
Error: rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
File: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft (raw, json)
Hash identifier: I/+xHgZR824e6cBopseZ+4JqQ5UvfJ89gFJvKmxajXE=
Subject key identifier: 91:3B:61:0A:70:8A:29:DB:6F:27:4A:57:1D:9C:2D:67:07:2A:2E:7F
Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
Certificate issuer: /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Certificate serial: 01A7061E07E9D7DBC419CDC070B6A172B8CC8E05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
Manifest number: 01E1
Signing time: Sat 31 Oct 2026 21:24:32 +0000
Manifest this update: Sat 31 Oct 2026 21:19:32 +0000
Manifest next update: Sun 01 Nov 2026 22:14:32 +0000
Files and hashes: 1: 01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl (hash: aNd/tQi1XdgBWUj1zF5DZO66mlyR860jdSJQvYNdfv4=)
2: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (hash: bK7PGcHgX1HaW/F1Gj0KQEL/uAEuTpfC9DPIZsI1xVE=)
3: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (hash: ikLxmZRq9GA7l9gUwQ8KsYLPiZHYK560PCzWPT+AsQc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 22:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a7:06:1e:07:e9:d7:db:c4:19:cd:c0:70:b6:a1:72:b8:cc:8e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4
Validity
Not Before: Oct 31 21:19:32 2026 GMT
Not After : Nov 1 22:14:32 2026 GMT
Subject: CN=913B610A708A29DB6F274A571D9C2D67072A2E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:3e:8e:fd:98:7f:a0:44:c4:5d:88:ef:f4:
95:14:6d:b6:b2:9a:99:0e:fc:b9:8e:39:69:92:cd:
92:de:fb:2f:f0:30:df:7a:14:c4:7d:14:82:37:ec:
6b:c6:ea:e5:16:4e:1a:c8:8c:13:77:cc:4c:cf:aa:
28:7b:b1:03:a1:3a:e4:a7:08:57:2e:7f:96:86:c7:
b3:31:87:20:cf:42:54:f8:02:79:86:ba:22:fc:d8:
1e:28:b2:72:29:01:e5:81:ca:be:1a:ee:7f:0f:47:
ba:0d:e4:ac:02:29:b5:c7:03:52:49:21:92:d1:85:
70:40:92:64:ef:aa:23:1b:62:41:12:23:1f:1e:95:
36:1c:4e:29:0b:72:db:21:3a:c5:34:d2:6f:85:0d:
e5:c4:bb:24:c7:89:cd:82:7c:5b:ef:67:5e:10:61:
1b:a7:28:f8:27:38:99:01:fe:24:b5:34:4d:4b:ff:
64:72:a8:e2:95:22:db:25:e6:85:01:43:94:24:dd:
2c:9b:85:fd:04:f2:31:a0:16:3e:fa:fe:a4:42:29:
5f:36:83:ca:28:55:74:ac:4a:43:d0:13:46:95:c9:
a9:43:df:4b:8a:80:88:16:16:f3:f1:f3:66:11:96:
8e:91:01:04:ae:06:48:aa:a1:71:ea:d5:a7:53:29:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3B:61:0A:70:8A:29:DB:6F:27:4A:57:1D:9C:2D:67:07:2A:2E:7F
X509v3 Authority Key Identifier:
keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:3e:4b:e7:29:d4:f5:47:2f:f5:99:76:5b:8f:b6:4a:a0:
7f:6b:45:d9:24:9f:00:e4:56:fc:f4:24:80:14:1c:31:2c:54:
fd:a8:04:98:e4:b6:d6:9f:18:43:59:80:15:30:f2:56:3f:fe:
24:98:68:92:3d:be:e1:f1:ed:6a:f1:9a:ae:06:2e:de:3a:cb:
72:38:9c:f4:e5:3b:40:a5:a8:45:b2:c8:ce:7e:d0:dd:f5:bd:
bc:9c:3a:d5:da:ab:11:fd:ad:a3:bc:31:fb:8f:94:ff:85:62:
b9:fc:fa:92:37:a9:bb:bf:9d:76:64:4f:13:49:fa:a6:98:e0:
8e:51:7b:1c:05:7a:8d:4e:b8:d9:46:99:47:44:2a:d0:67:96:
ed:3e:ad:f0:79:5d:f8:16:9c:b9:07:dc:87:94:cb:04:79:ea:
e0:46:16:af:89:1d:d3:22:c5:6d:2c:32:89:0e:10:0e:59:44:
d3:52:f3:06:b1:9e:be:ce:ff:9e:f1:98:8d:2d:54:98:9d:53:
35:aa:86:b8:e6:45:6d:dc:39:9b:0a:50:cc:37:b3:0c:ed:09:
dd:37:03:3c:31:77:a1:33:d7:e4:e3:50:d9:ee:76:89:1b:43:
81:b9:5d:6c:4d:19:b1:ee:5c:bf:8c:b9:39:cf:43:49:2c:37:
d5:34:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 06:06:15 2026 by rpki-client