
Error: rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
File: FF2D630E978417F06D6A73D00219A91B07536236.mft (raw, json)
Hash identifier: hjc+cQGLKg1Mr0yQKTR5C/Kax2kQCRmqDU1p1VK0OYg=
Subject key identifier: 21:A6:17:CD:70:93:58:CF:8A:AB:4E:AE:9A:C5:1B:A4:D9:DB:F7:AC
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Certificate issuer: /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial: 3CDC8BDC9205F821D8F02C4B3AE9D6583CF34486
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
Manifest number: 04CC
Signing time: Sat 17 Oct 2026 01:10:00 +0000
Manifest this update: Sat 17 Oct 2026 01:05:00 +0000
Manifest next update: Sun 18 Oct 2026 01:14:00 +0000
Files and hashes: 1: FF2D630E978417F06D6A73D00219A91B07536236.crl (hash: Se2wfHXPZiLTNqwtJfrQjL9eCPNOMGTkGtstke+2CsA=)
2: 323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (hash: 7bKq2ImSu9HDgOmEe0l4CF6dj5HQWrW83cLCgx9PXcA=)
3: 34352e3138362e3139362e302f32322d3234203d3e20323639343335.roa (hash: tlMkqHSQTNEifoLRoyyP4xM6jhVB7QcDI9pX1vY4cDY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 01:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:dc:8b:dc:92:05:f8:21:d8:f0:2c:4b:3a:e9:d6:58:3c:f3:44:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
Validity
Not Before: Oct 17 01:05:00 2026 GMT
Not After : Oct 18 01:14:00 2026 GMT
Subject: CN=21A617CD709358CF8AAB4EAE9AC51BA4D9DBF7AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:2c:4f:b2:a4:45:4a:1a:0c:e0:83:18:6c:
e2:60:7d:52:b3:f2:55:bb:1d:2a:6d:17:26:22:2e:
f1:e9:55:14:69:33:17:ba:7c:a0:06:7c:58:14:1b:
e7:58:8e:35:8a:fd:d9:d8:d8:30:11:cc:04:16:a7:
76:56:5d:bf:e6:77:f5:03:16:bd:6e:bf:55:c5:8c:
57:19:fe:df:da:5a:c5:84:a2:03:f8:e5:4c:64:7d:
59:c5:a0:81:d7:be:c1:19:81:7f:e5:98:96:8d:06:
2d:12:a0:ab:fe:9e:6b:d6:91:2e:a1:e8:af:7e:3e:
8d:5b:6d:84:5f:ea:e4:f3:31:00:1f:1d:25:47:98:
ac:38:1c:fe:a4:d5:79:5c:23:1c:49:53:e0:e2:e4:
e6:12:06:f0:b2:dc:53:1e:1b:33:1b:b9:d5:14:9e:
7a:87:de:f4:0c:69:67:bb:63:dc:c1:bf:b3:46:62:
df:77:74:54:6a:1a:e4:44:db:62:9c:67:ce:e1:d5:
c5:02:61:25:f3:72:aa:3f:ae:cf:a4:f9:9d:c6:89:
1a:66:95:b7:48:c3:80:be:fe:06:ac:05:b3:ea:1f:
3e:c3:9a:d4:a0:b5:b7:bf:57:c4:ec:66:af:3a:ac:
73:ec:e5:9e:fc:8b:35:19:37:f6:30:e8:b9:5e:a6:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:17:CD:70:93:58:CF:8A:AB:4E:AE:9A:C5:1B:A4:D9:DB:F7:AC
X509v3 Authority Key Identifier:
keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:6f:97:d3:7e:49:48:14:b3:48:fd:54:6e:ca:3f:54:c1:
