
Error: rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
File: F4315E00F295861C1ED30C06EA1C17530762630E.mft (raw, json)
Hash identifier: YiCDW8mC/vr57wi2bDiyfqKF+TjaBnxvx3B0iQiswVg=
Subject key identifier: 73:AA:8C:F8:1A:9E:A1:ED:86:A0:08:49:D0:57:96:CC:F0:AC:2B:96
Authority key identifier: F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E
Certificate issuer: /CN=F4315E00F295861C1ED30C06EA1C17530762630E
Certificate serial: 23CED1FBDBF4AD12EE686628B349AAC9DAD438FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
Manifest number: 27
Signing time: Mon 12 Oct 2026 17:39:53 +0000
Manifest this update: Mon 12 Oct 2026 17:34:53 +0000
Manifest next update: Tue 13 Oct 2026 21:00:53 +0000
Files and hashes: 1: 3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (hash: L7lQ+3ONbJAF1KNhhAX3rk/4bKGWjwpTmfTEBUSH9nY=)
2: 323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (hash: N9lk7Vs3JD0VmRNAGvdkvIgnQkzfMTRPCvihowseArY=)
3: 3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (hash: b+xcv+QEo0iM/LVCifbfHnUMvrpjOrCrL46yj8B0/n8=)
4: 3138372e36332e3132362e302f32342d3234203d3e20323730373738.roa (hash: tDINC5gC1hTRoMPFusWS8Fs+A25eEIg7/xyJWhvE8DY=)
5: F4315E00F295861C1ED30C06EA1C17530762630E.crl (hash: Jxt821EaI/OI671tdKtm171uYLfOgrAGyjrkgLAzpAg=)
6: 3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (hash: 28umUbJBtf1hGJgwdakjCrNDQ6ACgn+Cbl6cpWl5b0Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl
rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ce:d1:fb:db:f4:ad:12:ee:68:66:28:b3:49:aa:c9:da:d4:38:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4315E00F295861C1ED30C06EA1C17530762630E
Validity
Not Before: Oct 12 17:34:53 2026 GMT
Not After : Oct 13 21:00:53 2026 GMT
Subject: CN=73AA8CF81A9EA1ED86A00849D05796CCF0AC2B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:e1:3d:e0:77:c4:14:5c:7c:6a:0e:07:27:
5d:91:36:ef:11:e8:1c:64:b9:c4:a7:23:c7:7d:64:
4d:95:15:53:58:93:13:0d:c1:31:70:d5:51:03:92:
ac:b2:c4:3f:3f:46:54:c7:1c:8e:e9:8e:8a:a7:13:
5c:7c:5d:29:86:94:27:69:4b:39:84:38:65:69:46:
ad:19:c7:5a:3f:b3:d4:03:73:f1:10:54:ae:ec:ad:
54:cc:30:29:f1:65:6e:2c:e3:3f:78:73:3c:23:2a:
3a:5d:a6:c0:ae:4e:fc:b3:a5:fc:ea:28:e5:61:f4:
ba:31:0d:c2:a2:8a:cc:04:ed:ab:47:e1:83:3a:40:
ca:8a:07:8a:1b:9e:cb:b9:43:bc:a1:d3:60:65:25:
e3:d1:18:cb:4a:61:94:23:2f:44:73:b8:12:d6:f9:
28:7f:99:31:1b:1e:26:e2:2d:5f:ce:24:f2:4f:51:
30:d2:0c:50:14:e5:e2:65:05:c9:d1:93:12:f5:94:
d6:da:09:89:9f:c4:5e:86:9f:45:f1:c6:dc:5c:23:
48:4f:6c:f4:ad:c5:2d:79:7c:fc:83:8b:8c:54:cd:
cd:f4:ad:cc:ff:64:35:c3:71:f9:97:7d:81:2c:d4:
9c:29:a7:26:a8:59:78:a7:bf:f2:f1:4a:52:b9:6a:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:8C:F8:1A:9E:A1:ED:86:A0:08:49:D0:57:96:CC:F0:AC:2B:96
X509v3 Authority Key Identifier:
keyid:F4:31:5E:00:F2:95:86:1C:1E:D3:0C:06:EA:1C:17:53:07:62:63:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4315E00F295861C1ED30C06EA1C17530762630E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/F4315E00F295861C1ED30C06EA1C17530762630E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:7d:d0:5e:73:eb:d5:47:06:38:b5:3a:bc:8a:df:da:cc:
9c:58:2f:b1:cd:8f:b1:b1:20:ce:fd:95:89:7c:04:dd:3c:9c:
e4:df:26:c6:38:a3:ed:5c:95:d8:59:00:1a:62:fa:a1:27:1c:
c3:0f:4a:0a:be:36:c9:68:4d:47:2c:bf:b7:79:74:87:86:20:
d6:ae:a3:57:f5:25:21:53:1e:4f:df:58:8f:e9:9e:1e:dc:63:
21:ea:c7:4d:98:dc:ce:8b:30:31:9f:7b:e2:b2:72:86:dc:54:
bf:e5:09:71:47:22:c4:b7:97:9e:3b:ee:c4:95:47:37:ac:ab:
83:d1:54:cc:ec:48:7d:df:e2:b3:82:b8:58:b1:5e:f2:42:97:
29:54:5a:ae:8b:e7:3f:76:50:fd:72:a7:19:ff:a9:81:e3:4c:
df:bc:ed:d9:28:40:24:51:29:d5:31:f8:d5:4e:97:03:f4:2f:
c0:8e:09:c7:08:4b:66:25:f9:8a:04:0a:2f:5a:f3:79:08:f9:
4c:39:61:df:35:99:f4:16:c9:0e:c5:c0:11:44:70:24:d4:36:
24:c5:13:b4:7a:05:b2:a8:47:50:28:73:62:a6:c2:0a:9d:31:
2a:ca:09:ff:17:9f:74:e1:d7:d8:ac:87:1c:40:f7:a8:bc:8f:
27:17:07:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:20:11 2026 by rpki-client