
Error: rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
File: B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft (raw, json)
Hash identifier: FuQv+ko5BHR7S99vryvERyiAqT9NWgS7GeshHzxXAro=
Subject key identifier: 61:C0:2A:35:A9:D9:44:A6:4B:67:C9:66:0F:F3:3A:91:DC:6C:57:9A
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Certificate issuer: /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial: 01418761147C30A18583E443EA1F18E7E7B570B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
Manifest number: 044C
Signing time: Sun 11 Oct 2026 11:40:37 +0000
Manifest this update: Sun 11 Oct 2026 11:35:37 +0000
Manifest next update: Mon 12 Oct 2026 14:09:37 +0000
Files and hashes: 1: 3136372e3235302e34302e302f32322d3234203d3e203631393334.roa (hash: OP5ReH5cfBU7qWkznkcHzfU8+RHoaCJgiYwqLI9rYrA=)
2: 3230302e31302e3133322e302f32322d3234203d3e203631393334.roa (hash: 9aHNIqZoNUKVpKSsYcjS6S13fFi7zaHM4RvKVQZZj3U=)
3: 323830343a313837343a3a2f33322d3438203d3e203631393334.roa (hash: SX1qDtbwz5I4UJgbUseLr4ReBQpt78ZqhnGtOl9Wv9o=)
4: B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl (hash: cPIGRkWOZpItP7K8sQJ4aS7bCS33FHVaRpMFOowKrZ0=)
5: 3133382e33362e3234382e302f32322d3234203d3e203631393334.roa (hash: DT+Th+4Qk6YbR7iDUAyMd7pnsbqssOOR9XIo0VpF700=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 14:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:41:87:61:14:7c:30:a1:85:83:e4:43:ea:1f:18:e7:e7:b5:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Validity
Not Before: Oct 11 11:35:37 2026 GMT
Not After : Oct 12 14:09:37 2026 GMT
Subject: CN=61C02A35A9D944A64B67C9660FF33A91DC6C579A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:a2:3f:60:40:8d:11:5c:41:18:6e:ad:62:
ff:8b:cd:08:b3:ee:71:05:c8:dc:61:7a:4a:50:b0:
c5:ad:be:0c:10:ec:d4:4e:e1:90:50:1e:e7:ff:1d:
66:e9:c0:3a:1a:3e:c3:c1:96:55:6c:0e:6f:4d:b9:
f4:96:1d:ed:0a:54:20:dd:4d:48:15:1c:09:15:cf:
bc:85:5b:eb:4d:03:4f:2c:4d:11:04:3c:14:d5:7a:
3d:84:79:b0:e8:fe:73:6e:6a:84:74:ff:78:12:d6:
0d:8d:7c:f5:00:44:48:3f:b5:9b:d2:2b:c0:8d:62:
d6:d9:c3:8a:62:7e:71:fb:fe:97:9d:04:aa:fa:e6:
54:47:86:5e:04:39:f9:5e:3c:4a:a5:37:b2:d4:7f:
ac:d1:32:4e:43:2a:f7:e6:e8:a5:74:6b:45:08:52:
68:5e:fc:b1:24:ca:c4:ae:b7:24:e0:e8:11:47:e9:
60:91:50:4f:fe:a1:1e:a3:52:09:8a:7c:ae:7d:dd:
14:ad:29:9a:24:98:f2:1a:7b:b3:c1:bb:ac:e4:73:
74:3b:81:d7:15:e0:d7:53:bd:58:a9:31:f7:76:d5:
2b:d3:37:6a:1f:e2:c7:a5:68:0f:17:de:81:2a:95:
72:61:6b:62:cd:30:17:3e:3b:55:24:0f:e3:08:a4:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:2A:35:A9:D9:44:A6:4B:67:C9:66:0F:F3:3A:91:DC:6C:57:9A
X509v3 Authority Key Identifier:
keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:7d:76:54:bc:85:e0:99:aa:d2:67:f9:57:53:ea:66:32:
9e:67:25:89:e4:0b:6c:a8:05:41:0d:dd:d2:49:4b:c2:eb:67:
c4:da:42:03:f5:50:bb:04:c4:dd:f9:d3:3d:a3:4b:2d:01:a2:
ff:38:56:f5:b8:a1:8f:41:0c:b5:51:6e:02:85:e7:1a:63:1f:
7d:21:9e:39:95:54:b0:fc:50:1f:9d:2a:73:ae:66:ec:8d:48:
44:81:47:22:e2:4f:6a:10:1c:6f:c5:4f:3c:0b:11:83:8c:a7:
1b:35:0b:14:57:6c:15:72:22:08:5c:cf:62:bb:c8:76:c7:4e:
eb:a3:bc:96:ee:3a:ea:71:1c:96:38:59:a9:43:e4:56:49:5e:
33:68:a6:5e:f6:b6:cf:14:3f:01:9c:bb:d8:a1:36:2e:4b:1a:
c5:3e:69:f4:65:a3:cb:48:73:e2:9f:90:6f:67:a2:ce:e9:09:
6b:42:dc:9d:19:cf:49:be:2c:26:a3:7b:c6:93:60:2c:6b:27:
f5:b0:0a:b6:b4:28:06:6d:0f:27:71:1f:da:cc:f8:1e:cc:41:
95:f3:d4:52:34:cf:f2:cf:d8:11:ac:d7:6a:17:f4:b3:26:fc:
8d:54:c4:a3:ef:8e:12:3d:35:81:0a:87:25:68:3d:60:4e:63:
45:59:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:53:16 2026 by rpki-client