
Error: rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
File: 44D163BB7C285498620FF487902FE788F88F4349.mft (raw, json)
Hash identifier: YazZ1OuN8Jcj0RyVE2GTJ+53zdVr9SFXJ1Jq59MQ8zI=
Subject key identifier: 1F:01:F3:72:A6:68:5D:58:06:26:3A:6D:39:ED:87:F3:92:B4:CC:34
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Certificate issuer: /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial: 0A6B250E3557A7CF48D3559507701101680C75FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
Manifest number: 04CA
Signing time: Thu 29 Oct 2026 09:28:38 +0000
Manifest this update: Thu 29 Oct 2026 09:23:38 +0000
Manifest next update: Fri 30 Oct 2026 12:42:38 +0000
Files and hashes: 1: 3139302e3131352e3231362e302f32322d3332203d3e20323730383435.roa (hash: jrv+2AYY7UG1wGUQB0d0R73eV4KLeCNZytBEN4/Yfaw=)
2: 323830343a373234633a3a2f33322d313238203d3e20323730383435.roa (hash: w5gSfYx4SGRgTPVhgT+lLhnPAx61HAGZqWnhVqk10UA=)
3: 44D163BB7C285498620FF487902FE788F88F4349.crl (hash: tteIAyWeHbVvp/vNvoY1D/PLE2bnroDfKM3PHETDa9U=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 12:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6b:25:0e:35:57:a7:cf:48:d3:55:95:07:70:11:01:68:0c:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
Validity
Not Before: Oct 29 09:23:38 2026 GMT
Not After : Oct 30 12:42:38 2026 GMT
Subject: CN=1F01F372A6685D5806263A6D39ED87F392B4CC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:8f:09:7e:4a:0e:47:bf:b0:fc:3f:16:af:
29:80:c9:67:2c:98:65:36:8a:14:49:9d:71:e4:9c:
2c:06:06:d8:31:d6:00:e6:91:7f:1e:b1:12:27:a2:
3d:2b:4a:e3:3a:03:5c:54:8c:30:8b:1d:3a:04:2e:
af:a3:19:f9:25:97:28:03:56:42:25:03:62:32:7b:
2e:f7:22:24:5b:4b:97:cf:63:b9:48:00:24:b1:39:
84:10:9d:31:01:eb:39:cf:51:fe:84:d9:1c:21:09:
8a:e6:b1:9b:33:08:5f:d6:0c:c6:7b:6b:0d:b5:9f:
1e:78:85:76:9c:1d:53:a7:3e:05:76:e1:8e:bc:92:
aa:ef:b8:2b:58:07:c0:22:52:6d:c4:cb:a7:09:1c:
e0:42:c6:40:d8:f2:af:7a:3d:e4:11:02:89:11:79:
f9:1a:ee:e7:9e:f4:d8:19:10:25:cd:fc:65:84:b7:
a0:7d:69:c7:e7:5c:51:3d:5d:04:11:38:4c:2f:7b:
0e:a8:fb:81:f4:c0:0d:62:08:df:a3:79:d9:e4:de:
c5:3b:f0:ba:01:5d:45:9b:ab:62:62:9a:1c:39:87:
51:13:0d:7b:24:37:be:76:b8:85:61:94:a6:6e:45:
6d:ee:51:58:64:8d:0a:67:ee:1b:73:6a:bd:30:3c:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:F3:72:A6:68:5D:58:06:26:3A:6D:39:ED:87:F3:92:B4:CC:34
X509v3 Authority Key Identifier:
keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:22:f8:b4:02:ec:a8:4c:f8:a7:c8:68:6d:4b:45:b4:0b:
3d:0c:c2:ea:be:8e:e0:ab:77:11:5d:1c:09:08:03:ef:a7:61:
1c:53:6c:f7:0c:c1:a6:59:ed:f3:17:07:e9:4f:45:39:43:3a:
1a:a2:72:1f:56:21:b7:be:3a:6e:78:d4:42:67:e0:b3:f8:e1:
5b:6e:4f:4a:17:51:ce:ec:df:22:3f:c0:07:bc:7f:16:84:07:
0f:db:e5:3a:41:d1:d6:e4:7e:c6:1e:e5:51:d2:be:5f:90:c4:
c7:5a:6e:9b:46:74:69:62:ac:24:9a:96:c9:47:cc:10:08:b8:
59:ce:ba:76:ff:5a:fb:f8:8c:7e:24:13:e7:42:12:22:56:dc:
65:a1:2b:97:e6:3d:c7:bd:0c:56:a9:3b:5b:68:ee:0a:0d:01:
83:ca:98:09:39:ee:a9:f9:23:ba:f3:ab:37:21:73:4f:7c:51:
20:89:b5:90:6c:46:97:a5:0f:96:57:57:2b:ac:1a:2a:78:85:
5b:cc:18:e2:a5:e6:90:df:f8:70:d6:f0:9a:56:4b:d1:19:b3:
b6:35:82:4e:36:0d:5c:fa:fe:43:5a:01:41:80:36:f2:be:9b:
59:6a:81:d7:42:30:ad:2f:10:a9:97:d4:a7:fa:f2:94:1e:25:
88:bf:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:41:37 2026 by rpki-client