
Error: rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
File: 8F43BF9E79677F282BF953C8E1F71757E25A9063.mft (raw, json)
Hash identifier: 4uuPKyf1CzDqdrzbT7twinhUOvqRcR6wyWiayj+lrWk=
Subject key identifier: 8A:11:3C:56:14:9A:1E:F7:88:B3:8A:E7:54:61:05:6F:1F:D6:9F:51
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Certificate issuer: /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial: 715E3EE62F1FE142F064C921D0B96F3776EF4C1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
Manifest number: 04AB
Signing time: Thu 15 Oct 2026 02:59:50 +0000
Manifest this update: Thu 15 Oct 2026 02:54:50 +0000
Manifest next update: Fri 16 Oct 2026 06:46:50 +0000
Files and hashes: 1: 3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (hash: Wjx5i+cZIylBJo6AdYJ21cMuzZIam3nXl9aWEHqeHeI=)
2: 8F43BF9E79677F282BF953C8E1F71757E25A9063.crl (hash: /2C51J8aGSIgIe3NSEzSa42HbMSg45PX6WVKMgWFoXo=)
3: 3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (hash: bIY73R+OeJNIFgA3uG7K2iPUaYv8FpclnU1l2KIux94=)
4: 323830343a6463383a3a2f33322d3438203d3e203238363336.roa (hash: 9v5wOZl0IzbYFvHPBiRxF5GdEJlzmPBW7m+WlQZMa7Q=)
5: 3137392e39372e3132302e302f32312d3234203d3e203238363336.roa (hash: pxw/l+03cqSVmE0xgHdMdOaLwYj9iHqxCffKn+8iEn8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 06:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5e:3e:e6:2f:1f:e1:42:f0:64:c9:21:d0:b9:6f:37:76:ef:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Validity
Not Before: Oct 15 02:54:50 2026 GMT
Not After : Oct 16 06:46:50 2026 GMT
Subject: CN=8A113C56149A1EF788B38AE75461056F1FD69F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:f5:78:99:4a:d5:35:ba:3e:ee:e1:38:fb:
21:cd:4b:ae:c9:f9:ae:cb:2d:f0:da:90:f6:d6:04:
f1:66:59:fd:4a:cb:a3:1f:1d:2f:7d:61:4f:cc:ca:
3a:5e:dc:33:71:99:f4:e3:d1:61:2f:3a:0c:14:65:
8e:0f:35:87:66:7b:d9:cd:03:cd:f5:56:0d:c8:0f:
16:7d:50:52:33:25:ea:57:df:37:64:45:22:63:ab:
b0:96:fb:15:75:c3:84:a0:7f:86:49:33:6f:db:b6:
63:78:57:c7:c0:65:e3:91:8b:1c:6e:bf:07:dc:bd:
21:0f:91:82:13:c9:91:50:fd:cc:97:dd:fc:ac:b0:
a7:19:19:35:f7:6e:1d:00:5c:73:03:4b:5e:ae:73:
78:15:93:72:21:fa:23:61:75:6f:c1:fc:ca:b6:2f:
50:07:65:5f:91:1a:34:8f:14:80:f3:fd:b2:f9:5c:
c6:fc:b8:8a:2b:01:6c:d5:9c:be:70:c3:36:4f:55:
a0:fb:02:63:b1:f5:8f:dd:a2:c2:50:19:f8:7e:0c:
1d:89:ee:23:23:10:82:73:79:92:db:15:b5:42:59:
b0:76:6f:1e:f3:68:08:72:a6:10:cb:a7:86:88:e9:
51:25:5f:08:f1:ec:af:fe:b1:ca:75:bb:62:af:f0:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:3C:56:14:9A:1E:F7:88:B3:8A:E7:54:61:05:6F:1F:D6:9F:51
X509v3 Authority Key Identifier:
keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8d:21:8b:51:28:08:17:46:42:20:8c:c9:ea:6d:9f:3e:df:
cf:46:f5:ba:48:f8:3a:2b:a5:8a:32:ac:99:51:d6:d5:13:91:
e9:44:c5:b0:9b:cf:a4:d6:9c:9b:e4:4b:9f:57:56:82:c8:ab:
ab:cd:8c:18:ab:ce:42:6f:cf:4a:7c:0c:5a:4d:66:89:66:54:
de:fe:2f:5a:a6:e2:3d:e0:3f:9a:a8:d9:e9:96:fa:dc:8b:6c:
80:38:e8:c5:29:fa:85:cb:29:08:62:48:ab:87:5f:64:68:b7:
e8:f7:f9:3c:17:16:af:49:76:c5:85:a0:f9:26:c8:15:6e:3c:
e1:19:19:ca:3a:ac:1a:a7:18:6b:31:77:4f:76:df:da:a0:f3:
22:01:1d:d5:f9:88:d2:ad:e5:aa:c0:a0:2f:b4:11:13:dd:1d:
78:c1:89:e0:ba:f5:f9:a7:83:7b:4b:76:46:91:c0:57:28:a1:
04:e4:ee:ec:80:97:ba:69:8f:d9:48:05:54:f6:c5:90:44:7b:
7f:f3:e6:27:8b:d2:7b:32:80:46:bb:05:93:b3:56:80:24:46:
0f:87:a2:bb:e7:0f:de:50:62:0b:87:1d:94:a9:78:ef:ec:f8:
4d:39:5b:1c:53:d6:86:18:03:98:af:9b:4a:fa:1e:43:de:54:
c1:98:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:55:33 2026 by rpki-client