
Error: rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
File: E564227F0F27852AEEA76948A118D38F01D7645E.mft (raw, json)
Hash identifier: jsOAswvrU3Z402QImcSuqlftIW3PbpjPJrWfwDYxMPc=
Subject key identifier: 8D:EE:5A:54:C5:77:38:4F:54:AE:BF:FB:18:46:F2:28:E5:9F:56:29
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Certificate issuer: /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial: 7B5F0E7940873ABBFF7C5F79DB4BAB081B0CB071
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
Manifest number: 04CE
Signing time: Wed 14 Oct 2026 14:06:12 +0000
Manifest this update: Wed 14 Oct 2026 14:01:12 +0000
Manifest next update: Thu 15 Oct 2026 14:37:12 +0000
Files and hashes: 1: 3139312e3234322e37322e302f32332d3233203d3e20323633343734.roa (hash: KlmI+K92lkfbpLDaREiOWUvM6Z4cNDVOmn7yYFxy4M8=)
2: 3139312e3234322e37382e302f32342d3234203d3e20323633343734.roa (hash: Knxmem4qyxbqmK622HtCuk2kbnO78Dg2e7PIWPnJUPM=)
3: 3139312e3234322e37342e302f32332d3233203d3e20323633343734.roa (hash: a3LqAPBBigEDDiZbxzT016YKsgRQkCnQNn94pPa1dDI=)
4: E564227F0F27852AEEA76948A118D38F01D7645E.crl (hash: XmzMV0tP/N5wzKVVIBcFLczbwuu72KjAUjbMRdtoyKQ=)
5: 3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa (hash: xOh29cZW1OByIFhZjJKOc5Ac/zDxUpfT0hiTjzTtnj0=)
6: 3139312e3234322e37352e302f32342d3234203d3e20323633343734.roa (hash: LYYWrW/3X1W87wvDNzgGIkgGj+6DlUbmhJiy2s+SqSM=)
7: 3139312e3234322e37382e302f32332d3233203d3e20323633343734.roa (hash: 9Xi9BG0Z4mXSDYcTbWfO9EQFRAUGhHDULcQD3c1zPg4=)
8: 3139312e3234322e37392e302f32342d3234203d3e20323633343734.roa (hash: +lZ7sZdCMgkwrqxVX/inMObppAv+AXzNzQ/yQorlMc4=)
9: 3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa (hash: rV/cB5rtyYxjJLJFiLM3FHQQ3q+cUAn49wRVFVV+fg4=)
10: 3139312e3234322e37362e302f32322d3232203d3e20323633343734.roa (hash: k/n5VRZbwl/eU0GuIqfEb3pRBw6swX+dO5NjNWiFIrQ=)
11: 3139312e3234322e37322e302f32342d3234203d3e20323633343734.roa (hash: RSavCiZAnjwDWZf5n26kH8EQ58YnrE22/zcsoUhg55k=)
12: 3139312e3234322e37362e302f32342d3234203d3e20323633343734.roa (hash: 8dhCvJhO8BjZBb2ecDkLULADtQiDF9rFxI+zCcawppk=)
13: 3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa (hash: ewxD0aGPpbt8feRdtEzd1lw8kTkRrm9WLTX9B8VseLA=)
14: 3139312e3234322e37332e302f32342d3234203d3e20323633343734.roa (hash: 1/9mnEx6vtQZ1WJPNPYs+5m1NjepalI1i2uo/LsIqjA=)
15: 3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa (hash: P5AVU2TxzaBr30iVoodHdPdbDQeHChN0OIrv4z/7Vm4=)
