
Error: rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
File: 4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft (raw, json)
Hash identifier: +wQBjJFOP3o1dfqNqLuWhy4bHlrajlgRuMm96hQNcjY=
Subject key identifier: F6:35:BF:68:E7:AF:53:BF:CA:CD:41:2C:5A:F0:33:78:26:AF:5F:81
Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
Certificate issuer: /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Certificate serial: 44D8994C4482EB596A821479606FB015157BCF4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject info access: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
Manifest number: 01FD
Signing time: Fri 16 Oct 2026 04:51:06 +0000
Manifest this update: Fri 16 Oct 2026 04:46:06 +0000
Manifest next update: Sat 17 Oct 2026 07:59:06 +0000
Files and hashes: 1: 4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl (hash: C8Wr0lZ/vKkjZLZ0ZwUHagYUWWTSYTGKOh6rcj+4Q1Y=)
2: 323830343a386461303a3a2f33322d3332203d3e20323733333639.roa (hash: strMbOVQW4EaLw3BO1lRlnv0TT13730QJphKMgQpH60=)
3: 323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (hash: qNUtPU45hLhwcciO3a8wDPboEVnMQ9lHagyDQmj9xMA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 06:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d8:99:4c:44:82:eb:59:6a:82:14:79:60:6f:b0:15:15:7b:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Validity
Not Before: Oct 16 04:46:06 2026 GMT
Not After : Oct 17 07:59:06 2026 GMT
Subject: CN=F635BF68E7AF53BFCACD412C5AF0337826AF5F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:1b:61:40:1a:65:cf:62:e0:bc:26:a7:ef:
00:46:a8:cf:86:8b:1e:50:8f:81:98:86:2f:73:df:
6a:16:67:89:a9:96:86:0e:b7:57:07:f7:fc:3d:a5:
d6:b1:d7:3d:4a:cb:a7:8f:18:6d:bb:71:be:df:3e:
17:aa:57:8a:ea:e2:3a:a1:2b:0f:f1:d3:73:70:c0:
31:19:bb:4d:e7:35:b6:13:77:12:2b:4e:f4:a9:cf:
ae:93:e2:d1:8d:7d:9a:67:9f:c4:c9:36:fd:b7:7f:
8a:b8:a1:67:34:dc:cc:0a:88:43:78:5c:b9:4f:8a:
9f:a0:94:0d:a1:45:24:ed:98:cb:f8:b1:ef:91:70:
1c:ac:4f:19:3d:8d:ba:37:20:91:25:79:06:d0:cf:
a8:2f:ab:04:f8:4e:48:b7:25:d9:c5:1a:31:40:56:
c9:a7:3f:4b:a7:6d:32:8a:9a:99:a8:41:d0:e0:ca:
a1:52:55:53:b8:30:e1:13:0e:c8:15:a0:19:ae:68:
0c:d5:e5:8e:57:4b:71:b1:39:f7:9d:e8:f0:a7:f8:
41:78:34:31:c0:af:b5:23:54:43:e1:84:d2:07:00:
ba:bd:ea:10:ff:1a:83:d3:c3:ee:ca:9d:4b:c1:8b:
0c:1a:ca:b4:71:dc:d8:64:ec:4d:63:d6:8a:f7:b7:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:35:BF:68:E7:AF:53:BF:CA:CD:41:2C:5A:F0:33:78:26:AF:5F:81
X509v3 Authority Key Identifier:
keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:e8:09:38:7c:c7:7c:23:46:05:d0:c8:90:cd:07:45:15:
a0:43:b5:2e:8a:e7:76:ca:c1:68:9b:14:b8:a7:a2:c7:d0:38:
eb:f7:a9:38:8e:a5:99:86:cb:84:dc:c2:e3:74:53:6b:39:f5:
31:cb:7a:0a:1b:37:85:df:3f:ce:c0:9c:38:f2:19:7d:48:55:
6d:f7:e5:e2:8f:49:ed:fe:2f:85:c7:c2:f6:7a:04:d3:d5:f3:
c2:65:51:42:54:a9:8e:09:e3:c2:76:d6:29:a3:65:11:d0:b1:
17:30:4b:4e:97:38:d6:f4:de:19:fc:1d:54:b3:1b:84:1f:4f:
99:5b:60:72:7d:8b:3e:98:fb:a1:09:57:78:52:f7:5d:d8:2f:
7b:56:29:75:3b:3d:28:30:09:68:fb:2e:76:f8:74:58:9c:b8:
ba:d2:24:99:21:9a:1f:2f:05:a4:a0:3d:1a:dc:35:5c:d0:90:
60:fd:6a:35:33:ea:1a:dd:fd:0d:42:8d:5c:5a:c9:28:de:4b:
82:7c:c3:e9:c9:d2:06:98:9a:1b:2f:f6:ac:53:06:73:ed:1e:
23:e4:fb:01:48:3a:9b:33:c9:c8:e3:b9:01:ca:1e:db:96:70:
fb:1d:5c:d9:eb:3e:2d:18:94:3d:5a:e3:e4:dd:b5:5f:e3:4a:
9b:e6:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 07:37:13 2026 by rpki-client