
Error: rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
File: EA48F6970280B064226B470130F7ADE0F415C5C1.mft (raw, json)
Hash identifier: B7BdFPP5tFO60mifvFhcR6eiSp1aC9Vx1w/AUClzBB0=
Subject key identifier: 28:C8:40:A8:D3:7D:99:27:5B:3C:E6:20:EC:CD:B8:A7:57:98:B3:C4
Authority key identifier: EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
Certificate issuer: /CN=EA48F6970280B064226B470130F7ADE0F415C5C1
Certificate serial: 2419ADFA584FA8D418DE0DA8F68044A2C451B80F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
Manifest number: 0335
Signing time: Wed 14 Oct 2026 19:05:19 +0000
Manifest this update: Wed 14 Oct 2026 19:00:19 +0000
Manifest next update: Thu 15 Oct 2026 20:09:19 +0000
Files and hashes: 1: 323830343a356330343a633030303a3a2f33382d3338203d3e20323638383833.roa (hash: 8ykygyZHP4SYKPB0hULIZsrKhPcPkYXZ1aqtlTSZdy8=)
2: 323830343a356330343a3a2f33322d3332203d3e20323638383833.roa (hash: fXAiuwoLtOd2ntYdVCB6v+XULn2DVO8Vo7NN5u2Y2Qw=)
3: EA48F6970280B064226B470130F7ADE0F415C5C1.crl (hash: 0H2dkRTYNNt6+9x4d7CijB4JphYRZiRqVDCWotqSLxM=)
4: 34352e3137352e35382e302f32332d3233203d3e20323638383833.roa (hash: u0nMXwMSqOvyxmprfRuPvA2Ka54S1VxOJV3kzMzJioY=)
5: 323830343a356330343a383030303a3a2f33342d3334203d3e20323638383833.roa (hash: uMTgromQmCI60K8X3v3nN+V/9izsywiwOUEfiyyDNlg=)
6: 34352e3137352e35362e302f32342d3234203d3e20323638383833.roa (hash: qJcY3PiRsxS0ZfGSJril4zYzMzZPrgO34Hr+YmCjU9s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl
rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 20:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:19:ad:fa:58:4f:a8:d4:18:de:0d:a8:f6:80:44:a2:c4:51:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA48F6970280B064226B470130F7ADE0F415C5C1
Validity
Not Before: Oct 14 19:00:19 2026 GMT
Not After : Oct 15 20:09:19 2026 GMT
Subject: CN=28C840A8D37D99275B3CE620ECCDB8A75798B3C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:fe:e7:c9:6a:64:8e:e9:a9:7b:50:7a:2b:
48:2b:83:e3:fe:15:ae:b2:fd:0f:4d:5d:3e:79:4c:
f6:a0:77:2e:16:1a:17:d8:93:d3:6b:fd:4c:24:df:
bf:1e:ee:fe:84:88:11:bb:8d:72:82:27:3b:2e:b4:
75:04:35:0d:55:33:ee:01:c5:ca:db:ff:f8:82:89:
a5:10:ba:cb:d4:b2:9b:8e:2e:19:51:c6:bc:37:fe:
d2:61:77:bc:0e:bd:30:43:9a:b2:c4:2c:17:61:56:
a7:ab:89:bc:21:49:5d:6d:62:7c:e3:21:e8:6d:4a:
8a:7a:2b:91:e5:f4:37:bb:89:84:f0:8c:5c:05:aa:
24:b4:4a:97:55:4d:83:d5:7c:a1:36:b0:b1:9c:ab:
a4:7c:62:4e:2d:51:a1:d5:08:e8:29:f8:ab:69:28:
bc:1a:d9:6b:51:c1:fe:62:c5:29:f1:37:55:72:fb:
a9:d1:dd:d2:65:b6:60:a3:86:99:8e:f9:8f:6b:53:
bb:96:0b:3a:17:14:48:29:1f:06:6b:46:da:62:f1:
14:20:35:a7:7d:c6:cb:5d:de:8e:66:b7:b7:fb:3a:
35:26:c1:b9:9e:f3:11:aa:f2:ca:4c:03:ba:c5:41:
