
Error: rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
File: 9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft (raw, json)
Hash identifier: apPvdpvsUCf+HRHKYcg96SdOYMG3xvtZUHO+EuacliA=
Subject key identifier: E6:26:AB:29:77:10:18:56:C5:39:8D:1F:AB:9B:36:7D:BD:76:87:25
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Certificate issuer: /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial: 1454EEEC38B1009329A261E8D304C87380CA8AA0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
Manifest number: 04CE
Signing time: Thu 15 Oct 2026 20:01:36 +0000
Manifest this update: Thu 15 Oct 2026 19:56:36 +0000
Manifest next update: Fri 16 Oct 2026 23:09:36 +0000
Files and hashes: 1: 323830343a363133303a3a2f33322d3438203d3e20323639323139.roa (hash: lFdnaz5/yVIcpdz7wRTI+m1aEZucDGeKki3kr5g2t7A=)
2: 34352e3138322e302e302f32322d3234203d3e20323639323139.roa (hash: mjyt1OBknjEZsKtF1vX4ibzhCkrxO5LHKKVoduEir3U=)
3: 9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl (hash: 3WyOovFWykFv35ZdCGt7N5EbtYZboXY7WBJBwEA4mI8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 22:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:54:ee:ec:38:b1:00:93:29:a2:61:e8:d3:04:c8:73:80:ca:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Validity
Not Before: Oct 15 19:56:36 2026 GMT
Not After : Oct 16 23:09:36 2026 GMT
Subject: CN=E626AB2977101856C5398D1FAB9B367DBD768725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:1d:62:3b:67:26:c7:99:1e:b9:1a:15:d3:
92:d8:27:68:f5:9c:5f:2f:ee:93:c2:4b:28:16:3d:
00:01:93:fa:57:c5:dd:49:e4:18:6d:82:45:c6:bb:
7c:57:aa:71:4b:32:a0:4d:71:ce:70:e0:60:b8:97:
a5:31:3f:65:92:3c:70:70:1d:23:d7:df:23:b6:c9:
96:a8:75:6b:12:21:fb:94:10:90:12:3a:4a:fb:70:
25:b0:06:3f:c2:98:67:fc:a8:ca:cd:48:e2:40:ab:
9c:06:67:10:aa:fc:47:68:d6:75:b1:eb:4d:99:96:
fe:97:45:be:5f:13:c8:18:f7:30:11:d9:0b:f0:87:
ea:b5:11:35:ce:ed:a3:a2:23:74:37:cf:a6:a6:5a:
2a:69:e2:71:1c:56:a1:75:68:7f:c2:9c:9e:19:8a:
a7:c7:6d:68:31:16:60:01:9a:eb:06:2c:4b:2e:40:
7a:50:d1:90:e3:b0:d0:79:70:e2:29:f9:a3:43:ee:
54:35:6a:37:27:2e:c5:2f:c8:d5:a0:78:8e:16:75:
56:08:1a:f7:7c:62:01:fb:ce:08:5b:79:23:a8:30:
02:72:77:a2:26:38:8a:33:fe:d5:f7:08:21:3e:69:
b3:d5:bc:3f:c6:37:d1:59:ab:4d:51:65:9d:45:ab:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:AB:29:77:10:18:56:C5:39:8D:1F:AB:9B:36:7D:BD:76:87:25
X509v3 Authority Key Identifier:
keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a3:06:9b:43:98:d9:ed:6a:38:76:3d:14:6d:9e:1c:68:b3:
d4:0e:75:3b:d8:11:4b:e5:6e:c7:6b:a8:8f:d1:fb:f3:e9:21:
42:f9:4c:db:7c:c9:4a:4e:84:1c:59:43:b2:19:22:22:e3:f9:
ca:3e:73:11:fa:14:73:12:7e:95:6c:58:c9:0a:a4:39:04:ee:
54:19:7e:3f:e9:f7:45:c8:27:c6:38:08:b1:44:3a:53:63:c2:
48:0a:fa:3d:2c:e9:1b:41:ea:86:40:a7:02:0b:d3:9a:15:24:
82:a3:23:28:85:06:ed:8a:7f:af:56:c1:18:d5:9b:c4:74:18:
91:3c:d2:ea:d1:e1:67:ba:eb:1c:6f:c8:d2:50:d8:54:e2:32:
b9:bd:ce:ff:36:69:d8:ff:74:89:41:ce:00:fe:c0:76:80:f4:
7d:01:38:63:bf:e3:46:9b:11:05:81:65:68:40:de:89:ae:4c:
2a:05:f8:84:c9:4c:b8:a3:9c:eb:65:0e:ba:38:0c:8d:22:ce:
e5:8e:91:0b:82:ba:c6:4f:0b:30:fa:fe:d3:c6:94:d7:ed:d3:
1a:c1:bc:e8:55:7a:94:af:18:bf:38:cd:9c:49:7e:56:33:84:
d7:d9:6a:3e:15:e4:35:c7:34:1e:77:48:65:d9:3c:75:8a:7e:
be:e6:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:56:07 2026 by rpki-client