
Error: rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
File: 736CC7BD00E444B3C507A4A165D0774513CFB15B.mft (raw, json)
Hash identifier: nOo01er0x0Ka5TU7JjOJJcPen+T/6jaaBF+Dv7Lzu6E=
Subject key identifier: AD:DA:0E:2B:4C:4B:D0:BE:A3:20:68:51:48:8C:66:40:4C:A2:75:B5
Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
Certificate issuer: /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Certificate serial: 66276126FB8881AFEB438FC077C7D95D57277263
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
Manifest number: 04CE
Signing time: Tue 27 Oct 2026 15:23:29 +0000
Manifest this update: Tue 27 Oct 2026 15:18:29 +0000
Manifest next update: Wed 28 Oct 2026 18:25:29 +0000
Files and hashes: 1: 3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (hash: EKcgXFnu+IbEZT8PLAUccUxYsxBrLHmqx4FyOw8vJJ0=)
2: 736CC7BD00E444B3C507A4A165D0774513CFB15B.crl (hash: X+RntLP7wpA0h4Et7ttai90XUg3UvQqNorJGTRietks=)
3: 323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (hash: A+LodF7cStktK/ueF+NPXgQkkd337778Lh5spytQ/6c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl
rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 18:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:27:61:26:fb:88:81:af:eb:43:8f:c0:77:c7:d9:5d:57:27:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Validity
Not Before: Oct 27 15:18:29 2026 GMT
Not After : Oct 28 18:25:29 2026 GMT
Subject: CN=ADDA0E2B4C4BD0BEA3206851488C66404CA275B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:d9:f3:a5:03:12:65:c7:7a:c1:6c:69:7f:
b7:8c:45:a6:ae:53:f4:27:54:c6:4f:54:7e:ca:ba:
b6:5f:46:1f:d8:9e:ce:b0:54:59:86:0a:07:ff:12:
a1:10:cd:f1:f8:d6:16:a7:23:44:ec:04:6f:20:02:
be:79:24:53:03:eb:f1:cd:f4:92:78:c5:74:9f:c2:
af:4d:f6:52:20:48:7c:9a:97:23:b4:b8:00:4c:3c:
8b:25:fb:45:33:ba:ba:f3:88:da:2d:63:28:35:8b:
57:4b:b3:11:e3:91:31:df:b1:99:75:3a:35:a6:01:
be:f0:ff:ff:23:3f:6b:ad:93:12:cf:15:7c:86:91:
80:fb:e9:6f:5b:27:27:af:90:dd:cc:c4:0e:29:4b:
cf:03:00:d2:8f:b8:25:ba:3f:d4:2e:5e:c4:3b:7f:
8d:c4:a3:32:90:f8:ba:c3:46:c0:e0:c4:63:2a:76:
8a:40:b1:17:ff:a2:14:da:8b:ee:33:0d:34:f8:98:
87:4d:9a:cb:5b:8a:43:34:5f:63:30:3f:34:e0:47:
b4:28:3d:01:3e:7d:9a:08:6e:80:ca:46:01:8f:9f:
8f:09:50:f6:8c:c5:b7:80:b2:e0:b7:78:24:85:fb:
7b:db:6f:01:1a:af:6c:d8:e1:d7:ed:9d:a3:4c:aa:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:0E:2B:4C:4B:D0:BE:A3:20:68:51:48:8C:66:40:4C:A2:75:B5
X509v3 Authority Key Identifier:
keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:c3:ab:f4:7a:88:36:64:e4:b2:ad:08:c2:08:44:64:d4:
9a:95:c3:66:92:68:1f:5b:02:50:81:a9:bf:00:b4:55:dc:f4:
7e:7e:b8:6a:1f:e9:47:dc:d9:67:cd:6d:c3:11:82:00:4c:36:
72:af:0a:d2:b3:9d:35:84:be:81:f8:5b:41:92:ff:f6:0c:1e:
83:f6:66:a3:25:22:61:3f:d4:e9:1d:ed:97:89:9e:ae:4c:e8:
22:8c:d4:a6:4c:97:6a:6c:8a:9b:eb:d0:64:fa:f6:a6:42:fd:
3d:7b:94:30:57:90:aa:36:4d:74:4d:41:63:7b:9e:b4:05:8e:
e5:3e:85:fe:d3:e6:37:79:03:fe:4e:64:fe:97:07:59:28:74:
28:f8:5b:d0:42:55:6d:bd:7c:42:7c:e6:f5:a8:8f:39:1f:dd:
14:2e:2b:0d:fb:a4:1b:75:bc:cd:ba:08:f4:06:60:cb:b3:12:
33:22:6b:21:24:82:e7:e9:f0:39:ef:47:1a:3a:2c:dc:07:1f:
ce:04:f5:11:95:52:96:c5:7f:11:53:8d:e1:82:e6:60:b1:40:
d8:60:1e:1c:3b:3e:f0:f5:90:45:30:06:2e:e4:29:ee:92:41:
5e:23:01:a2:59:cf:60:ed:14:8c:90:da:8e:0e:13:20:80:e5:
1b:82:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:25:46 2026 by rpki-client