
Error: rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft
File: EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft (raw, json)
Hash identifier: 6+QPOSgWxuAN6za3uMFKzgrqraSvia7728HLEb643x4=
Subject key identifier: E3:2D:8F:01:F0:09:E0:C3:C4:00:D0:34:61:7D:71:63:86:48:CA:E9
Authority key identifier: EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D
Certificate issuer: /CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D
Certificate serial: 2E054E1EE378E49CD4017AE5FE93127D455E24F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft
Manifest number: 04C9
Signing time: Tue 13 Oct 2026 09:32:01 +0000
Manifest this update: Tue 13 Oct 2026 09:27:01 +0000
Manifest next update: Wed 14 Oct 2026 11:03:01 +0000
Files and hashes: 1: 34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (hash: 32TC0IBPeKwM09lSRnWOs0MGB5+rMEPLVkr2G7IlExI=)
2: EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl (hash: zhu0mZmSp6t25FzqGqi/MI7RmkP5TxBb1QmPpgEOKKs=)
3: 323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (hash: NQPIOo72rl7M5qYWBOBGnvKE3OUu/ucAMkJnnEzfh2s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl
rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 11:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:05:4e:1e:e3:78:e4:9c:d4:01:7a:e5:fe:93:12:7d:45:5e:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D
Validity
Not Before: Oct 13 09:27:01 2026 GMT
Not After : Oct 14 11:03:01 2026 GMT
Subject: CN=E32D8F01F009E0C3C400D034617D71638648CAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ab:c1:ca:fe:76:3a:22:7d:96:21:ac:31:
1b:39:a1:22:03:f6:50:e7:7c:73:03:8e:31:82:c8:
7f:36:c1:59:c6:12:ac:ce:1c:ff:c9:ee:94:ef:da:
76:0a:9d:29:10:f9:c3:ef:f3:16:e1:a1:36:c4:28:
ef:12:f8:c3:54:2f:7c:fa:ff:30:69:ac:89:27:6b:
9b:0f:7e:1a:58:58:bb:88:a5:2b:cb:a1:9a:28:de:
71:d3:36:e2:b4:b1:fb:54:92:7d:cb:44:26:dc:fb:
3b:f2:94:35:2d:f2:9b:19:dc:45:05:cb:31:64:d1:
96:cf:07:f3:50:1b:12:3c:2f:6f:8b:7d:6f:89:58:
10:10:f5:e7:d5:a1:62:76:26:c3:03:55:ae:7e:fe:
ae:74:72:60:a8:3f:b1:aa:5c:6e:b9:c7:c5:55:b6:
74:92:77:1a:6b:48:81:21:cd:e4:7f:f8:b9:aa:4f:
87:46:49:47:2e:09:5e:cd:ab:02:61:f6:ae:96:bc:
b7:76:89:ab:f4:b5:ef:a2:cb:81:6a:12:cd:91:80:
87:e6:22:c4:5a:3c:0e:72:35:77:ad:4f:3b:8f:74:
5d:97:0b:5b:8a:8c:df:bf:66:5a:ce:d6:86:66:24:
24:b4:71:3d:55:44:49:79:23:07:27:7e:b9:09:01:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:8F:01:F0:09:E0:C3:C4:00:D0:34:61:7D:71:63:86:48:CA:E9
X509v3 Authority Key Identifier:
keyid:EE:50:DC:3A:66:EC:9A:8B:5A:49:EF:AD:3F:0C:FF:4E:B4:19:E0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/1/EE50DC3A66EC9A8B5A49EFAD3F0CFF4EB419E07D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:12:72:cf:95:c0:f4:a7:b0:27:55:e9:e9:95:1b:68:e7:
b0:3e:d3:43:11:a3:46:55:a1:e1:6d:15:49:c8:f6:de:5e:98:
8a:04:d6:5b:ca:43:ad:e0:44:b2:e0:42:59:30:88:a9:74:4b:
1d:47:df:fd:be:69:da:e8:c6:33:1a:e1:af:6e:47:38:38:fe:
7c:06:df:2d:11:ff:3b:f7:13:6b:5d:c5:70:77:a0:2c:c1:13:
33:e5:61:09:12:11:1e:58:86:eb:ea:a6:00:22:71:93:e8:f9:
bb:c7:c1:d2:d7:b1:1b:64:97:42:38:15:d9:8c:d3:d7:2d:bc:
35:ea:6f:25:35:56:98:60:6d:68:f0:f3:b5:60:8d:0b:3a:ab:
ec:d1:49:eb:dd:49:2a:7d:4b:eb:7c:45:b2:0e:96:bf:8a:49:
e9:61:38:18:b2:b4:94:f9:46:02:f5:f4:d1:1c:e5:c6:4e:a8:
6b:07:a2:8c:84:c5:5a:29:e5:26:65:1f:11:3a:b2:b1:28:06:
78:30:fc:1a:99:24:d4:0b:54:f4:a5:1a:38:0c:ad:68:d3:bc:
dc:da:f3:73:13:74:aa:c5:81:e0:56:bd:ac:fc:63:0c:e3:92:
63:fd:27:25:1f:84:83:5d:f7:5e:c7:b4:88:02:63:42:db:bc:
c5:22:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:58:03 2026 by rpki-client