
Error: rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier: rHaf1rMvXQn/vlO7xJNP2IvvPMqCBCRV+vjSd7olGoE=
Subject key identifier: 74:C9:5E:E5:55:8E:73:1E:17:E8:53:1E:AB:11:C0:5C:AE:21:2C:2C
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial: 68FF637751FFB31B9536795D77FCBA920D9A8E01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number: 04D6
Signing time: Sat 17 Oct 2026 11:11:19 +0000
Manifest this update: Sat 17 Oct 2026 11:06:19 +0000
Manifest next update: Sun 18 Oct 2026 14:13:19 +0000
Files and hashes: 1: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: dBK5EWUwBHCRzo0bpYkF0fx5VE9hBRp/pTinxYG0hU8=)
2: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: MPZh1/d9ZHhM2x5OUKw8mA+7noi4H2du/rWACLcxYkw=)
3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: 6goGBettQXlYT3dwNzXMNEk/cOwbQJLprhXKpD/i9z0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 14:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ff:63:77:51:ff:b3:1b:95:36:79:5d:77:fc:ba:92:0d:9a:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Validity
Not Before: Oct 17 11:06:19 2026 GMT
Not After : Oct 18 14:13:19 2026 GMT
Subject: CN=74C95EE5558E731E17E8531EAB11C05CAE212C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:6f:51:b9:e9:75:74:6e:8d:eb:1f:ae:47:
2a:f9:9b:a3:4e:8c:d2:53:3f:02:45:0e:da:26:7d:
c6:f5:43:08:75:97:25:4d:ed:5c:d8:d9:94:f9:4c:
0e:ce:54:9d:b0:78:fb:f7:ef:ae:3e:21:37:78:5b:
a3:88:f5:07:68:bd:3c:0b:06:cc:a6:42:14:39:3e:
98:d4:0f:4a:84:d7:d7:47:96:02:9b:5d:e6:87:70:
a5:6e:c1:2a:17:c3:7d:05:79:95:0c:82:19:fb:e3:
80:ba:f5:a0:0e:cb:2d:f9:cc:3c:1e:4b:60:56:19:
69:3b:0c:8b:21:cc:24:cc:6b:9d:05:f4:9f:5b:eb:
e4:f1:32:51:f4:9c:3e:fe:b9:8e:24:2b:3f:d5:18:
8f:91:2d:db:a1:d2:94:85:8e:0d:02:fc:96:f4:cf:
66:a8:08:8b:d9:ac:20:05:2f:4f:4a:c9:09:4d:bd:
dc:d6:01:05:3b:5e:e0:5d:d0:f2:81:45:4e:78:a9:
58:90:4f:0e:52:35:79:1e:21:9b:9b:99:97:c6:9d:
02:93:a1:72:81:7c:37:92:22:02:4a:a6:ff:fa:0f:
d6:68:40:e3:65:38:40:e4:d4:0e:de:46:41:5f:43:
be:65:05:e2:a7:fc:42:ea:fa:09:4e:1a:ad:f8:27:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:5E:E5:55:8E:73:1E:17:E8:53:1E:AB:11:C0:5C:AE:21:2C:2C
X509v3 Authority Key Identifier:
keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e5:04:27:28:1a:68:5a:65:9b:98:8b:cf:8a:ab:e6:89:01:
c0:03:35:8b:a5:c9:9a:a8:58:da:9d:6d:8b:bb:e2:24:26:8b:
42:1a:49:3b:c7:2e:c3:7f:bb:b1:e9:30:3b:3b:a0:ce:cf:e2:
66:33:d9:2a:ba:b3:59:34:25:dd:5c:50:89:74:f4:0e:74:90:
c1:c7:8f:e9:53:d2:03:a4:4e:0b:e2:be:3a:19:a4:89:d4:25:
73:0d:ac:01:83:ef:a7:91:32:09:50:0d:85:db:86:1b:05:1f:
05:b4:4b:06:35:b4:bf:0e:1d:64:f8:e8:f9:33:3f:f0:2a:b8:
20:25:46:a2:a8:15:10:12:17:59:18:ca:2c:08:ba:7f:48:64:
2b:77:e5:83:ee:25:ef:0d:69:57:2b:6e:1f:eb:80:d4:38:4e:
eb:13:d1:88:31:eb:6d:2c:4c:e4:88:fe:e1:04:11:ed:4c:f7:
95:cd:ad:93:59:ce:a9:28:e2:9b:40:72:c8:37:ee:b2:95:29:
b9:67:ee:3f:9a:e5:df:07:3b:1d:6d:10:b5:f2:e4:d4:cf:1c:
cf:a2:3e:fe:4a:b5:d6:a2:fe:c1:06:c8:01:ab:05:82:e0:9b:
5c:68:56:70:31:41:58:42:31:09:1c:78:de:5c:4f:24:1e:b5:
4c:89:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:26:50 2026 by rpki-client