
Error: rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
File: 834325D3983126D2D723BBC6EC0C6196882A6196.mft (raw, json)
Hash identifier: 0O390IZaCvzI3qwQBYAXSLNGOLqXuSNmIDVgd37nR4s=
Subject key identifier: BD:8A:FB:E5:17:5C:9D:1E:9B:36:56:06:BD:29:FE:DB:06:F9:87:F6
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Certificate issuer: /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial: 44C80349B220BF7497F3E25C836CE0C30E1101FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
Manifest number: 040D
Signing time: Tue 13 Oct 2026 15:34:04 +0000
Manifest this update: Tue 13 Oct 2026 15:29:04 +0000
Manifest next update: Wed 14 Oct 2026 17:58:04 +0000
Files and hashes: 1: 323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (hash: EOmtlBeeWZknhQW4AE3sw4WJfOLn280GQVnbdfSEE7k=)
2: 834325D3983126D2D723BBC6EC0C6196882A6196.crl (hash: 4Pl5PeoHruFJvKtIsemVEtY9/aQwly6XyEt1tyfF+WM=)
3: 3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (hash: hd1pP278w63N1IRyJlRJVGjbWfpCQLn3VEk8JPrF/eg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 17:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c8:03:49:b2:20:bf:74:97:f3:e2:5c:83:6c:e0:c3:0e:11:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
Validity
Not Before: Oct 13 15:29:04 2026 GMT
Not After : Oct 14 17:58:04 2026 GMT
Subject: CN=BD8AFBE5175C9D1E9B365606BD29FEDB06F987F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:0b:5b:48:93:ef:e1:23:b1:33:cc:ef:d2:
1a:18:77:4b:23:47:a4:8e:ad:a4:44:f7:92:23:9f:
18:32:6a:4b:00:6d:7c:f9:07:0b:be:32:ac:19:45:
dd:5c:8f:bf:1d:ce:a2:2c:2d:18:71:33:cf:7a:7d:
09:c2:da:fc:4f:e6:fc:a8:10:5d:a1:b9:3e:0d:99:
e9:87:81:91:f8:2e:36:d6:0b:87:52:f8:35:09:4b:
72:cc:30:b8:e4:cc:b7:6e:e5:e8:0c:50:d1:d8:d3:
f2:a7:04:9d:20:34:04:54:4d:08:21:9d:38:82:cf:
d0:2b:ba:8c:ab:50:91:d9:f8:b3:ba:83:f4:a6:aa:
76:55:5b:45:bb:7a:eb:10:5a:8b:f5:ff:66:3b:77:
ea:97:82:dd:48:06:07:68:65:4c:4f:b8:ee:61:83:
ed:8c:f5:4d:90:27:19:03:cf:1f:54:2a:f9:e0:ab:
2e:e6:52:aa:f3:dc:18:bc:60:74:41:c2:5b:ff:16:
15:a7:10:9f:bb:d3:8b:6e:70:8f:b8:c6:d1:79:81:
89:3b:aa:77:f1:bd:1b:40:48:e3:2d:05:e8:af:26:
c2:02:99:2f:0e:f6:b7:ac:81:30:be:a1:01:19:a0:
19:8e:14:57:f6:07:73:8c:59:84:65:a5:23:dd:8d:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:FB:E5:17:5C:9D:1E:9B:36:56:06:BD:29:FE:DB:06:F9:87:F6
X509v3 Authority Key Identifier:
keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:58:3a:4d:af:f7:6d:08:40:e0:65:ca:ca:9b:ba:b0:2e:
69:94:61:df:9f:2e:fc:4d:0f:68:80:2a:fa:5d:a4:e5:32:09:
5e:99:58:a4:39:02:a9:4a:ef:13:78:57:04:59:17:6f:a5:ee:
10:2a:d7:31:ea:cc:81:36:ca:3d:a8:e5:f5:c9:b0:dd:93:a2:
2b:89:49:f3:af:eb:8a:b5:6a:96:94:a7:21:ff:12:b3:74:85:
a1:f2:18:9d:fb:41:c1:57:9a:18:24:e2:45:bb:76:ba:92:70:
1e:8d:47:b2:42:74:6b:78:ab:50:90:ab:2c:f4:4e:09:ae:cd:
b3:df:7f:88:63:ca:5b:f4:3a:df:31:3b:17:eb:56:d5:31:41:
9f:96:91:fa:0b:c9:e0:9e:9e:00:98:8d:f7:b3:88:39:62:1b:
d8:ee:74:55:b6:eb:b0:2b:87:fc:f5:f0:05:75:f0:61:04:24:
b7:b4:12:fa:f7:e6:dc:f2:86:35:c4:dc:b4:69:cb:f7:99:72:
95:74:8e:70:40:8d:be:21:eb:e3:61:d2:6d:5f:94:dc:4b:cd:
44:c2:ee:6e:d7:46:88:4f:9a:e6:98:24:d9:06:b9:22:21:7a:
4f:67:6d:d7:ca:14:59:3f:04:1e:58:3b:c6:55:47:94:2f:b5:
91:2b:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:39:01 2026 by rpki-client