
Error: rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
File: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft (raw, json)
Hash identifier: N2v2S1OEEXbNceCzZs7IM9qHgsKMZnToFmRXCGKvNzs=
Subject key identifier: 01:0F:DE:75:9C:3A:93:66:A5:1B:91:1B:04:22:ED:3C:6B:57:07:60
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Certificate issuer: /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial: 4DDE8CF76DBEE843386AED919CD2E5C5F4098A4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
Manifest number: 056E
Signing time: Wed 14 Oct 2026 20:10:00 +0000
Manifest this update: Wed 14 Oct 2026 20:05:00 +0000
Manifest next update: Thu 15 Oct 2026 20:10:00 +0000
Files and hashes: 1: E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl (hash: EInJFDNdrivHD5VygarMliTIXc1o877p8QqU8urgzZw=)
2: 3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa (hash: 1yd1A7DGRmyDLmbw6dBeYHszZiwpWU2UO9ejflEseEc=)
3: 3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (hash: 6TmFEqzOQWRsAeV0zguTjF+hUywcqJbljzvmxncc7aw=)
4: 3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (hash: KeATW2+WTsAZ3teiwzE5i1dJQy7AfZCS2Ly3+ZHxEBo=)
5: 323830343a316561303a3a2f33322d3634203d3e20323634343430.roa (hash: xqC+gOH7rBq/jDtYnOw+knrs+Scwd70y3IYgSn+N77M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 20:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:de:8c:f7:6d:be:e8:43:38:6a:ed:91:9c:d2:e5:c5:f4:09:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Validity
Not Before: Oct 14 20:05:00 2026 GMT
Not After : Oct 15 20:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:98:5a:4f:a6:17:58:c3:94:02:aa:7b:b4:
c1:3d:62:39:21:5d:08:af:fd:c4:db:98:9a:7d:56:
2b:76:df:a5:1b:52:be:b6:33:b9:e5:d8:85:c7:f5:
2d:65:ec:93:32:37:5c:1a:c6:62:56:b5:cb:c4:2c:
d8:56:0f:28:ec:8e:e2:22:28:bd:95:2e:0a:e7:6c:
fc:3d:b6:26:b6:44:db:46:3b:08:6d:6a:3c:14:2c:
9b:4d:a0:05:67:f9:0b:db:87:d2:50:82:94:59:30:
be:2a:2f:83:2e:ab:f8:01:4d:bb:02:69:de:f4:b0:
b4:04:90:b7:06:e5:99:b7:91:47:8a:7d:66:ab:57:
6f:88:2a:6f:c4:b0:c3:f7:21:68:fe:cb:f5:51:b2:
27:cc:4d:d6:b9:08:00:b2:7c:44:b5:65:a7:24:26:
0a:cb:b8:16:2f:44:f4:aa:d7:11:1c:20:e7:91:07:
a2:f6:c3:db:fd:d9:7e:33:07:16:90:99:ba:86:85:
d2:56:41:33:62:00:1d:2b:15:43:a3:f6:63:0a:4b:
67:40:ab:77:88:bd:e7:04:d0:8c:a5:a2:25:b2:26:
d1:e3:9a:b1:7b:c7:24:db:0a:79:1c:71:58:fd:6c:
a1:02:b8:7c:c3:f9:18:48:10:79:c1:f0:33:98:bb:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:DE:75:9C:3A:93:66:A5:1B:91:1B:04:22:ED:3C:6B:57:07:60
X509v3 Authority Key Identifier:
keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:55:20:8c:b5:07:af:88:94:1b:b1:34:f5:7a:9e:7d:d9:
f3:d7:37:f9:7d:f1:76:6e:b3:12:f1:67:01:db:c9:98:a2:77:
c1:6c:d2:ab:88:a2:33:72:a4:ca:79:32:d2:46:0c:05:e0:98:
a8:6c:6c:da:6d:5e:ff:6f:1b:0f:b3:3a:58:4f:11:18:a7:6b:
b4:13:ac:ec:13:04:a3:fe:90:84:cc:8f:e5:90:e4:14:ba:52:
7e:93:17:84:5d:d2:4c:60:cb:84:6c:ca:54:8b:b8:5f:27:7d:
