
Error: rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
File: B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft (raw, json)
Hash identifier: 798yP76Ey+DxRHaYHi7PmUFM6x6OsKXhXuOPLE1xtSc=
Subject key identifier: AA:F0:AB:7C:E7:E8:6F:EA:75:75:A9:0E:29:52:C7:7C:7D:2F:85:F7
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Certificate issuer: /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial: 5C3A2F578ADDE60BC040C371DDF1D9123A022A89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
Manifest number: 0587
Signing time: Sat 31 Oct 2026 12:20:00 +0000
Manifest this update: Sat 31 Oct 2026 12:15:00 +0000
Manifest next update: Sun 01 Nov 2026 12:20:00 +0000
Files and hashes: 1: B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl (hash: g/gO5JZiST6HUG4RCL2aawyS9cBSJ1kCBVyO+kdY5H4=)
2: 3133312e302e342e302f32322d3234203d3e203631383535.roa (hash: Y5Z0CQaEr/dwqDkaTrRESskpnXsYVXiY/jjRgICP5UQ=)
3: 323830343a316135383a3a2f33322d3335203d3e203631383535.roa (hash: N1TSHRs4e3yyYcCA+FN3Ea1ZRsQUiFJ3yNsDsim5UDI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 12:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3a:2f:57:8a:dd:e6:0b:c0:40:c3:71:dd:f1:d9:12:3a:02:2a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Validity
Not Before: Oct 31 12:15:00 2026 GMT
Not After : Nov 1 12:20:00 2026 GMT
Subject: CN=3082010A0282010100DFBDCF2E2E72036CC7FEA356EF288B9EF5E348B1F421A3FEE6C700B5DB5B0173EDD5FD34DB1110F7CC2B71D4E40782172BCDF1714C9D89EEEDEA7AF60B8EBB05C06D8C688A5C58884B18E2FCF766B7587F3515D13DDFD81DCA13CA64BF1936CBC023076C6BB12513CA792E9B7D73AEDDB9F1A01382E383FAAED2E5161AE0784344344D929B89A78705CA1EE4C57DE34E74744B0185FA1A4AC0938B60A9E7D73AF30AEFCC4EC055AAEB7FC9B42EA181EAC3A744432D0C57F2AC278D8D1E357DAFC6666BFE4D67B5DE5820EFB203B034D1179C0B2066C91A3EDCF3AE8C758293DC74B85F62E0AE79E71EEAE83252F9118CADF90553A78F9AD02D5AC2A46D0A86990203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:cf:2e:2e:72:03:6c:c7:fe:a3:56:ef:28:
8b:9e:f5:e3:48:b1:f4:21:a3:fe:e6:c7:00:b5:db:
5b:01:73:ed:d5:fd:34:db:11:10:f7:cc:2b:71:d4:
e4:07:82:17:2b:cd:f1:71:4c:9d:89:ee:ed:ea:7a:
f6:0b:8e:bb:05:c0:6d:8c:68:8a:5c:58:88:4b:18:
e2:fc:f7:66:b7:58:7f:35:15:d1:3d:df:d8:1d:ca:
13:ca:64:bf:19:36:cb:c0:23:07:6c:6b:b1:25:13:
ca:79:2e:9b:7d:73:ae:dd:b9:f1:a0:13:82:e3:83:
fa:ae:d2:e5:16:1a:e0:78:43:44:34:4d:92:9b:89:
a7:87:05:ca:1e:e4:c5:7d:e3:4e:74:74:4b:01:85:
fa:1a:4a:c0:93:8b:60:a9:e7:d7:3a:f3:0a:ef:cc:
4e:c0:55:aa:eb:7f:c9:b4:2e:a1:81:ea:c3:a7:44:
43:2d:0c:57:f2:ac:27:8d:8d:1e:35:7d:af:c6:66:
6b:fe:4d:67:b5:de:58:20:ef:b2:03:b0:34:d1:17:
9c:0b:20:66:c9:1a:3e:dc:f3:ae:8c:75:82:93:dc:
74:b8:5f:62:e0:ae:79:e7:1e:ea:e8:32:52:f9:11:
8c:ad:f9:05:53:a7:8f:9a:d0:2d:5a:c2:a4:6d:0a:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:AB:7C:E7:E8:6F:EA:75:75:A9:0E:29:52:C7:7C:7D:2F:85:F7
X509v3 Authority Key Identifier:
keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:3b:78:71:39:03:69:28:f6:6f:b4:dc:51:fe:a3:b7:74:
12:77:c2:0a:89:7f:18:b4:9e:27:87:ce:d2:94:59:dd:56:4b:
5d:0b:1a:a9:a8:a4:65:86:1d:ae:a1:c9:bc:af:d5:7d:af:cf:
7f:45:f7:bb:fc:53:b2:64:1c:e6:66:73:8d:64:50:13:cf:2a:
df:92:a0:b3:76:82:04:64:d6:7d:1d:42:1e:b7:ac:80:df:d5:
04:47:ed:b3:52:eb:76:99:d4:cd:30:0c:64:54:1c:3c:b4:5b:
9a:c5:6b:f0:ee:b1:7b:3b:81:97:fc:f5:12:fe:e4:72:5a:b3:
c4:74:8f:68:97:07:99:4c:8f:9f:00:6d:23:56:1d:b9:15:24:
9c:98:b4:a8:be:c5:94:2e:0c:64:ff:fa:04:73:b0:49:2a:eb:
b1:c8:cd:46:1c:0b:e2:3b:7c:fe:e8:a5:ee:4e:2c:65:c2:d8:
4c:ad:81:62:9c:f4:a8:66:be:54:ef:41:ca:6c:12:d0:da:a0:
4d:d1:33:23:8d:13:7e:08:e2:31:11:82:de:c3:4d:f1:62:62:
6e:6d:d5:6e:25:28:9b:96:96:be:79:c8:53:bb:df:8f:26:e9:
d6:e0:20:b7:62:f1:33:d9:ac:56:24:4b:36:3f:67:39:6d:d5:
8e:09:3e:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 20:57:08 2026 by rpki-client