
Error: rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json)
Hash identifier: ZGePELcHWi1BykU4bYOfmCMCfNPMZh91Yf16V+LliCY=
Subject key identifier: A3:EF:BF:3C:95:DD:8F:40:07:21:AB:AA:D3:3C:85:0D:84:8A:EE:86
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial: 5EDA7662E7CAE863EF25535E58B5552A18EA290A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
Manifest number: 0418
Signing time: Wed 28 Oct 2026 16:25:30 +0000
Manifest this update: Wed 28 Oct 2026 16:20:30 +0000
Manifest next update: Thu 29 Oct 2026 18:30:30 +0000
Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=)
2: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: eeZtQEo4ymraXQN/W2sGBgpETBd0LIwdjL/qpJtwghk=)
3: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: Mw9wrwlp9rBBJe6ke/T542y9Rqq2VB03O7vKyLplFQ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:da:76:62:e7:ca:e8:63:ef:25:53:5e:58:b5:55:2a:18:ea:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Validity
Not Before: Oct 28 16:20:30 2026 GMT
Not After : Oct 29 18:30:30 2026 GMT
Subject: CN=A3EFBF3C95DD8F400721ABAAD33C850D848AEE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:c7:94:27:c4:eb:97:44:e3:6e:c7:60:a3:
ee:61:77:ac:38:1e:bc:32:fd:27:8b:b4:d9:60:69:
61:92:c9:21:7c:c2:d0:ed:b9:56:c9:79:4b:aa:de:
45:30:89:b5:44:c4:ef:34:67:b6:07:15:53:20:21:
d6:a8:70:22:b4:81:60:3e:55:da:5e:e7:cc:5b:a7:
93:36:20:00:13:05:99:d2:cc:3d:39:30:dc:14:fc:
a9:c7:8c:57:1b:8c:a2:49:84:29:98:99:65:e0:c1:
95:b3:90:25:19:3d:16:f5:a4:2e:af:7b:df:1e:5c:
c8:44:4c:e9:20:ed:87:af:e4:7e:0f:a3:6a:e6:5b:
b8:ee:43:f4:e2:3b:0a:00:9e:59:21:e0:c8:73:30:
c9:1a:37:8d:cc:c5:29:30:2d:1b:9e:db:ab:61:c0:
e2:64:58:f6:66:9c:f6:c5:e2:5d:a7:1c:31:e6:05:
3c:78:dc:0b:0e:59:0c:29:b4:65:71:e8:4d:6f:52:
8a:7c:e3:5b:4c:f8:55:d1:43:38:f9:26:be:d9:d8:
4b:ec:43:3e:f0:82:7b:1c:3b:77:fc:af:24:30:04:
81:81:97:fc:10:62:93:a5:ba:b1:f0:c8:e3:93:39:
2b:03:fe:d9:de:05:33:c5:48:7f:2c:0e:54:da:27:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:BF:3C:95:DD:8F:40:07:21:AB:AA:D3:3C:85:0D:84:8A:EE:86
X509v3 Authority Key Identifier:
keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:91:af:f1:b3:98:f1:3a:79:5b:a1:13:31:97:7e:92:21:
a8:34:e1:6e:b2:2e:f2:ac:8a:10:e8:db:d8:fe:11:86:64:4e:
bd:45:62:91:59:e6:0c:7c:7b:fb:93:60:07:e0:6b:d2:3e:a1:
35:5e:25:43:ee:02:57:8f:b8:e1:32:70:06:16:f3:41:c9:5e:
be:3c:c6:b7:ab:13:b8:a8:b2:a9:68:6b:33:c6:7e:e8:64:8c:
3a:04:c8:c4:8f:93:9a:b2:18:b1:6f:50:22:9f:b9:43:bb:cd:
5c:c1:4a:68:f7:c1:d8:5f:b9:44:23:4b:c9:3d:94:0f:aa:3b:
5e:45:89:e7:1f:55:61:b1:d1:60:4c:6b:65:8a:18:c1:36:e8:
42:0e:81:e3:e5:ed:fb:8d:9a:69:06:d6:d3:c1:e3:3c:d1:91:
b4:00:a7:13:ef:e7:6e:57:19:04:03:ae:48:6f:76:46:47:5b:
93:32:f6:86:c1:46:45:50:ed:27:81:55:5c:2d:bc:e7:8f:94:
1d:f2:33:f1:6f:bc:08:6c:e1:1b:e5:bd:65:c5:db:64:5f:b4:
7c:f4:fe:6c:29:2a:7f:c6:73:8f:a8:e6:55:a8:74:6d:89:e6:
cb:83:11:b8:96:60:ec:6e:71:76:7e:87:06:c1:32:ac:c8:35:
9c:d8:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:37:22 2026 by rpki-client