
Error: rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
File: 14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft (raw, json)
Hash identifier: 6Xmkrsx1ZLPCYhNbIcz3+sKdy6OcPk541AfLAwVZiXY=
Subject key identifier: 2A:38:20:E5:A0:82:60:21:9F:28:3D:90:1E:BA:33:6B:07:C4:F1:A9
Authority key identifier: 14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
Certificate issuer: /CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Certificate serial: 6360609D4D874E3A9B9A74A167BB827E9BB3DCE0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
Manifest number: 010A
Signing time: Sat 10 Oct 2026 23:01:41 +0000
Manifest this update: Sat 10 Oct 2026 22:56:41 +0000
Manifest next update: Sun 11 Oct 2026 23:41:41 +0000
Files and hashes: 1: 14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl (hash: CGhHqT4dQMAPv6G4bcGy8vzE17UVrjdhcemSxNvFGJc=)
2: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: nayI7J1KRks0fHXTEl8pAt5h3J97gzKS2iQ10pibVoI=)
3: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (hash: uG5zjZPAri/Oy9usSAyo4ZR1cw3N7AbcfG5Ap6OPhgQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 23:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:60:60:9d:4d:87:4e:3a:9b:9a:74:a1:67:bb:82:7e:9b:b3:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14E397E75E3B5F90A92612DBF4DF1D897C61772D
Validity
Not Before: Oct 10 22:56:41 2026 GMT
Not After : Oct 11 23:41:41 2026 GMT
Subject: CN=2A3820E5A08260219F283D901EBA336B07C4F1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:f8:31:5a:d4:e5:12:05:41:37:14:cb:69:
8d:11:b6:85:09:fe:1f:b8:bf:3c:41:fe:4b:4d:51:
2f:6c:41:23:51:21:0a:d2:62:2f:29:f7:fb:05:e7:
04:3c:99:14:d4:f1:bd:19:70:53:3c:77:d7:ee:a5:
02:e5:34:64:19:dd:8f:6c:61:66:e3:fb:d8:42:5a:
e8:81:f9:ab:fd:e3:87:ff:f0:34:75:92:11:88:17:
f0:be:1e:23:e2:f0:49:64:09:23:b8:0b:a7:2f:59:
ec:55:f1:83:1a:07:c0:67:2d:b8:61:62:46:a9:e1:
89:83:73:66:ad:83:9b:8d:f1:49:b3:db:3b:ea:57:
57:f8:73:eb:cb:81:04:83:bf:cb:34:11:5e:25:e1:
28:b5:dd:c7:46:80:47:62:a9:82:b9:03:4f:8c:aa:
45:8d:38:35:a6:7a:15:ac:b5:f4:ff:1c:e8:5f:7c:
35:23:71:d4:48:2d:ae:38:2d:8e:1a:fc:11:e2:b7:
3e:01:aa:64:ae:9f:f4:59:f7:30:e1:ef:1a:2e:2e:
6d:d5:49:8d:6d:1f:df:16:64:d5:4d:04:aa:79:b8:
1e:f0:02:65:1f:22:f8:65:0f:f3:65:0f:c0:98:76:
30:f0:b0:37:5c:08:a0:19:0e:b9:5b:dc:ee:84:59:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:20:E5:A0:82:60:21:9F:28:3D:90:1E:BA:33:6B:07:C4:F1:A9
X509v3 Authority Key Identifier:
keyid:14:E3:97:E7:5E:3B:5F:90:A9:26:12:DB:F4:DF:1D:89:7C:61:77:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E397E75E3B5F90A92612DBF4DF1D897C61772D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/14E397E75E3B5F90A92612DBF4DF1D897C61772D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:d6:9f:6d:3c:c8:f2:75:43:06:b7:b6:41:0c:75:b6:65:
74:15:2c:af:cd:2f:22:07:92:11:38:8d:02:6b:f5:89:1c:5b:
e0:a7:b8:30:ce:2d:b7:67:7c:6a:9d:b8:7d:68:c7:fe:b6:f9:
95:43:f2:d8:25:85:9e:73:21:52:34:7c:9a:67:e6:d4:8f:3d:
ce:42:32:ff:18:4f:00:73:3e:dd:de:70:aa:88:db:f5:08:f2:
da:26:b2:2a:e3:64:89:84:4d:97:a8:af:79:83:cb:19:e9:de:
1d:06:bc:a9:a3:c6:fb:00:c5:dc:f4:fa:8d:1b:ef:3d:15:5f:
ce:cc:8d:b2:df:28:08:fa:56:ad:3a:2f:ea:6b:b3:61:95:75:
02:cf:ae:20:b6:20:6e:4e:0f:f5:ae:ed:7c:3a:16:27:61:b8:
47:00:c3:ee:44:63:1f:14:8a:79:97:06:c2:ac:9c:a0:c9:61:
25:2f:63:0e:8e:82:68:05:39:9b:3c:e8:d8:95:09:82:3b:08:
6c:bb:1b:94:a2:49:e5:7b:60:0d:9a:31:97:b2:da:93:20:07:
c0:a7:69:ff:92:9b:71:29:c2:65:9f:81:13:2d:6f:47:4e:98:
8f:82:82:29:e1:7e:2a:ac:72:13:58:ca:5d:84:c9:11:cb:b7:
10:d6:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:11:02 2026 by rpki-client