0b:49:d7:5e:a1:93:e6:ac:34:cb:a1:70:85:61:38:79:53:59:
00:c4:60:29:3e:19:1b:20:43:b4:71:bc:90:28:1c:9a:02:45:
f0:42:92:8d:98:30:5b:1e:83:63:03:a4:2a:9e:85:20:a2:48:
e4:72:c0:5b:e0:4c:1d:cc:9a:fe:ed:65:ee:d9:60:49:cc:97:
a1:0f:b2:5c:6d:2f:5a:f8:83:9b:b1:b9:87:ce:af:4f:aa:67:
4b:2e:42:4a:9f:06:c7:63:a3:89:2e:98:35:ae:e8:be:9b:26:
cc:a7:8f:a2:0d:d8:3c:60:8e:56:38:96:1e:38:c9:d5:d3:91:
df:75:d5:08:11:20:0f:b4:d1:69:f6:5a:ce:8c:29:f2:2f:18:
fe:1f:a1:56:ae:db:eb:e8:88:17:2a:39:00:84:9d:d5:16:dd:
13:1b:ec:5b:2e:a5:10:5b:a7:51:ee:12:75:8b:7e:10:b4:47:
a1:80:89:0d:a3:39:e3:61:06:4b:af:af:80:a0:db:0f:b2:18:
9b:72:d4:b4:8a:6a:71:99:08:be:b1:55:23:82:9e:be:9c:d3:
7c:80:93:a0:51:97:6c:42:db:06:78:a5:fd:b0:b7:b7:37:2f:
ab:ef:b6:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPNyL3JIF+CHY8CxLOunWWDzzRIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYyRDYzMEU5Nzg0MTdGMDZENkE3M0QwMDIxOUE5MUIw
NzUzNjIzNjAeFw0yNjEwMTcwMTA1MDBaFw0yNjEwMTgwMTE0MDBaMDMxMTAvBgNV
BAMTKDIxQTYxN0NENzA5MzU4Q0Y4QUFCNEVBRTlBQzUxQkE0RDlEQkY3QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtCxPsqRFShoM4IMYbOJgfVKz
8lW7HSptFyYiLvHpVRRpMxe6fKAGfFgUG+dYjjWK/dnY2DARzAQWp3ZWXb/md/UD
Fr1uv1XFjFcZ/t/aWsWEogP45UxkfVnFoIHXvsEZgX/lmJaNBi0SoKv+nmvWkS6h
6K9+Po1bbYRf6uTzMQAfHSVHmKw4HP6k1XlcIxxJU+Di5OYSBvCy3FMeGzMbudUU
nnqH3vQMaWe7Y9zBv7NGYt93dFRqGuRE22KcZ87h1cUCYSXzcqo/rs+k+Z3GiRpm
lbdIw4C+/gasBbPqHz7DmtSgtbe/V8TsZq86rHPs5Z78izUZN/Yw6LleptoZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIaYXzXCTWM+Kq06umsUbpNnb96wwHwYDVR0j
BBgwFoAU/y1jDpeEF/BtanPQAhmpGwdTYjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVnYkhtTHFUVTZCb2JWcWl3alZVcTc1MnlWMjVCYm9MaEtpN3ZFWUFQ
cWQvMS9GRjJENjMwRTk3ODQxN0YwNkQ2QTczRDAwMjE5QTkxQjA3NTM2MjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMkQ2MzBFOTc4NDE3RjA2
RDZBNzNEMDAyMTlBOTFCMDc1MzYyMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzVnYkhtTHFUVTZCb2JWcWl3alZVcTc1MnlWMjVCYm9MaEtpN3ZFWUFQcWQvMS9G
RjJENjMwRTk3ODQxN0YwNkQ2QTczRDAwMjE5QTkxQjA3NTM2MjM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA4xvl9N+SUgUs0j9VG7KP1TBC0nXXqGT5qw0y6FwhWE4eVNZAMRgKT4ZGyBD
tHG8kCgcmgJF8EKSjZgwWx6DYwOkKp6FIKJI5HLAW+BMHcya/u1l7tlgScyXoQ+y
XG0vWviDm7G5h86vT6pnSy5CSp8Gx2OjiS6YNa7ovpsmzKePog3YPGCOVjiWHjjJ
1dOR33XVCBEgD7TRafZazowp8i8Y/h+hVq7b6+iIFyo5AISd1RbdExvsWy6lEFun
Ue4SdYt+ELRHoYCJDaM542EGS6+vgKDbD7IYm3LUtIpqcZkIvrFVI4KevpzTfICT
oFGXbELbBnil/bC3tzcvq++2Xg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:40:55 2026 by rpki-client