
Error: rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier: qYKCF8FKSYn7pl38jm2Or5vqpWToDoOkxUHGXWztF3k=
Subject key identifier: 80:A6:14:58:36:5D:13:2A:C7:AB:38:27:B0:0C:12:56:E0:BB:CD:12
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer: /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial: 72D7CDA5A8AF92EDBA83EC47BD5412C7E809ADAA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number: 04CD
Signing time: Tue 13 Oct 2026 16:14:56 +0000
Manifest this update: Tue 13 Oct 2026 16:09:56 +0000
Manifest next update: Wed 14 Oct 2026 19:15:56 +0000
Files and hashes: 1: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: 6cigMOSfoqE6zvwmb3uMyGKEPSH30r6IbqvU3uHv77s=)
2: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: b/jxd0Ies4lj+Bf7n+iSI15tUeChU2EBazK87gFFNJw=)
3: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: 76Tk0YZjxKaevqRrM23rFPHeaPNNU5pyZW8Hg7zBjdY=)
4: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: ljf3kOKKs3HOJctB53yQDyI5LaBzKELDW+vqP0oDMdM=)
5: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: CZVpE3RS6EdJBL+s1oh+60RO519fUscnAr9C3EvwsPI=)
6: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: rmlEe09mFumzi++BacY6CaQ0WYwjZ9dIki0JAAJknNY=)
7: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: DotHAXvQTJoa5QK/qy1kOU/pMjzxpOXZwIRnyvXUprk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 19:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d7:cd:a5:a8:af:92:ed:ba:83:ec:47:bd:54:12:c7:e8:09:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Validity
Not Before: Oct 13 16:09:56 2026 GMT
Not After : Oct 14 19:15:56 2026 GMT
Subject: CN=80A61458365D132AC7AB3827B00C1256E0BBCD12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:32:fd:f3:05:ad:d0:ed:8a:b1:6b:8f:0a:
4e:de:2c:20:c7:f8:03:a3:3e:c7:bb:d8:24:68:53:
18:07:3d:8b:5e:ad:ae:fe:2c:9d:1a:85:5c:40:1e:
8f:01:db:ac:d3:01:56:14:4f:de:f5:4c:b1:36:a3:
24:c1:65:48:cb:11:46:90:54:82:ed:74:90:40:44:
49:65:17:58:77:7b:fc:bf:b6:25:f9:ee:bf:14:3e:
2a:d1:04:77:98:53:e0:81:dc:b8:d3:69:33:16:57:
46:ab:21:2a:b1:60:a7:59:81:d1:f4:09:89:8e:0a:
fe:9c:67:62:93:3f:e1:cb:48:ed:b2:6d:bd:06:7a:
93:d8:44:6d:88:ca:b4:22:6c:4c:4d:49:13:91:eb:
cc:e8:76:bb:b6:64:d7:de:b7:6a:7e:d7:58:cb:c5:
bd:9e:96:8e:bd:7c:69:27:48:ef:a7:4c:60:02:ea:
f1:eb:2c:1c:a2:eb:4c:c7:d7:0e:2c:fe:99:75:a5:
f5:5e:cf:15:8c:c8:26:71:d4:28:c9:fe:53:41:0d:
f8:b2:de:05:22:bb:66:ef:83:08:74:6c:e7:b8:e6:
8d:ad:97:c3:00:ec:6a:dd:10:5f:d9:9e:8a:e0:25:
22:37:fe:1e:59:8d:93:dc:94:cb:a9:5b:f9:81:bc:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:14:58:36:5D:13:2A:C7:AB:38:27:B0:0C:12:56:E0:BB:CD:12
X509v3 Authority Key Identifier:
keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:fb:a1:31:02:c7:aa:d2:df:d9:6c:bc:b2:56:e8:5d:3d:
79:52:94:6d:51:a7:40:cd:27:13:fd:e0:b0:9d:7d:cd:0e:2a:
3e:9e:16:dc:bd:29:a0:dc:c9:3d:34:6d:98:5f:ac:ac:23:f7:
51:b1:4a:b5:c1:f5:ae:e8:23:e4:bd:58:d3:b1:91:fc:70:82:
ce:9d:ba:db:44:da:e9:b2:7f:9a:1d:08:40:1f:28:e4:92:17:
08:0e:46:3a:aa:eb:4b:3b:ac:8b:5d:31:a3:8e:9c:49:b3:6d:
6c:2f:55:43:3e:d7:48:8f:45:c0:b6:6e:ea:6a:e6:ae:a3:3b:
c8:ae:7b:82:5a:f0:5d:0b:50:d1:31:4c:25:1e:a8:8f:30:78:
f5:ab:bd:8b:5b:09:b1:0b:68:98:75:c1:05:aa:d9:ea:8c:53:
c6:0c:f9:4b:03:37:f4:d6:24:d4:e5:22:30:82:e2:f4:d9:11:
c3:85:bc:e0:85:d9:77:d4:f0:c9:34:a2:2c:cc:2b:7c:c4:9c:
e2:a0:dc:90:33:1d:9e:d6:b3:39:dd:e9:02:0e:3a:eb:a6:a6:
3e:13:41:c7:ab:a4:41:29:80:7e:8c:f2:4d:d8:7d:75:b2:cc:
85:0a:9f:56:96:f4:3d:8c:fe:ad:c0:49:cb:81:32:94:c1:02:
18:f4:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:44:57 2026 by rpki-client