
Error: rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
File: 2CEE12D044540710A5876E4246E86C0EF8C37663.mft (raw, json)
Hash identifier: Hw5CzHYnXsKXy2/qQ1a2/mDZXhNBLQQQ3uvqjV+eZx4=
Subject key identifier: E6:6E:D2:5C:7E:8A:62:47:B4:8D:40:52:5C:7A:43:10:C4:7F:56:54
Authority key identifier: 2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63
Certificate issuer: /CN=2CEE12D044540710A5876E4246E86C0EF8C37663
Certificate serial: 41C3BD0EE96EB969F931783C0D5247DC3C250807
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
Manifest number: 42
Signing time: Wed 14 Oct 2026 20:11:19 +0000
Manifest this update: Wed 14 Oct 2026 20:06:19 +0000
Manifest next update: Thu 15 Oct 2026 22:15:19 +0000
Files and hashes: 1: 2CEE12D044540710A5876E4246E86C0EF8C37663.crl (hash: YEocvYNyK3Bhhr9tHe2uHC/EnGq+CBn1160VTj5zU7s=)
2: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (hash: MgAyG2HdW+En7WiKeY9+lzuh7ZwZaY72/OezcRL2ApA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl
rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 22:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c3:bd:0e:e9:6e:b9:69:f9:31:78:3c:0d:52:47:dc:3c:25:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CEE12D044540710A5876E4246E86C0EF8C37663
Validity
Not Before: Oct 14 20:06:19 2026 GMT
Not After : Oct 15 22:15:19 2026 GMT
Subject: CN=E66ED25C7E8A6247B48D40525C7A4310C47F5654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:9c:4a:37:5c:c6:f7:90:a7:f0:fa:24:34:
7b:5b:0d:8e:1c:9b:09:93:61:d7:5b:f3:45:97:7f:
27:ce:04:3a:7b:3a:e5:e7:a2:16:c6:4e:cb:3d:3d:
7e:df:08:ed:ee:c3:ea:99:a6:da:23:c8:5a:be:1a:
7e:5e:82:04:6e:57:bd:f8:b2:53:61:7b:88:9d:da:
ad:09:81:fe:20:e6:4d:d3:56:94:96:6f:64:44:aa:
0c:17:4f:b6:26:31:52:60:84:e7:d2:0b:b9:e6:98:
2c:f5:b7:98:ec:1f:39:31:16:72:70:cc:66:2d:c1:
98:76:6e:53:b0:d4:2a:52:1b:52:b0:57:83:93:46:
d2:46:d0:81:ea:6a:a2:30:72:24:cd:b6:53:97:fe:
ef:52:c1:d5:24:89:6f:c6:58:9e:e2:f2:de:fe:02:
4b:29:28:99:7d:67:a9:40:30:dd:7a:03:e7:bf:fc:
fe:3e:3c:df:5a:d3:8a:27:07:04:0c:26:28:b5:65:
7d:ce:0f:bc:9d:c7:c6:54:9a:83:cc:78:2b:2a:b5:
0c:2c:96:bf:ae:2d:f9:a6:df:60:2a:d4:96:56:7c:
60:ae:1f:5f:b7:70:cc:f8:f5:6a:34:74:6d:f8:b2:
60:3b:e7:f5:c1:39:23:36:c9:6d:84:95:b4:7b:63:
a1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:D2:5C:7E:8A:62:47:B4:8D:40:52:5C:7A:43:10:C4:7F:56:54
X509v3 Authority Key Identifier:
keyid:2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:53:2d:ff:4b:ef:13:2a:85:2e:4b:96:01:7c:18:c6:a7:f3:
10:2a:2c:6d:00:78:c6:49:9a:43:fe:11:6b:31:b8:45:98:82:
c0:02:f1:97:d2:c2:96:18:cc:31:0a:93:a5:f9:b2:55:24:11:
02:c3:c6:8b:73:fe:2a:15:9f:e3:61:a7:34:4c:00:4a:77:ee:
89:83:cd:f0:0b:7f:5b:81:cd:be:97:8c:3a:7c:a8:80:2e:90:
1c:6a:43:35:fb:c6:c1:66:20:fc:cb:d1:bd:68:dd:6d:ff:49:
68:24:b1:fc:aa:76:88:1f:09:cd:08:ec:12:97:d3:e0:15:61:
c0:40:68:79:7c:04:3f:68:5a:75:1e:d7:2b:9e:12:3f:13:e6:
9b:dc:06:58:80:94:90:91:c3:e4:c3:31:b1:87:61:8f:6c:80:
d5:7e:7a:bb:4c:fc:06:88:87:60:04:e7:fb:6e:b7:71:10:ca:
1a:c0:69:d7:de:84:cf:a2:6b:ac:32:21:51:2a:68:06:4b:f5:
a3:40:28:e5:35:28:25:db:f6:42:2c:22:89:75:21:aa:d5:a3:
49:de:72:28:ec:31:32:f6:98:cc:8d:d1:d6:37:42:da:37:1d:
66:f3:8f:b6:75:ec:23:0d:be:9d:d3:39:91:39:59:bb:8a:4f:
65:6c:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:28:35 2026 by rpki-client