
Error: rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
File: 2A6491204C711A84AD522B857DDD79956488BAA2.mft (raw, json)
Hash identifier: DxjY3I/i+CYTpBbfaY/7EYK/hHHWKjled3PFgNaZmmI=
Subject key identifier: 58:69:66:0A:75:58:74:8B:C9:DB:64:39:A4:11:9F:0A:F6:E2:B0:8A
Authority key identifier: 2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
Certificate issuer: /CN=2A6491204C711A84AD522B857DDD79956488BAA2
Certificate serial: 3F7794EEAF2480D2E1C8A26604F19F25416C7432
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
Manifest number: 04CB
Signing time: Mon 12 Oct 2026 20:32:10 +0000
Manifest this update: Mon 12 Oct 2026 20:27:10 +0000
Manifest next update: Tue 13 Oct 2026 21:07:10 +0000
Files and hashes: 1: 323830343a363262383a3a2f33322d3334203d3e20323639333134.roa (hash: VOoS2rIR2u5mGkfmhZ5MbBu6mdLIkn2AnpGufi3llEc=)
2: 2A6491204C711A84AD522B857DDD79956488BAA2.crl (hash: yRmelKAdRwU5ok5UiaRJE/r7Mrv4M5FtQ7HMdicV5kg=)
3: 34352e3138342e34382e302f32322d3234203d3e20323639333134.roa (hash: BYzE5Yv3TH97w0Ifu192CyxGUx8jZau0TSiy0bsOY4Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl
rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 21:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:77:94:ee:af:24:80:d2:e1:c8:a2:66:04:f1:9f:25:41:6c:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A6491204C711A84AD522B857DDD79956488BAA2
Validity
Not Before: Oct 12 20:27:10 2026 GMT
Not After : Oct 13 21:07:10 2026 GMT
Subject: CN=5869660A7558748BC9DB6439A4119F0AF6E2B08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:4c:17:7a:be:e6:f2:46:3c:77:8f:5d:5d:
3e:5b:60:30:85:53:43:d9:5c:11:d2:32:f9:b3:fb:
e0:52:11:a4:15:5d:82:d7:67:64:1c:ca:f7:a2:6c:
1a:bd:0a:49:c0:a6:06:32:35:ac:28:1d:0a:82:02:
75:7b:1b:ad:b4:a6:2f:38:c4:94:0b:e5:16:1f:69:
69:da:2b:48:df:b5:98:6b:dc:76:3e:08:36:63:60:
ab:04:c5:a0:71:98:80:04:2f:19:03:24:ff:23:09:
ba:2e:db:42:6d:15:e8:5c:c3:2a:b7:78:96:74:18:
7b:67:59:fe:4d:03:09:6b:98:ff:0d:b1:30:be:5d:
c2:80:a9:cc:5b:18:e4:85:a7:1b:2e:6b:b6:a8:d6:
e1:b4:2a:f7:35:e8:76:c4:ba:00:1c:1b:5d:7c:41:
c2:6b:37:d7:7b:07:e7:42:75:fa:98:94:db:c5:f7:
b4:b4:0e:72:fb:c2:98:99:b2:bc:1e:b3:0d:f5:73:
1a:ef:d2:1a:f1:7a:af:98:b7:55:0f:b9:e7:b7:b2:
d2:b3:31:e5:64:46:1c:d1:8d:44:3e:5f:13:42:b5:
06:bf:c3:2e:4a:b0:ec:37:d9:19:97:c7:82:10:1b:
75:f6:53:63:d0:b4:17:a3:74:a0:58:b1:aa:e1:58:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:66:0A:75:58:74:8B:C9:DB:64:39:A4:11:9F:0A:F6:E2:B0:8A
X509v3 Authority Key Identifier:
keyid:2A:64:91:20:4C:71:1A:84:AD:52:2B:85:7D:DD:79:95:64:88:BA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6491204C711A84AD522B857DDD79956488BAA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/1/2A6491204C711A84AD522B857DDD79956488BAA2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:8c:70:84:2a:51:fa:20:e6:18:9e:95:bb:cc:62:c8:aa:
bf:f5:8e:a8:97:c2:df:8f:6b:52:e3:db:f4:3d:43:dc:9c:c6:
30:a4:1f:74:1d:3a:07:25:8c:29:0d:fc:6c:b3:36:b1:24:fb:
13:d4:43:4f:37:7f:d4:9b:da:e5:12:c1:b4:3b:b2:82:e0:28:
f3:d3:47:e6:88:c6:15:06:16:7c:b6:a9:f0:db:71:34:67:86:
e0:16:6f:67:db:96:ed:a5:5f:8f:30:bb:27:e9:9c:69:5b:a7:
0f:ec:18:f4:d1:20:fd:96:ba:04:bf:bd:75:34:8e:d8:6d:d8:
88:34:50:68:f8:3a:de:e5:c2:3b:91:33:04:28:26:54:9d:02:
fc:ce:9b:96:f9:76:2d:cf:b2:96:5a:00:4d:0c:f5:94:88:d8:
0a:49:67:4e:bc:da:f8:33:e9:d4:86:35:d0:38:d6:e3:4d:85:
eb:39:64:82:6d:80:95:e2:2f:9b:a4:07:37:a4:eb:58:13:a3:
8c:85:db:ef:1f:5d:3f:9d:5b:7b:c5:ae:b0:0b:08:b0:a7:0c:
cb:69:3e:9a:44:8a:1d:34:ef:9e:0f:bb:8e:4c:fb:35:b0:96:
7d:39:20:2f:7c:c1:28:1d:a1:d0:21:95:30:eb:c5:c7:54:f6:
4b:c7:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:22:26 2026 by rpki-client