
Error: rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
File: 26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft (raw, json)
Hash identifier: AN2bKsPF6hOpYB9k8MroOkgScUqqVI9Y9nSO2TusRlA=
Subject key identifier: 51:4D:95:A9:BB:21:30:92:FE:FE:AA:F0:3A:E8:B3:49:46:04:6D:F9
Authority key identifier: 26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B
Certificate issuer: /CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
Certificate serial: 58C4FB089DE45BDF511B48ACAE3506AE4B4DC963
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
Manifest number: 04E2
Signing time: Tue 27 Oct 2026 11:39:31 +0000
Manifest this update: Tue 27 Oct 2026 11:34:31 +0000
Manifest next update: Wed 28 Oct 2026 13:37:31 +0000
Files and hashes: 1: 3139312e372e3138382e302f32322d3234203d3e20323633333239.roa (hash: sqKWxWnC02WpR3TiQw+pQYYq76Tuu/ytNImrgtQCkJU=)
2: 26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl (hash: lh3URYeoDqix7cp5gVCqLBXol29ZMhkZNrm1NvAt2Ko=)
3: 323830343a313436633a3a2f33322d3438203d3e20323633333239.roa (hash: pAb8Bc7hBehgoHQsvq7eSLVRAv8oCMMItUZFizCoHBs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl
rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 13:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c4:fb:08:9d:e4:5b:df:51:1b:48:ac:ae:35:06:ae:4b:4d:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
Validity
Not Before: Oct 27 11:34:31 2026 GMT
Not After : Oct 28 13:37:31 2026 GMT
Subject: CN=514D95A9BB213092FEFEAAF03AE8B34946046DF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:2e:82:4d:be:55:6f:b7:13:13:9a:da:91:
d2:6b:a3:2b:3b:51:67:50:7c:db:89:de:14:bb:da:
01:f4:ec:4c:c8:74:84:28:dc:d4:6a:fa:5d:9d:d1:
9c:c5:65:93:73:71:78:f9:c6:64:7e:83:3d:0e:8a:
ce:1a:9b:7b:29:ca:9b:49:08:7f:c7:97:bc:c9:62:
84:73:60:28:42:48:fa:95:54:a9:94:31:65:3f:6d:
e6:05:98:ac:f5:87:2d:60:c2:50:2a:f5:60:b3:5e:
a7:de:7a:24:06:da:45:a6:f5:27:be:3c:56:e7:76:
e2:08:e6:ab:88:97:93:b7:a2:29:2f:18:d7:2e:d3:
98:02:36:af:a2:ee:b6:7d:f0:52:3a:fc:0c:0e:38:
d1:27:ab:7d:3f:98:b3:42:90:3d:d6:0d:a0:62:13:
7e:eb:a3:41:27:b4:51:aa:68:6e:50:2a:ad:a9:3e:
79:4c:b2:14:fa:57:e7:f3:4a:c3:6d:51:61:48:c8:
fb:2b:87:0c:b1:70:a9:1e:39:5f:6d:49:7a:b2:0d:
df:e5:13:d1:ff:b8:74:d7:02:55:bd:ba:e0:98:8e:
96:94:76:ba:01:2a:ab:ec:a2:8b:c6:1c:56:60:1c:
0c:e1:c6:78:88:0e:0c:53:bd:18:5b:39:b4:d7:a5:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4D:95:A9:BB:21:30:92:FE:FE:AA:F0:3A:E8:B3:49:46:04:6D:F9
X509v3 Authority Key Identifier:
keyid:26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:92:31:c3:c5:de:e5:93:70:79:d6:ad:95:23:14:a8:7f:7f:
55:60:ae:cb:41:69:b9:27:28:e1:cc:d7:68:f3:df:67:da:08:
8b:2b:88:94:7c:41:79:cb:12:5a:4a:01:88:c5:67:57:dc:57:
20:5d:e1:e7:8b:d4:82:49:9d:16:d0:94:4b:bf:76:8d:24:2f:
c3:1f:12:a1:ea:7c:b0:28:d4:01:e0:e2:06:5e:28:98:ce:c6:
a9:cb:0b:5d:67:17:48:3e:28:11:0a:bb:47:74:fa:ce:01:ef:
fb:af:12:2f:70:30:ba:4d:ae:48:1a:1b:9c:cb:6a:11:a5:19:
da:bb:94:74:be:3d:e1:d0:6a:d0:7c:90:ee:00:b5:84:a8:ee:
a6:bd:2f:e9:dd:27:cf:67:70:60:1b:aa:70:fb:ea:bd:15:c0:
eb:d4:ea:54:22:a5:4a:b7:d0:f1:2e:db:0b:86:0f:fa:c1:22:
3e:6a:80:20:94:fd:ee:d2:f1:2b:46:bd:4b:a7:d8:75:a6:fa:
42:fa:a0:93:05:8d:72:23:51:40:08:3f:4c:29:50:0e:e1:07:
24:5b:3c:2d:b6:e7:83:f3:57:bd:d2:3a:85:6f:78:8c:3d:81:
57:9e:39:cf:bf:5d:22:75:3c:cd:cc:b8:10:d6:12:ff:08:58:
34:46:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:06:01 2026 by rpki-client