
Error: rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
File: D2FC8637672F6995F171A261D51674A50FE454A6.mft (raw, json)
Hash identifier: +VD4bLeuy5EE4rEFGV9XmwVBAqs6QrM/9vK+HaxDiLg=
Subject key identifier: 4A:78:56:B5:18:F3:23:74:82:08:C1:CB:FC:6B:29:A2:80:E9:8F:DF
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Certificate issuer: /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial: 32E0E482D3E99223A27D9E0785D9D78EF4921322
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
Manifest number: 04DE
Signing time: Sun 01 Nov 2026 12:10:00 +0000
Manifest this update: Sun 01 Nov 2026 12:05:00 +0000
Manifest next update: Mon 02 Nov 2026 15:42:00 +0000
Files and hashes: 1: 34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (hash: UmL9+Do3hDCC9iZvlhbwNAU+BIx24uWbSydpIv4oE5Q=)
2: 34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (hash: YOSK2fhrIRrZIoN2z6lFS0rEplWgSdy33jcOY7F+GYA=)
3: 323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (hash: bPDjHNBUl/H6ulvwmhReA/RBgXTLcWuKJZY4ftKoDkc=)
4: 323830343a346265303a633030303a3a2f33342d3334203d3e20323637333334.roa (hash: 6FiIqFD4BA0F4EwSW3P6ekKNWYGR3g9PC/cmQmzMsCY=)
5: 323830343a346265303a383030303a3a2f33342d3334203d3e20323637333334.roa (hash: dbyHcT+WPlp5FVMKEMjK8+it8GRMeEQdQl+5GHqVSuY=)
6: 34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (hash: j2qGuSPvxexL96NEu1I1xCgoaChpbHCA9ZE87e2oaPQ=)
7: 323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (hash: G+RNKtP53PWokExgTrWiduE47E7/QZcfxFmzIPS3wvY=)
8: 34352e3233332e3235332e302f32342d3234203d3e20323637333334.roa (hash: +RyxeuoxhIKAMJEFMFWIS8Ulh+f+4ywuY0/2h9LL3ZI=)
9: D2FC8637672F6995F171A261D51674A50FE454A6.crl (hash: ixKh+/h+Rn6Ko5dDjTONn/+W0zEOa/bGUyyMjrIgtYM=)
10: 323830343a346265303a3a2f33332d3333203d3e20323637333334.roa (hash: xWKs2MipihXxzqW+9K8qFQCXsWQCpHuxCy1DLfFGWOo=)
11: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (hash: ouAK0kg+/aVpVcCbP4bexh8VaG4XPjMUX+oO6I58BDo=)
12: 323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (hash: Uc1aN6iWD8f8P9eEDgxgniCHPV3udq5wKyIMhj5Ggxw=)
13: 323830343a346265303a343030303a3a2f33342d3334203d3e20323637333334.roa (hash: wrniQHnF8nS0MuQ4m91PKnaCakmlJ1TuIBqSLuoiyQk=)
14: 34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (hash: 1UswwfBXHmuieTD6Y4yJlMuOxyZ5tOHFADZLxYj5p+I=)
15: 34352e3233332e3235342e302f32332d3233203d3e20323637333334.roa (hash: QCv6+deZd8kWe76fqsJ8iIYvPbvZxchVE1dwaxoIxkw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 15:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e0:e4:82:d3:e9:92:23:a2:7d:9e:07:85:d9:d7:8e:f4:92:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
Validity
Not Before: Nov 1 12:05:00 2026 GMT
Not After : Nov 2 15:42:00 2026 GMT
Subject: CN=4A7856B518F323748208C1CBFC6B29A280E98FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:54:e4:d6:39:1b:1b:ec:71:c5:55:0e:5c:
06:1d:37:94:73:95:6e:69:77:9e:a8:b7:d4:0b:be:
44:86:11:a0:a2:04:82:99:f2:df:32:1d:82:b3:c4:
05:f8:3a:a0:3e:3f:82:65:c0:ab:85:b7:ea:ae:c2:
e6:27:80:3a:f7:86:da:80:10:9e:dd:d5:e6:e7:7e:
7a:5b:cc:e1:ab:3b:f3:b0:a3:39:d3:1d:f5:62:a6:
52:b8:7c:80:bd:59:15:54:c9:d0:e6:2f:23:61:9a:
63:16:a7:9a:65:97:6b:6c:b3:b5:0d:24:c3:0e:e5:
a3:15:05:7d:42:bf:16:a3:74:3f:15:5b:1e:bf:10:
5b:1d:1d:b6:ef:fd:57:89:91:26:61:0d:80:bf:ac:
ec:00:4b:6d:96:aa:9d:c4:d3:c7:d8:76:ca:e6:0a:
64:f1:07:4f:93:f9:e4:8d:16:df:54:e9:5f:97:86:
7e:ae:32:f5:36:dd:95:f0:37:8c:3e:b7:2f:ef:6f:
5f:16:83:95:ba:b4:b3:a1:a5:a1:cc:0a:5e:fa:85:
3d:cc:35:1e:03:23:d8:68:9e:2a:bc:c1:eb:f3:1a:
b9:f2:10:65:65:e8:be:38:56:47:9b:ff:15:f4:25:
9b:e1:fa:7b:2f:ef:f5:75:6b:33:75:bb:90:bd:bc:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:56:B5:18:F3:23:74:82:08:C1:CB:FC:6B:29:A2:80:E9:8F:DF
X509v3 Authority Key Identifier:
keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:f5:2f:06:6c:db:5d:87:2b:e5:cb:d2:d4:c6:24:d8:e1:
2c:e6:dd:b7:bb:c4:ce:8b:d5:e2:e0:32:e3:de:c9:98:06:e0:
0c:47:f8:a2:41:05:96:e7:9e:0a:c5:60:6e:b2:b0:1a:b3:15:
eb:a2:42:1d:16:fb:c6:20:8b:51:f8:74:84:77:cf:6d:60:c2:
93:4c:8a:3c:46:a0:a5:24:1d:7c:f7:f6:64:c2:c3:4c:dd:a3:
27:b8:e5:79:d4:05:60:8c:bc:1d:e9:bf:8e:52:f8:25:06:e4:
5f:3f:05:9a:0d:31:2e:b7:a5:5e:18:4b:fd:57:22:3e:a0:7b:
7b:45:14:70:2d:5c:9c:3e:04:24:75:bd:89:52:5a:b5:2f:0d:
c0:2b:2b:ec:b6:59:ba:ef:92:97:ab:02:c6:0c:27:86:10:08:
02:1f:85:69:87:9a:44:fd:fe:15:d5:3c:eb:f1:15:eb:53:2c:
3c:34:54:95:01:7b:02:99:3d:38:d0:5c:24:82:1f:32:81:50:
89:f0:89:bc:df:2e:c8:a1:73:2e:49:ca:2b:2b:24:30:21:05:
ca:66:a3:a9:e2:0a:ca:56:cd:bf:d7:6a:93:f7:79:26:82:85:
bd:e8:40:82:aa:63:e1:cd:cb:28:49:c7:4e:29:f6:eb:b9:8f:
f4:32:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:53:12 2026 by rpki-client