
Error: rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
File: 18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft (raw, json)
Hash identifier: r4Myp15nJfZG/fQ3Fwnk0UwXIVomLr61jQYAJWyOHhA=
Subject key identifier: 3F:24:54:3B:A7:09:05:2A:A7:28:DD:53:3C:16:A6:68:18:D4:0D:DC
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Certificate issuer: /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial: 27EEEA8C2D0AF0BE04054DC0424F2EF37762243C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
Manifest number: 04D2
Signing time: Tue 13 Oct 2026 12:30:05 +0000
Manifest this update: Tue 13 Oct 2026 12:25:05 +0000
Manifest next update: Wed 14 Oct 2026 15:45:05 +0000
Files and hashes: 1: 323830343a316132633a3a2f33322d3332203d3e203631383432.roa (hash: evA4SJLFGY5+g/Oz8s+3Ci9qxUiGCjH+4UCT9q7GEz8=)
2: 18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl (hash: Hkhk9nqHcghTlfcvbeiMFZ58cd0R84Unlsi4OyYP8uQ=)
3: 3230312e3133312e3137322e302f32322d3234203d3e203631383432.roa (hash: SSS9DbB52itqQxi2OwrhVH0PFKSFkyzP/BMDopMK9wQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 15:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ee:ea:8c:2d:0a:f0:be:04:05:4d:c0:42:4f:2e:f3:77:62:24:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Validity
Not Before: Oct 13 12:25:05 2026 GMT
Not After : Oct 14 15:45:05 2026 GMT
Subject: CN=3F24543BA709052AA728DD533C16A66818D40DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:4f:bf:a1:db:0a:4d:5c:f7:9c:6e:b4:2a:
09:f1:89:af:be:5e:07:e2:e9:e7:7a:58:7d:67:3a:
7f:c9:3c:07:06:49:5d:55:28:c0:4d:fd:0d:62:af:
36:ba:62:c6:30:6a:bc:eb:83:f6:60:e5:32:49:ef:
88:ac:df:4e:8c:6f:bf:e1:b0:39:ba:57:d0:36:c5:
26:30:c5:be:04:f9:1a:43:94:f1:5d:3e:48:81:50:
67:fa:66:40:67:23:dc:f1:1f:dc:93:32:62:90:b3:
82:ca:02:3d:b7:54:dc:01:29:f8:5c:d5:ff:cc:2b:
68:65:6d:64:f7:f8:eb:ea:29:85:94:30:27:41:98:
8f:2d:bb:0c:81:b4:54:91:1c:c0:dd:19:64:57:73:
1a:3e:dc:9c:a1:09:39:7a:cd:46:d3:f9:e5:77:b1:
f8:b0:ea:21:76:96:a8:12:0e:80:c3:e0:c9:e6:50:
70:cb:48:d9:bb:05:54:26:2a:2a:3a:97:fb:20:9b:
43:e9:d9:cf:fa:cc:6f:22:00:16:40:ec:64:fb:79:
55:36:e7:69:a7:d4:66:65:c5:6d:5d:38:1f:f1:be:
6a:5d:26:53:68:71:b7:44:c7:e0:72:a5:76:57:79:
c8:33:a5:a3:aa:aa:46:df:a5:8d:00:cd:c8:35:a2:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:54:3B:A7:09:05:2A:A7:28:DD:53:3C:16:A6:68:18:D4:0D:DC
X509v3 Authority Key Identifier:
keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:8d:c1:de:52:83:86:5b:10:b0:7f:2e:1f:f0:9e:1b:2b:
b3:6e:76:e5:9e:1a:c0:31:c1:51:21:1d:d3:72:72:fd:f6:d5:
1c:2e:b0:1a:2e:1f:82:e4:85:1b:f4:d4:7a:7d:e7:99:89:8a:
de:71:a0:a1:cf:10:9b:d3:12:16:82:80:0e:49:a2:7d:ec:0c:
95:57:8e:2f:6c:12:93:96:76:eb:f1:f0:19:f8:23:92:12:18:
9d:00:6f:cc:86:53:2d:b2:17:ec:fd:c0:7d:96:02:c3:20:b7:
20:c6:65:b7:e6:b8:75:d8:8f:fc:06:cd:98:5e:bb:d3:ba:6f:
d4:97:e9:2d:9b:df:58:f8:4b:12:e4:a3:70:4c:93:f5:a9:e7:
fc:63:30:6e:cf:92:a3:69:a2:45:86:bf:e7:72:ad:b8:5f:6c:
05:5c:5c:18:b1:f7:e1:29:9b:c5:61:0d:4c:31:2d:b0:6a:c3:
e1:78:9d:c4:b8:db:9c:b6:17:61:a4:ad:18:29:83:7a:cd:40:
b7:23:b3:4c:26:8f:b1:f8:9a:af:ef:7e:18:1b:d8:9c:cf:42:
30:9b:be:de:91:b0:ac:7a:85:ac:73:b6:08:fd:54:3e:41:e0:
9a:87:d4:12:b8:6b:f4:91:c5:11:e1:6c:70:55:a7:46:53:13:
2f:ba:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:54:50 2026 by rpki-client