c1:15:4a:45:d7:73:36:c5:36:93:d6:a4:0e:3e:75:72:09:5c:
1a:59:7d:7e:3e:ca:f2:6f:18:34:58:84:2e:84:bc:c8:a3:8b:
e3:75:5d:f4:7d:9d:a4:3c:94:6c:45:8a:f1:1d:2e:25:e4:2d:
7c:91:b8:1f:5e:ca:34:4b:2f:b6:a7:c6:e1:f9:c4:1f:4a:2a:
83:a8:70:f6:aa:67:b4:d0:4d:18:b7:42:34:0d:24:77:b2:4c:
31:11:2d:5f:6c:59:41:c3:4c:cd:fb:75:a8:75:5b:77:3a:38:
de:91:28:f4:c9:44:34:86:a3:87:68:ff:54:94:72:8f:0b:68:
77:d5:c1:76:1d:5e:6a:cd:18:7b:45:f3:1e:58:d1:a4:7c:3d:
8c:35:6c:5f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUTd6M922+6EM4au2RnNLlxfQJikowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdEOUNCQjI4MUU1NURBNDYxRjZFQjlEQUYyNUE3RTkx
NjJBRDJFOTAeFw0yNjEwMTQyMDA1MDBaFw0yNjEwMTUyMDEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTk0OTk4NUE0RkE2MTc1OEMz
OTQwMkFBN0JCNEMxM0Q2MjM5MjE1RDA4QUZGREM0REI5ODlBN0Q1NjJCNzZERkE1
MUI1MkJFQjYzM0I5RTVEODg1QzdGNTJENjVFQzkzMzIzNzVDMUFDNjYyNTZCNUNC
QzQyQ0Q4NTYwRjI4RUM4RUUyMjIyOEJEOTUyRTBBRTc2Q0ZDM0RCNjI2QjY0NERC
NDYzQjA4NkQ2QTNDMTQyQzlCNERBMDA1NjdGOTBCREI4N0QyNTA4Mjk0NTkzMEJF
MkEyRjgzMkVBQkY4MDE0REJCMDI2OURFRjRCMEI0MDQ5MEI3MDZFNTk5Qjc5MTQ3
OEE3RDY2QUI1NzZGODgyQTZGQzRCMEMzRjcyMTY4RkVDQkY1NTFCMjI3Q0M0REQ2
QjkwODAwQjI3QzQ0QjU2NUE3MjQyNjBBQ0JCODE2MkY0NEY0QUFENzExMUMyMEU3
OTEwN0EyRjZDM0RCRkREOTdFMzMwNzE2OTA5OUJBODY4NUQyNTY0MTMzNjIwMDFE
MkIxNTQzQTNGNjYzMEE0QjY3NDBBQjc3ODhCREU3MDREMDhDQTVBMjI1QjIyNkQx
RTM5QUIxN0JDNzI0REIwQTc5MUM3MTU4RkQ2Q0ExMDJCODdDQzNGOTE4NDgxMDc5
QzFGMDMzOThCQjcxOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmUmYWk+mF1jDlAKqe7TBPWI5IV0Ir/3E25iafVYrdt+lG1K+tjO5
5diFx/UtZeyTMjdcGsZiVrXLxCzYVg8o7I7iIii9lS4K52z8PbYmtkTbRjsIbWo8
FCybTaAFZ/kL24fSUIKUWTC+Ki+DLqv4AU27Amne9LC0BJC3BuWZt5FHin1mq1dv
iCpvxLDD9yFo/sv1UbInzE3WuQgAsnxEtWWnJCYKy7gWL0T0qtcRHCDnkQei9sPb
/dl+MwcWkJm6hoXSVkEzYgAdKxVDo/ZjCktnQKt3iL3nBNCMpaIlsibR45qxe8ck
2wp5HHFY/WyhArh8w/kYSBB5wfAzmLtxlwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FAEP3nWcOpNmpRuRGwQi7TxrVwdgMB8GA1UdIwQYMBaAFOfZy7KB5V2kYfbrna8l
p+kWKtLpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0UzUHdrVzlTZUJzcXBl
UndjZm9Wa2VweG9iYzNNblBEN0xEajNjZTEyWFBaLzEvRTdEOUNCQjI4MUU1NURB
NDYxRjZFQjlEQUYyNUE3RTkxNjJBRDJFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FN0Q5Q0JCMjgxRTU1REE0NjFGNkVCOURBRjI1QTdFOTE2MkFE
MkU5LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0UzUHdrVzlTZUJzcXBlUndjZm9W
a2VweG9iYzNNblBEN0xEajNjZTEyWFBaLzEvRTdEOUNCQjI4MUU1NURBNDYxRjZF
QjlEQUYyNUE3RTkxNjJBRDJFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEq5VSCMtQeviJQbsTT1ep59
2fPXN/l98XZusxLxZwHbyZiid8Fs0quIojNypMp5MtJGDAXgmKhsbNptXv9vGw+z
OlhPERina7QTrOwTBKP+kITMj+WQ5BS6Un6TF4Rd0kxgy4RsylSLuF8nfcEVSkXX
czbFNpPWpA4+dXIJXBpZfX4+yvJvGDRYhC6EvMiji+N1XfR9naQ8lGxFivEdLiXk
LXyRuB9eyjRLL7anxuH5xB9KKoOocPaqZ7TQTRi3QjQNJHeyTDERLV9sWUHDTM37
dah1W3c6ON6RKPTJRDSGo4do/1SUco8LaHfVwXYdXmrNGHtF8x5Y0aR8PYw1bF8=
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:30 2026 by rpki-client