
Error: rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier: EvulJeZpSVMeCAHS3Cl/TpfYmoYaQs+6JYgBjJyS6Fk=
Subject key identifier: F5:A0:BF:2B:DA:A4:39:44:38:C8:8D:9C:25:6B:AF:46:BB:6B:81:7F
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial: 27497C963F899A0AB47495CA5FA3EE370E20454C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number: 044C
Signing time: Wed 14 Oct 2026 06:59:03 +0000
Manifest this update: Wed 14 Oct 2026 06:54:03 +0000
Manifest next update: Thu 15 Oct 2026 07:17:03 +0000
Files and hashes: 1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: PwEE2yFzWkd/RQGOKXJbPG6Y0N/z1Yd/al3n0qj/auM=)
2: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: 9LVOlkLALZhAwjGJs2kqBwQJExijod2PZ0qPXcHTm7Y=)
3: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: rpzTvujFf5WqwOlcgDZSFzIkdHepRTqi1III3eflS2U=)
4: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: P6G6AZFRp5kqOosNoCryglvvtcBc6hA5DOR0IbYdZVw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 07:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:49:7c:96:3f:89:9a:0a:b4:74:95:ca:5f:a3:ee:37:0e:20:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Validity
Not Before: Oct 14 06:54:03 2026 GMT
Not After : Oct 15 07:17:03 2026 GMT
Subject: CN=F5A0BF2BDAA4394438C88D9C256BAF46BB6B817F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:60:52:72:ce:ff:96:60:49:e9:f9:2e:ac:
26:54:d0:6a:5c:24:6b:a5:90:09:c9:b2:8c:3a:4b:
e1:44:be:cc:ff:81:de:05:06:a1:91:75:10:05:7f:
5d:6a:31:4d:26:b6:66:51:06:2e:81:72:2a:5f:1e:
20:cf:8c:12:1f:91:7f:ed:60:29:cf:6e:d1:13:b8:
37:01:d8:9f:e7:32:69:2a:74:ab:6f:c5:10:bf:71:
88:50:a8:f8:5b:37:ab:5b:69:8e:d7:5b:a1:d7:9a:
cd:19:5f:35:2b:f4:c2:e9:c6:67:0c:42:20:bf:2d:
fc:29:70:d6:a3:5b:31:53:2e:03:f4:71:d3:77:1e:
f2:26:4a:6f:41:27:12:96:0c:c8:cb:13:c2:c8:3c:
97:dd:c5:24:c0:fd:a5:e1:8a:93:48:6c:a7:45:97:
c5:95:af:ad:56:d8:55:59:e1:af:f2:da:c2:27:2f:
9c:7e:0f:d1:bc:33:f3:8c:ec:13:c1:5e:4b:20:d3:
46:f9:f8:80:cc:bb:ca:83:4e:63:f1:39:bb:87:49:
25:2c:45:00:1e:d5:4e:c4:3c:7c:f4:43:fa:78:a5:
8b:4f:3b:85:9f:48:c8:55:fd:e8:94:74:6c:ae:a8:
df:c0:a4:6e:4b:6c:1c:6b:9f:f8:61:b3:12:7d:6d:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:BF:2B:DA:A4:39:44:38:C8:8D:9C:25:6B:AF:46:BB:6B:81:7F
X509v3 Authority Key Identifier:
keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:70:61:72:56:ca:6a:53:12:9b:28:49:15:8e:29:f4:a5:
15:44:c7:b8:6a:1f:2a:58:fd:6b:d4:29:c0:39:76:f5:da:1a:
4c:12:38:16:76:bd:26:94:f7:71:f3:11:cd:d3:bf:b7:ce:18:
d2:9a:dc:78:11:b4:c9:a7:47:72:98:2e:f1:28:fa:85:f9:50:
d0:99:7e:1b:ee:92:69:04:31:0e:d3:87:5a:ba:d6:ce:9a:3a:
d5:65:01:65:1e:cb:46:11:a2:06:0b:1e:73:1d:69:a5:83:ac:
47:1b:ef:6e:d4:5b:f7:5c:ff:3e:3d:91:49:8b:e7:61:52:b8:
f5:76:d5:6c:c5:21:09:4a:21:1e:d3:d3:21:47:76:49:22:e4:
f4:6f:0a:9e:6a:c2:65:2f:fb:cc:ee:f3:40:ce:47:c4:a1:0f:
96:f1:d3:4f:4d:c7:fe:5a:43:51:f4:66:37:bf:87:f8:75:32:
04:f2:b1:e6:ad:47:7f:74:68:05:cc:61:f8:be:a0:81:19:89:
ae:7a:b1:74:36:9f:58:a6:af:1e:c0:cc:a2:ac:20:25:b9:23:
05:88:d5:70:6d:96:d2:40:0e:6f:69:67:5f:6f:cd:b1:26:74:
7d:02:69:a3:bc:09:4d:88:45:38:aa:8b:22:ed:ab:27:0f:58:
8c:bb:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:16:18 2026 by rpki-client