
Error: rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
File: E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft (raw, json)
Hash identifier: W7ux+UQx9e3J5OAP1nrOl6crpnsZuFvVBoKiL8Q4pzY=
Subject key identifier: 5A:EA:A6:67:2E:E7:DA:8B:9B:7F:6C:05:18:D8:37:5B:47:54:2F:1C
Authority key identifier: E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49
Certificate issuer: /CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
Certificate serial: 0B4F9D619364B1444EF7FD679A3CEA4F80A4FCCE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
Manifest number: 056A
Signing time: Fri 16 Oct 2026 16:50:00 +0000
Manifest this update: Fri 16 Oct 2026 16:45:00 +0000
Manifest next update: Sat 17 Oct 2026 16:50:00 +0000
Files and hashes: 1: E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl (hash: 2X+Jnri6llteeCfHx594Xb8jbeK+jrtYrd1J5HeLpzQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl
rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 16:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4f:9d:61:93:64:b1:44:4e:f7:fd:67:9a:3c:ea:4f:80:a4:fc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349
Validity
Not Before: Oct 16 16:45:00 2026 GMT
Not After : Oct 23 16:50:00 2026 GMT
Subject: CN=3082010A0282010100CC8D0D56F99EB9BF6E3CE93108F5644EC7D9A252119C6ADB54816B6ED315410F9D20B4D38F4E2E9168F68322706FC085B2EA02487E8C08C77515412FE800C28088F7C5401BE1F8E26D70C16E6B19CEE877BECE91D8BCFCC59B6D86200380451364D393112CB44542361446642E7FDD567BAE152B6D04D1207D17F20049BFC21B1DCAE8514F6682F428BFE16778344E8C897A618E59BFB324B958423EC66EAB19CD20DEDBD9B3E45741F62CD563C4EDB33F5B200E5EACFD565B447B1874A70BE5D54CAB53A74C86CC0CAC6700A161EA718A246B5353A50CECEC7579F8E743454AC1E4F72BFAB9B658C1F8AF4340D82E3D60CED7BF1C6A3EBA14F2D52AA84354190203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:0d:56:f9:9e:b9:bf:6e:3c:e9:31:08:f5:
64:4e:c7:d9:a2:52:11:9c:6a:db:54:81:6b:6e:d3:
15:41:0f:9d:20:b4:d3:8f:4e:2e:91:68:f6:83:22:
70:6f:c0:85:b2:ea:02:48:7e:8c:08:c7:75:15:41:
2f:e8:00:c2:80:88:f7:c5:40:1b:e1:f8:e2:6d:70:
c1:6e:6b:19:ce:e8:77:be:ce:91:d8:bc:fc:c5:9b:
6d:86:20:03:80:45:13:64:d3:93:11:2c:b4:45:42:
36:14:46:64:2e:7f:dd:56:7b:ae:15:2b:6d:04:d1:
20:7d:17:f2:00:49:bf:c2:1b:1d:ca:e8:51:4f:66:
82:f4:28:bf:e1:67:78:34:4e:8c:89:7a:61:8e:59:
bf:b3:24:b9:58:42:3e:c6:6e:ab:19:cd:20:de:db:
d9:b3:e4:57:41:f6:2c:d5:63:c4:ed:b3:3f:5b:20:
0e:5e:ac:fd:56:5b:44:7b:18:74:a7:0b:e5:d5:4c:
ab:53:a7:4c:86:cc:0c:ac:67:00:a1:61:ea:71:8a:
24:6b:53:53:a5:0c:ec:ec:75:79:f8:e7:43:45:4a:
c1:e4:f7:2b:fa:b9:b6:58:c1:f8:af:43:40:d8:2e:
3d:60:ce:d7:bf:1c:6a:3e:ba:14:f2:d5:2a:a8:43:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:A6:67:2E:E7:DA:8B:9B:7F:6C:05:18:D8:37:5B:47:54:2F:1C
X509v3 Authority Key Identifier:
keyid:E9:D8:2D:4D:B7:C3:B1:3D:2D:B2:96:D7:6A:B4:6A:66:AB:53:D3:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/1/E9D82D4DB7C3B13D2DB296D76AB46A66AB53D349.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:a4:2f:a3:3e:7b:14:59:13:c2:75:7d:10:ba:bb:73:d3:
07:ef:bb:f7:74:ca:b4:08:fb:6e:44:64:1e:ae:44:e2:c0:93:
ae:48:59:d3:ba:59:a3:94:5b:7d:09:4a:1c:c1:c1:ba:2a:68:
7c:3b:25:09:0b:ea:32:4e:f6:7a:7d:81:87:89:a4:ae:87:a6:
8a:ea:69:9a:59:84:aa:fc:5a:d8:8c:c9:92:e8:f1:2a:53:62:
86:0f:99:db:b3:cc:16:2a:86:d7:2a:9d:8d:3a:97:63:b2:0b:
79:29:3e:76:c8:65:ab:d6:cb:c3:30:d1:51:f9:17:11:5f:30:
1e:70:7a:29:f5:6c:7f:e2:5b:3d:d9:94:97:bb:30:fd:5d:69:
87:66:c1:3f:8f:6f:0a:92:29:2f:f1:0c:63:73:f6:f1:0a:cf:
c0:9c:70:ba:8a:77:57:85:1e:64:43:ef:f7:c0:58:41:8d:3b:
13:f5:c7:ae:3a:3a:4c:04:84:ba:d7:72:40:82:84:ab:ac:f2:
5e:17:a7:0f:f2:43:90:3e:5d:a2:1e:1f:58:f9:e4:94:36:ab:
d3:20:8f:76:9f:ec:de:8b:e9:e6:05:de:ff:59:32:7f:24:b0:
d2:13:d2:1d:b2:8b:3d:58:7b:c3:3f:34:21:9a:f1:94:16:73:
df:bb:a3:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:14:52 2026 by rpki-client