57:3f:5a:1a:23:0f:98:57:b3:f4:be:4c:e1:e3:e4:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:40:A8:D3:7D:99:27:5B:3C:E6:20:EC:CD:B8:A7:57:98:B3:C4
X509v3 Authority Key Identifier:
keyid:EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:a2:fc:7c:53:54:a1:c5:aa:fe:74:53:22:ba:db:ef:b4:
c8:eb:13:01:23:30:2c:8e:ce:c9:2f:f6:2c:5c:22:41:6a:49:
46:29:a3:7f:eb:9e:34:7a:86:ce:81:f0:3f:95:a0:cc:db:36:
51:77:4e:67:7c:ea:1e:d1:a3:f0:ee:3e:ed:75:fe:40:5b:f4:
94:59:83:93:ff:f8:75:4b:ed:c7:90:88:bd:7c:ad:0f:58:e3:
a7:e0:0a:a2:e4:d9:e2:09:d3:a2:e0:bb:d4:2f:49:7b:1e:3a:
f3:9e:c0:8e:52:ad:d6:e4:be:88:09:36:f1:a7:64:5f:d1:8c:
2b:d2:06:8c:1f:ac:1a:c2:b4:06:42:c7:fd:e3:03:2c:17:0d:
3d:7f:2c:08:06:65:c4:80:50:fd:48:77:25:81:0d:d0:ba:71:
d0:63:b0:fc:b3:a4:9c:35:2e:60:90:45:7e:c1:74:81:09:ab:
1b:79:bf:ea:5e:7d:69:ac:55:25:1a:3a:35:a4:31:15:b3:d8:
47:98:da:3a:fb:a4:e3:be:90:b6:ec:fd:26:d9:c4:a6:3e:3e:
7d:07:10:26:01:18:76:87:8b:93:b9:70:4c:97:23:17:8a:44:
24:cc:2e:1b:d4:b8:7d:ed:1a:33:fb:81:2b:1c:bf:d2:20:bc:
f1:66:b3:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJBmt+lhPqNQY3g2o9oBEosRRuA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE0OEY2OTcwMjgwQjA2NDIyNkI0NzAxMzBGN0FERTBG
NDE1QzVDMTAeFw0yNjEwMTQxOTAwMTlaFw0yNjEwMTUyMDA5MTlaMDMxMTAvBgNV
BAMTKDI4Qzg0MEE4RDM3RDk5Mjc1QjNDRTYyMEVDQ0RCOEE3NTc5OEIzQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyv7nyWpkjumpe1B6K0grg+P+
Fa6y/Q9NXT55TPagdy4WGhfYk9Nr/Uwk378e7v6EiBG7jXKCJzsutHUENQ1VM+4B
xcrb//iCiaUQusvUspuOLhlRxrw3/tJhd7wOvTBDmrLELBdhVqeribwhSV1tYnzj
IehtSop6K5Hl9De7iYTwjFwFqiS0SpdVTYPVfKE2sLGcq6R8Yk4tUaHVCOgp+Ktp
KLwa2WtRwf5ixSnxN1Vy+6nR3dJltmCjhpmO+Y9rU7uWCzoXFEgpHwZrRtpi8RQg
Nad9xstd3o5mt7f7OjUmwbme8xGq8spMA7rFQVc/WhojD5hXs/S+TOHj5Oi/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKMhAqNN9mSdbPOYg7M24p1eYs8QwHwYDVR0j
BBgwFoAU6kj2lwKAsGQia0cBMPet4PQVxcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWgzZnBROW5EWEM2YVh2Y3ZhOXlVNmRKRlNQODdpVFNtNUxad2ppa0Vm
cDgvMC9FQTQ4RjY5NzAyODBCMDY0MjI2QjQ3MDEzMEY3QURFMEY0MTVDNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNDhGNjk3MDI4MEIwNjQy
MjZCNDcwMTMwRjdBREUwRjQxNUM1QzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWgzZnBROW5EWEM2YVh2Y3ZhOXlVNmRKRlNQODdpVFNtNUxad2ppa0VmcDgvMC9F
QTQ4RjY5NzAyODBCMDY0MjI2QjQ3MDEzMEY3QURFMEY0MTVDNUMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPuCi/HxTVKHFqv50UyK62++0yOsTASMwLI7OyS/2LFwiQWpJRimjf+ueNHqG
zoHwP5WgzNs2UXdOZ3zqHtGj8O4+7XX+QFv0lFmDk//4dUvtx5CIvXytD1jjp+AK
ouTZ4gnTouC71C9Jex46857AjlKt1uS+iAk28adkX9GMK9IGjB+sGsK0BkLH/eMD
LBcNPX8sCAZlxIBQ/Uh3JYEN0Lpx0GOw/LOknDUuYJBFfsF0gQmrG3m/6l59aaxV
JRo6NaQxFbPYR5jaOvuk476Qtuz9JtnEpj4+fQcQJgEYdoeLk7lwTJcjF4pEJMwu
G9S4fe0aM/uBKxy/0iC88WazAQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:43:27 2026 by rpki-client