
Error: rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
File: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft (raw, json)
Hash identifier: YAGsXWVP9TvkpU5NRsxlDGcfksVJVqDVo32K2FF3W1g=
Subject key identifier: 3A:70:8B:DF:A0:FC:EA:F8:7A:01:60:BF:4A:13:E3:3C:9A:21:F2:87
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Certificate issuer: /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial: 1FE05CDD1CC88EE25F75EB302756AE99C281CFDC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
Manifest number: 04CB
Signing time: Sun 11 Oct 2026 09:50:00 +0000
Manifest this update: Sun 11 Oct 2026 09:45:00 +0000
Manifest next update: Mon 12 Oct 2026 13:13:00 +0000
Files and hashes: 1: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl (hash: GlKeTXIlqOs/ZUe4vz1rwExR5OEEmBI0qj4xy4K/E6E=)
2: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: m+nssQYHrnXOq/hb0eyIYVP0zd1CutzVa1h16yS87XE=)
3: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: 32MUjmMlipIQ5w66Tg0yyXCGK7iNkWxFA5S1Vz0pfXE=)
4: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: 1O+C4gKehoZbB1bzgM9P5Hl3u1YA7QbbPbBfTZuNlJA=)
5: 323830343a6335303a3a2f33322d3332203d3e20323632383931.roa (hash: rY/AbGdTlh2PZKTUHZ0W9omjzqensEoBLVsBXZuCsrQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 13:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e0:5c:dd:1c:c8:8e:e2:5f:75:eb:30:27:56:ae:99:c2:81:cf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Validity
Not Before: Oct 11 09:45:00 2026 GMT
Not After : Oct 12 13:13:00 2026 GMT
Subject: CN=3A708BDFA0FCEAF87A0160BF4A13E33C9A21F287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:9a:fb:0a:64:ee:3a:b1:c8:a3:d0:43:b3:
5f:e5:3c:e2:62:cd:5a:95:1f:1f:9b:9a:63:b6:e9:
ac:e3:c3:ba:36:9c:93:a8:f3:ca:ba:28:8f:6f:f4:
6b:5e:a4:26:f4:d8:7d:0c:f2:ce:c6:13:52:b9:39:
c9:8d:ba:fa:e9:93:51:f6:8f:fa:77:85:57:fa:dc:
d0:2f:28:cb:8c:c3:ff:0b:8c:8f:a7:67:99:f8:6a:
ff:4f:fd:b0:d4:5e:ca:97:32:da:fc:57:d1:d6:d5:
d1:9d:92:1b:92:9e:65:b2:2f:cd:14:d3:d4:f3:5e:
92:4e:5d:c8:17:ff:5e:47:ed:b4:ce:97:d2:2c:e1:
0a:01:df:a7:ff:04:e2:f2:f4:d2:78:58:50:bd:2c:
20:66:0d:12:e6:52:69:87:0f:0f:8c:b2:15:03:ad:
22:a0:b7:8e:b4:a7:55:aa:50:d6:9d:8b:92:65:b6:
40:6e:7d:58:af:3d:d5:2f:24:68:51:ff:8d:b5:fc:
0d:8a:5a:1e:71:a5:17:41:5e:e0:e8:5b:39:f8:fc:
c6:9f:fc:a1:7a:4e:e8:db:21:98:b9:17:ce:5c:68:
6f:73:8f:a1:ee:ec:3d:12:66:12:8b:cd:89:2e:cb:
cd:ff:7d:ab:66:b8:68:0d:4c:9d:e1:d7:4a:2d:fb:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:8B:DF:A0:FC:EA:F8:7A:01:60:BF:4A:13:E3:3C:9A:21:F2:87
X509v3 Authority Key Identifier:
keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:84:ba:94:cf:2c:f8:b6:12:ff:41:f8:b5:f0:68:40:79:
70:ae:8b:04:a5:89:f3:7b:9f:d2:3e:f6:2f:64:4a:6f:91:d1:
dd:63:d0:1a:54:cf:fe:ea:97:06:e8:97:bd:c6:04:df:36:c0:
f8:19:5f:8d:2a:90:4e:31:dd:fe:2b:32:0e:2c:10:84:f7:3e:
1c:37:2d:50:f2:c3:e5:de:a1:27:45:f3:c5:58:8b:21:b7:63:
8c:b9:9b:e4:a2:d9:c4:e9:17:b3:32:6b:25:06:21:3d:08:4c:
de:50:9c:a9:79:3a:06:8f:f9:02:64:11:ed:b3:76:2a:4e:fb:
36:22:63:57:d2:73:ed:49:2d:bb:e9:b6:42:fe:22:53:9e:87:
df:f2:42:8b:78:09:9a:84:4e:bd:01:fe:ab:74:1f:2e:17:2f:
b4:a9:e1:97:d5:a0:17:88:23:96:03:2a:64:30:3a:e2:0b:8d:
47:86:ec:6b:6c:4f:23:e8:cd:90:9f:28:91:c4:a1:f2:14:f4:
78:65:95:a9:83:77:40:7a:5f:3a:71:17:ba:cc:6b:3e:75:b9:
7f:0b:b8:3d:62:54:c2:47:e6:b9:ad:ee:75:f9:06:6f:c7:4c:
94:ff:6a:0f:04:34:b0:17:ae:0e:45:05:93:b6:37:cf:15:bf:
5d:7b:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:03:51 2026 by rpki-client