a:78:5c:
84:a1:f7:df:20:c6:8e:9e:7d:6a:6c:01:6e:45:f1:
24:c0:34:22:6a:63:f7:45:22:5c:e3:67:30:e9:f2:
9f:17:1f:de:7e:ee:74:e0:90:08:e1:ec:dc:9f:e3:
42:20:45:69:53:0e:9a:00:43:08:fa:24:74:4a:19:
21:84:90:b2:11:07:ca:0d:30:8f:0e:5b:bf:ab:47:
1e:8e:da:6d:90:76:4e:90:c7:9e:02:3e:12:a0:22:
bc:42:a2:3c:b2:a3:8a:64:27:53:c8:f3:1e:c1:12:
b6:28:43:c1:6e:f0:35:b9:d6:6c:05:50:59:40:e0:
d3:1c:b5:58:ac:ae:35:bf:f7:b6:ac:ee:cb:7e:f8:
25:91:35:64:e6:56:de:0d:38:b4:eb:90:ef:de:98:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:4B:07:0E:62:1B:B9:10:DA:31:07:D2:04:D9:D3:7A:6D:B1:44
X509v3 Authority Key Identifier:
keyid:EE:0E:1A:EE:6B:3F:10:00:ED:CC:60:18:E5:5D:71:32:E8:3A:EA:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:ab:58:ac:23:c3:ab:79:b0:66:e5:bc:0b:42:89:3e:7b:
52:bd:1d:14:d6:57:4c:8b:9c:2c:77:81:db:db:f6:ea:e2:64:
00:3a:6c:69:dd:a7:0d:92:d8:e7:ea:61:2b:29:10:5f:73:ab:
94:f2:57:66:c5:32:1d:44:07:ec:12:c5:af:73:d1:21:19:81:
53:0e:57:7e:be:9d:15:7b:6e:6d:2e:20:41:7c:41:70:6a:0d:
6b:3d:78:4a:2b:e9:65:32:18:c7:85:66:d1:9b:30:84:09:9d:
9c:d0:71:24:8b:9c:05:66:bd:da:e8:4c:55:40:dd:5a:a1:b0:
a6:03:d7:c0:65:cb:c6:2b:e3:f3:78:69:ab:46:19:e8:cb:4b:
ac:cb:df:d9:f2:94:aa:67:0e:6c:00:09:25:de:1e:90:2e:42:
12:c4:c3:7e:85:4d:01:5d:5e:3c:8e:04:41:02:37:65:93:b8:
f0:2a:c7:71:fd:32:ec:cb:16:54:e4:f2:97:90:4c:6f:71:53:
42:cd:21:a2:ce:58:2d:ce:31:33:db:66:3d:17:bc:61:fc:71:
08:07:2e:19:bb:de:24:5a:fe:ae:37:98:e1:ee:e2:a4:ff:c6:
75:da:a6:7b:fc:99:72:59:28:a7:53:86:fe:6c:ea:8f:ed:d0:
0c:33:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:00:03 2026 by rpki-client