
Error: rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
File: 7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft (raw, json)
Hash identifier: hczt3wSjpDupSOE6wNXFWQ60MNM6mRiF6/DLlnV1KiM=
Subject key identifier: DB:52:F4:2C:BB:6E:95:97:A5:21:54:DF:94:F3:CC:66:D7:36:D0:FA
Authority key identifier: 7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
Certificate issuer: /CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Certificate serial: 7A245B5923519AB8CD7A161FEB1A9ABE9F0DDA5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
Manifest number: 04C6
Signing time: Wed 14 Oct 2026 14:10:12 +0000
Manifest this update: Wed 14 Oct 2026 14:05:12 +0000
Manifest next update: Thu 15 Oct 2026 15:32:12 +0000
Files and hashes: 1: 3230302e3230312e3139322e302f31382d3234203d3e203130373333.roa (hash: o1ACE2lO2FsN8JxstpPk3XwfPTw0ARGvC0wOtrkZ4k8=)
2: 7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl (hash: XEt4be7T2NJs/zQEkla/8nylL436skWlninH70A7oK0=)
3: 3230302e3230322e302e302f31392d3234203d3e203130373333.roa (hash: nuhGbk2vRwCUKExE5GAysS5Zc+dA0uOVievO2l9BrTQ=)
4: 323830343a3736343a3a2f33322d3438203d3e203130373333.roa (hash: C52T1673j3meKQwNtar5uz9I63F3Ds7c6+ZYv+CGiIM=)
5: 3230302e3139362e302e302f31392d3234203d3e203130373333.roa (hash: vuoz/MjJZ+iP+etSszpSb8uMkUDrQpxco9VRK28bUXA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 15:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:24:5b:59:23:51:9a:b8:cd:7a:16:1f:eb:1a:9a:be:9f:0d:da:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DE6E0779DD8FBF98FE9AD24531A24F792D26451
Validity
Not Before: Oct 14 14:05:12 2026 GMT
Not After : Oct 15 15:32:12 2026 GMT
Subject: CN=DB52F42CBB6E9597A52154DF94F3CC66D736D0FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:aa:2a:3b:cf:29:7a:5c:0c:38:ab:0e:fb:
93:84:10:0c:99:93:fd:d4:49:ef:02:47:ba:e8:f5:
db:52:5a:56:70:53:29:00:c7:b4:ce:5b:6a:c3:c0:
83:f2:0f:2f:2b:bd:ed:22:5d:cc:85:61:5d:95:92:
2f:cc:89:a1:b1:83:d4:eb:7b:b2:b4:90:28:70:51:
11:2f:08:97:78:5f:46:c5:0e:00:93:b3:ff:ca:18:
93:02:9e:b4:45:58:91:22:8e:25:51:6e:7a:cb:8a:
09:2d:77:50:86:ca:0a:a4:ba:71:03:b1:db:d0:3c:
6e:d6:c8:53:5b:35:7e:95:76:8c:ed:55:87:f8:7c:
c8:b3:ab:e3:96:08:e8:11:cc:46:74:25:a2:09:33:
e0:ab:f8:d3:14:4a:01:a0:54:14:22:ff:c1:e2:8e:
71:43:ad:51:a9:a3:4a:fa:20:4b:99:ac:ff:16:5e:
d8:3a:0e:50:e7:97:24:6f:84:92:e9:ad:bc:83:3c:
94:59:b1:b7:20:9d:87:a8:08:8d:f4:af:df:95:a4:
33:68:ad:52:e7:a8:6f:b2:f2:8c:97:55:d7:1b:03:
d0:66:cb:aa:04:7d:2f:17:f6:81:62:54:97:3c:45:
89:ba:ef:ac:98:b4:27:4d:79:f3:be:77:ff:be:5d:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:F4:2C:BB:6E:95:97:A5:21:54:DF:94:F3:CC:66:D7:36:D0:FA
X509v3 Authority Key Identifier:
keyid:7D:E6:E0:77:9D:D8:FB:F9:8F:E9:AD:24:53:1A:24:F7:92:D2:64:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cc1U13ZyteufJNZhWM1mLYCe2khiJNkHosdZnhq4AAMU/1/7DE6E0779DD8FBF98FE9AD24531A24F792D26451.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:b2:d4:a7:70:78:49:fd:b7:5a:49:15:3f:28:a1:fc:0a:
fc:00:63:f3:e5:2f:fe:2e:4f:32:97:df:cd:1c:26:a2:c9:23:
41:d6:3d:8b:23:e8:fc:ec:03:b7:1e:25:8b:8b:64:fa:ac:bd:
15:46:ec:24:9d:ec:3b:22:c6:ba:f8:e4:53:f1:17:97:f5:f4:
a0:05:f5:9e:dc:62:a0:ca:1f:90:80:55:8e:40:d7:bf:88:06:
99:f9:c3:d4:8f:a1:95:00:83:c5:aa:60:1e:40:0a:dc:88:4d:
68:0f:39:52:89:32:54:11:63:5f:ea:19:f1:21:ff:ba:bf:df:
e4:f2:e0:52:28:fd:ed:e7:e4:96:4e:51:95:78:24:a6:b0:30:
97:6e:09:be:15:18:71:3c:1f:7f:8a:a6:8a:ad:2e:dd:06:59:
fa:9a:2c:03:c4:a6:68:61:4f:4d:2c:61:91:df:ce:13:24:d4:
6e:33:48:1d:c4:d4:70:93:99:32:27:08:c1:58:1f:36:47:8f:
46:1a:4c:b3:d8:8f:0a:1f:8d:14:f7:d2:62:52:2a:8a:5d:3b:
f7:ea:15:4d:0a:8b:59:d3:d3:32:af:e7:fd:ee:4e:fd:c5:e5:
b7:51:bd:00:e9:7b:ed:7a:0a:9f:a8:17:99:6f:51:52:af:7e:
02:16:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:41 2026 by rpki-client