
Error: rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
File: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft (raw, json)
Hash identifier: UoB8/dt4XSUaEHYooalmiiiI/+H4sKEVuqYFFYeS4Y4=
Subject key identifier: BA:15:FC:57:AC:92:B9:88:0A:87:CE:A6:0E:71:92:C6:77:F5:AF:A9
Authority key identifier: DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
Certificate issuer: /CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Certificate serial: 1E5A38F402E445D646D5B9B67E616F94E75BD370
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
Manifest number: 055B
Signing time: Sun 04 Oct 2026 02:50:00 +0000
Manifest this update: Sun 04 Oct 2026 02:45:00 +0000
Manifest next update: Mon 05 Oct 2026 02:50:00 +0000
Files and hashes: 1: DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl (hash: hKo35ij6FyVtJnsMpm0dz3CpYeKT3aNxHIyU2iy1go0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 05 Oct 2026 02:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5a:38:f4:02:e4:45:d6:46:d5:b9:b6:7e:61:6f:94:e7:5b:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD0EEA2CC809C7ED52CD2A24D14454390AC2464C
Validity
Not Before: Oct 4 02:45:00 2026 GMT
Not After : Oct 11 02:50:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:91:98:65:17:f1:56:0e:25:53:3a:26:9f:
40:0a:4c:14:b7:e0:50:47:88:00:72:73:f6:63:8e:
26:d3:a4:e4:c3:1e:44:24:d1:2a:0f:c0:97:51:29:
1d:f1:8b:58:6c:b5:a5:c5:84:73:be:6c:4f:cb:9c:
c2:3a:01:3d:7b:a0:b3:9d:43:e9:c9:69:ec:ef:58:
fb:80:ac:82:bd:6e:0f:04:6c:19:7d:7b:42:bf:07:
14:6d:5f:e0:ea:5c:8f:92:18:aa:15:8c:8b:04:35:
7a:30:6c:8a:9a:6a:81:5c:6b:fd:34:e6:6b:a8:1d:
2b:72:2b:ea:a4:73:62:fe:4e:7b:9c:e6:eb:d4:ee:
52:b5:bd:7a:3d:0e:78:37:b4:97:74:50:92:c6:49:
19:73:7c:32:a7:8a:68:02:9f:77:52:fc:e3:27:b3:
db:7e:b9:70:d0:c8:35:73:30:3e:a1:31:40:51:34:
34:2b:12:3a:4c:7e:8a:c7:5e:1c:e8:c5:47:19:fa:
b8:99:6d:cf:f6:84:96:20:b2:1a:d6:51:b4:af:8f:
65:18:1d:b8:2c:0c:28:cc:bc:63:94:6a:67:b1:31:
c6:87:57:68:a8:bd:c6:93:4e:a6:73:94:b3:32:c4:
3a:71:a1:b7:07:85:93:24:58:0e:b4:3d:17:93:e8:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:FC:57:AC:92:B9:88:0A:87:CE:A6:0E:71:92:C6:77:F5:AF:A9
X509v3 Authority Key Identifier:
keyid:DD:0E:EA:2C:C8:09:C7:ED:52:CD:2A:24:D1:44:54:39:0A:C2:46:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7xnRMxLMeELCej3izdFaSTDHMMpbiUnyWsmMTHsABuv/1/DD0EEA2CC809C7ED52CD2A24D14454390AC2464C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fb:9d:ad:17:92:80:c1:14:b0:b6:cd:e6:63:88:4d:10:6e:
0c:8b:ba:c6:30:49:2f:c4:07:eb:cf:29:29:2f:63:e9:a7:ad:
60:21:a5:96:3d:af:b6:52:6d:13:77:8b:8f:55:8d:3a:72:6e:
95:ef:c4:68:ee:b1:5d:9e:ba:86:fd:1a:84:0b:f6:6c:48:58:
fd:9a:57:c3:b2:95:fb:21:f0:6a:c2:01:cb:3a:7e:51:2e:51:
24:a7:98:34:52:73:0a:d9:41:92:74:28:91:ea:17:ad:bb:6f:
16:37:23:af:30:fe:72:b6:62:e1:1d:e2:eb:33:63:86:79:31:
26:4d:e2:7a:48:cd:0e:46:d6:cc:eb:19:5c:18:b2:85:20:3d:
44:6b:be:9e:d2:7a:3d:aa:9c:b1:ea:81:ee:33:eb:0e:72:5a:
98:cb:5f:ff:1f:1b:dc:f5:65:3a:d2:0a:e2:31:ed:fe:3d:37:
12:13:65:fe:2c:0e:52:f3:84:ce:2e:d8:96:88:2e:c7:4d:08:
ca:39:37:0d:61:a2:6f:c1:26:fd:a2:e9:ce:3c:ec:b1:c3:30:
cc:1b:09:d7:ab:83:f7:06:c5:0a:00:d6:0a:0e:9c:cb:4b:4a:
24:4c:51:36:ba:56:d3:75:08:f9:c4:2b:d1:c0:6d:86:e4:58:
9c:93:d6:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:54:49 2026 by rpki-client