
Error: rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
File: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft (raw, json)
Hash identifier: CaO9nnocRNa6Ocy6zT7GL46FuPzskbJQWqLwqB0pbfw=
Subject key identifier: C4:D4:20:9F:05:E1:CF:33:82:30:DF:3B:D4:25:25:4F:92:5B:52:93
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Certificate issuer: /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial: 70EEAFA5F7DE3094D4E538F00AC617DC7DEDCAE0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
Manifest number: 04B9
Signing time: Mon 28 Sep 2026 08:07:02 +0000
Manifest this update: Mon 28 Sep 2026 08:02:02 +0000
Manifest next update: Tue 29 Sep 2026 10:17:02 +0000
Files and hashes: 1: 34352e372e35322e302f32322d3234203d3e20323733333435.roa (hash: NiZJYVVGZ0ftfwXmx9j8c/iOChmGAdbQaXcJVtzmGF0=)
2: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl (hash: SoDyJjw3SJTH9AIKruG1M0VRElAkQ/lwFZWOsHHCzKk=)
3: 323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (hash: g6OZSpwen1cePyDlND9tKg+HeJctA2FCr4CbcxbWtE4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 29 Sep 2026 10:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ee:af:a5:f7:de:30:94:d4:e5:38:f0:0a:c6:17:dc:7d:ed:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Validity
Not Before: Sep 28 08:02:02 2026 GMT
Not After : Sep 29 10:17:02 2026 GMT
Subject: CN=C4D4209F05E1CF338230DF3BD425254F925B5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:7f:f8:e3:2b:c7:01:2b:2d:10:d7:d8:3e:
bc:06:5c:08:1d:3d:23:b3:39:00:e0:67:6e:91:b5:
3a:ab:ac:79:c1:a0:60:47:a7:a3:03:88:a7:ad:40:
f3:bd:92:cc:c6:8f:b4:1c:4c:59:bf:04:9b:49:3c:
30:99:a3:37:2d:f7:08:2e:c4:bf:db:9f:7d:04:29:
15:4d:f5:f5:99:49:a9:60:0d:74:63:5a:d0:ff:85:
79:56:d1:a8:93:32:b9:14:61:f7:ed:6d:3c:bd:54:
21:fe:81:fd:df:c9:c4:14:5f:b0:99:02:51:3d:a3:
11:91:9a:4e:04:b8:16:ef:3d:70:43:90:db:f3:a8:
6b:b0:94:34:e3:23:48:d7:a5:68:d6:43:85:b2:10:
3e:ac:d9:0e:d0:39:17:78:4a:30:95:a9:86:bf:5b:
c9:39:38:7a:a1:de:fa:7d:27:de:d7:c8:e5:c1:83:
f4:e8:47:62:49:a8:49:e3:82:6c:44:72:f6:4d:4e:
f0:3b:8e:3c:4a:ba:3f:7e:43:02:28:e6:05:b9:cb:
e2:f5:87:a6:30:25:31:86:f3:2b:be:6f:d0:55:ad:
3c:ad:56:26:8e:27:ec:08:81:d3:11:37:84:35:65:
fe:49:08:de:54:e7:42:9b:43:64:e6:ca:e9:71:0d:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:20:9F:05:E1:CF:33:82:30:DF:3B:D4:25:25:4F:92:5B:52:93
X509v3 Authority Key Identifier:
keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:96:ad:4d:f9:3d:e8:ca:05:3a:a3:1e:d9:c9:d3:7f:7c:2e:
8b:e4:da:0a:0e:8e:86:cb:62:3a:1b:78:44:e6:15:8f:5c:b9:
e3:59:45:a0:d1:f2:ff:41:b4:24:d9:ed:31:dd:7a:90:dc:87:
a1:ea:f3:3c:28:ee:0a:e3:d9:9a:2b:48:71:b5:7e:b7:4b:35:
72:f9:e6:8e:da:e5:9a:82:64:9b:fc:22:d6:9a:1a:28:2d:1a:
a5:ce:dc:c1:27:bd:40:0c:55:2b:ee:fe:b5:34:13:17:ae:03:
66:8c:db:2a:ea:1e:29:f0:fe:48:7b:ac:4f:2a:18:8d:f4:96:
6f:61:91:49:7d:f3:64:cb:03:1f:8b:2f:d0:99:45:24:da:04:
68:d3:f6:22:55:65:12:f3:86:c7:81:20:ea:2d:0b:eb:56:4f:
01:0a:59:4b:d4:2c:f7:47:45:e0:67:39:e2:42:29:90:0e:cc:
35:8b:e7:73:75:e6:ad:4c:c1:b0:75:43:c5:5a:c0:2a:c8:e0:
34:91:a8:b4:b9:40:22:d9:4b:1e:31:a7:c8:f2:e2:68:9b:d2:
72:01:c2:9b:99:00:76:c4:f9:ec:de:90:48:b2:8d:21:9e:7f:
41:b3:9b:bc:c0:8c:14:1e:aa:43:bf:c2:66:b0:0f:bf:04:1d:
8f:94:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:08:32 2026 by rpki-client