16: 3139312e3234322e37342e302f32342d3234203d3e20323633343734.roa (hash: vNMKy6qEA7OeY6BDBqmmCY7gD8jiimbyUUwO+cFhpZM=)
17: 323830343a313236343a3a2f33322d3334203d3e20323633343734.roa (hash: NiLDttnIqGNLckOU0x4EpNGr7tUmLJFoiYSxLPrzvPY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 14:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5f:0e:79:40:87:3a:bb:ff:7c:5f:79:db:4b:ab:08:1b:0c:b0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
Validity
Not Before: Oct 14 14:01:12 2026 GMT
Not After : Oct 15 14:37:12 2026 GMT
Subject: CN=8DEE5A54C577384F54AEBFFB1846F228E59F5629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:13:62:10:7a:6d:57:19:a6:25:6f:35:00:
06:27:60:b7:23:33:9c:ea:83:bf:e5:d9:ac:57:d1:
b3:47:a3:dc:08:59:3a:b7:96:d9:ab:1b:62:04:7a:
5a:a8:ee:37:c8:2b:1f:55:4c:f1:62:3c:b0:78:1b:
d8:0e:d0:96:ab:5d:a1:1c:c4:62:77:90:b3:0a:4f:
96:66:ce:9b:d4:65:93:85:cb:8f:69:9a:92:80:1f:
5d:62:70:44:5c:9a:a9:44:14:21:e0:1e:85:04:36:
b5:d7:53:82:0e:7f:c0:d7:5b:4f:6d:a4:5c:0d:4a:
d7:98:17:c3:45:ae:35:f9:93:c0:41:f9:cc:f1:a4:
81:44:1b:07:41:7b:e6:4e:d6:ea:d0:20:86:41:c3:
b9:e1:09:57:23:d3:8f:32:e4:f8:a6:81:86:ef:0e:
ba:63:12:27:67:ba:6e:65:cb:ce:8f:d8:93:fe:35:
3e:50:82:bd:5f:bc:53:d3:4c:7a:9e:53:cd:58:de:
f1:cc:fb:bf:3e:e6:53:71:d5:68:50:11:93:ff:81:
1d:c7:9c:93:d1:10:71:31:63:1f:c0:71:f0:13:61:
94:04:b8:7b:36:b4:cd:8d:75:1b:d9:db:5d:b8:45:
31:0d:51:5b:9e:6b:6c:e8:d9:5b:71:a4:b6:75:bc:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:5A:54:C5:77:38:4F:54:AE:BF:FB:18:46:F2:28:E5:9F:56:29
X509v3 Authority Key Identifier:
keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:09:2c:f6:ca:b3:36:28:4d:da:2a:0f:2e:5d:53:ad:8a:5d:
79:6b:8f:2b:8a:9f:0f:ad:80:ab:c0:9c:c2:5b:4a:6c:ff:31:
db:3e:80:46:d0:55:5f:cb:63:ea:59:34:e0:3c:68:a7:92:17:
aa:e4:a3:17:b0:fd:0e:d3:5d:34:25:49:6a:7b:23:87:c7:7c:
31:23:d0:36:b3:6b:2b:ed:9f:08:9e:c5:59:a5:2a:4e:65:4a:
29:6b:fa:db:d3:cf:94:ec:7e:fa:91:9c:ae:3b:15:de:83:74:
1b:86:60:8d:3f:a1:88:61:49:5e:c6:9d:1d:d8:73:83:74:16:
51:6c:de:87:24:68:26:88:7c:30:cb:c9:3f:9c:47:1e:9a:35:
df:ba:ae:2e:af:1c:c8:7d:83:39:e1:a2:09:83:b8:b3:a2:18:
10:83:56:a7:17:fc:52:fc:5d:1d:8a:21:f7:f3:7c:ee:3a:c7:
41:19:86:64:48:8b:5d:e3:89:bb:46:54:c2:e9:ce:eb:11:93:
0d:23:b3:8e:66:9d:b5:e4:90:2a:87:9c:a1:e6:a9:a2:41:ff:
bd:17:4d:48:77:e6:d3:34:ff:06:d2:0b:a0:e5:f5:59:68:6c:
43:7e:d3:51:40:30:29:5d:03:6d:e3:01:38:1d:86:5b:07:99:
26:13:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:20:14 2026 by rpki-client