
Error: rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
File: B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft (raw, json)
Hash identifier: xoVUZW8hoYusdN0KYkwYcDc3/DxI6pNvotyiLGRlpZU=
Subject key identifier: E9:F2:E0:F7:35:8E:9E:D0:B0:15:36:75:18:E2:73:97:91:24:82:9E
Authority key identifier: B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
Certificate issuer: /CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
Certificate serial: 481114352382AFD38AFBBEC2FC07051AB7881939
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
Manifest number: 0129
Signing time: Mon 19 Oct 2026 16:20:51 +0000
Manifest this update: Mon 19 Oct 2026 16:15:51 +0000
Manifest next update: Tue 20 Oct 2026 16:46:51 +0000
Files and hashes: 1: B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl (hash: fGluI4pGgyegCcpGOUZXcAW/VTRp30ei5U0Cj5QXgI0=)
2: 34352e3136362e3232382e302f32322d3332203d3e20323637393732.roa (hash: +Muz8uNJqri90LBPJYy9Sb6dL8N6bt26jmuxWmY7zhA=)
3: 323830343a353630383a3a2f33322d313238203d3e20323637393732.roa (hash: g5HGluNoTUYMeIXWNITEz8Bcv3PBAbiGFlvTewawy9g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl
rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 16:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:11:14:35:23:82:af:d3:8a:fb:be:c2:fc:07:05:1a:b7:88:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1
Validity
Not Before: Oct 19 16:15:51 2026 GMT
Not After : Oct 20 16:46:51 2026 GMT
Subject: CN=E9F2E0F7358E9ED0B015367518E273979124829E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:70:eb:26:2f:bf:cd:17:d2:31:e4:8e:69:
cf:1b:74:37:fb:1e:a2:90:40:22:f8:67:37:57:ab:
89:0a:ca:03:fb:ba:c8:ad:39:86:8e:3a:30:34:26:
d5:d1:0f:3e:74:cc:28:38:06:5e:45:3b:24:19:df:
20:10:a8:3b:ea:81:ba:d6:7d:67:55:bc:f1:15:38:
81:4c:e1:cd:a4:90:3d:fd:82:7d:06:37:c4:07:81:
db:01:5f:2f:83:70:61:cd:cc:dc:07:45:52:f5:22:
c8:14:0f:b4:1c:8a:ad:61:20:ed:0e:84:d3:57:93:
15:7f:f1:fd:2c:03:8e:34:62:16:e1:fd:1c:82:f4:
23:be:6f:82:2b:dd:47:32:43:b1:f2:48:ee:a6:c5:
f5:49:ff:6e:03:f7:f4:c2:19:ec:b9:3d:26:a6:03:
7b:87:0a:ee:76:52:eb:8a:4b:b6:5f:c2:d9:3e:d6:
ce:53:15:7a:c7:5d:09:00:f6:f3:95:34:c8:55:56:
87:05:52:05:4e:2c:35:64:92:b1:42:84:3f:13:05:
2d:fd:ce:3d:dd:17:84:61:19:fe:5f:51:39:6a:42:
29:5d:8b:79:07:bf:e9:1f:30:32:c0:35:63:27:3a:
fe:14:ea:e5:b9:24:f8:e8:da:db:7e:5f:6b:8d:68:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:E0:F7:35:8E:9E:D0:B0:15:36:75:18:E2:73:97:91:24:82:9E
X509v3 Authority Key Identifier:
keyid:B4:ED:4F:1D:BF:65:11:CF:F8:BB:3D:95:56:54:85:B1:A9:B8:7B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwuh45HpQzj1jFuNb6eiyygY3RjPKjsYBXUyEfdon5H4/0/B4ED4F1DBF6511CFF8BB3D95565485B1A9B87BE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:f9:aa:0f:0f:91:97:55:29:62:cf:0f:82:dc:37:2a:74:
1b:1e:ca:8f:88:c2:38:77:7e:4b:24:9a:35:1d:b8:15:d7:98:
aa:e1:f5:54:87:87:56:e2:ca:b6:94:61:4d:38:98:a2:c9:74:
41:5d:90:f1:45:cd:33:68:57:ae:b9:67:4d:f8:a0:fa:c8:a4:
39:c8:2b:1d:8a:0c:8b:85:e8:95:a2:11:29:be:d8:64:20:c0:
38:18:9f:c6:e6:69:43:b7:47:6e:ec:c8:03:1b:e2:31:4d:ae:
d1:24:be:38:a8:c2:9c:2b:f9:1c:02:96:b2:c7:7b:6c:a4:1a:
53:8a:73:af:08:fa:48:c2:fe:77:99:20:c4:37:2e:81:03:e4:
88:a7:1b:6f:33:90:7d:87:57:8a:ba:5f:98:ff:a4:38:60:63:
60:be:fe:8a:bd:c7:8b:23:50:e5:d8:5f:bf:9f:92:67:33:71:
c0:25:1d:29:6c:7c:79:69:a7:58:2a:87:6d:a4:d8:1f:d2:8e:
7b:19:fb:85:42:74:a4:d9:a5:3a:0a:91:76:85:38:a1:1d:0d:
69:67:8a:42:28:5e:c4:dc:1a:7f:82:84:b2:19:0f:23:9b:b8:
2d:2c:04:ff:ad:81:ee:2c:04:a9:18:3b:32:32:c5:82:62:00:
18:56:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:40:06 2026 by rpki-client