
Error: rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
File: 4E4DCA5E9F4558BA38892642829692F839F2A231.mft (raw, json)
Hash identifier: r2STNkGVxSobHeGQIshxIpKOIigp3T3gn/WNJErKyQc=
Subject key identifier: 00:27:A2:E5:76:52:10:E8:8F:18:E4:A7:04:19:1B:9E:2A:E6:D7:83
Authority key identifier: 4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31
Certificate issuer: /CN=4E4DCA5E9F4558BA38892642829692F839F2A231
Certificate serial: 584717D8ED2B1D036F475CFCFFCF24A10758B0AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
Manifest number: 04CC
Signing time: Tue 13 Oct 2026 05:22:00 +0000
Manifest this update: Tue 13 Oct 2026 05:17:00 +0000
Manifest next update: Wed 14 Oct 2026 08:55:00 +0000
Files and hashes: 1: 4E4DCA5E9F4558BA38892642829692F839F2A231.crl (hash: o/ZoU3uNecUPITskSpgquLpRsZ74pPVEvjf3BJBdJ80=)
2: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: LdklPkgAUBVjbzt7Bbmrrf9v5PHk+gh5VfV9IbmwHbU=)
3: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: eBS/qeAaKflXSwgMJBnt/4fu0LT+Ws1i2QlvqziTifM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl
rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 08:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:47:17:d8:ed:2b:1d:03:6f:47:5c:fc:ff:cf:24:a1:07:58:b0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4DCA5E9F4558BA38892642829692F839F2A231
Validity
Not Before: Oct 13 05:17:00 2026 GMT
Not After : Oct 14 08:55:00 2026 GMT
Subject: CN=0027A2E5765210E88F18E4A704191B9E2AE6D783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:96:67:5e:46:3a:b4:b2:66:54:be:2c:be:
42:d4:fb:9c:20:9b:94:0e:6a:18:9c:72:e8:00:6a:
2b:5c:82:dd:fe:56:a5:16:95:e9:cc:72:7c:a1:b0:
6f:0d:43:34:cb:7d:5e:70:6d:d4:87:69:7b:b0:a9:
1a:e3:01:48:3c:0d:8b:ac:c8:98:7e:9d:ee:ee:dd:
63:e7:2f:63:6f:fc:9a:28:74:fe:52:af:30:a0:8e:
e5:68:72:56:04:55:16:b1:da:e4:3a:0e:02:96:e6:
16:67:c3:b3:23:dc:9e:03:ba:bf:09:d3:6a:2c:e3:
6b:36:94:20:93:b1:9c:f5:83:d7:8c:c2:3d:4e:42:
24:fe:bb:cc:b8:72:4e:9b:e7:64:3c:6e:21:2a:1e:
67:34:33:19:79:6c:d4:50:89:97:d9:d2:e8:16:79:
1d:4c:3a:e2:51:56:5e:8b:88:0a:8b:b9:0e:0b:7c:
c1:b5:3a:41:58:b0:8d:9a:02:49:44:ad:6f:09:8d:
91:97:7b:6c:2d:13:10:d0:65:52:b8:50:83:6f:16:
7d:d8:52:74:7a:9d:b0:91:5f:28:8f:6f:d2:a5:ab:
3d:9a:56:71:fe:d5:7f:c1:66:c4:26:47:d8:47:19:
bb:d9:5f:47:87:2f:93:97:d2:7c:09:f6:f2:1d:97:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:A2:E5:76:52:10:E8:8F:18:E4:A7:04:19:1B:9E:2A:E6:D7:83
X509v3 Authority Key Identifier:
keyid:4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:21:fd:05:3c:9d:3b:2e:f9:95:aa:bd:88:5f:a5:c4:ba:c9:
c0:88:aa:7c:b2:7a:c1:d3:db:fd:50:f8:ca:f2:2f:39:27:5c:
de:5f:6c:40:bf:ee:1a:e0:28:5d:6c:b5:ad:e8:8c:06:b2:97:
be:ff:9e:12:7c:28:c8:ca:01:22:f7:64:92:48:84:e3:0d:68:
d1:82:0f:e8:f1:66:9a:39:bc:b0:46:8c:92:9d:ba:b8:10:0b:
b7:4a:25:f7:31:70:90:bb:70:02:91:7f:e4:7d:4b:3b:4d:8f:
fb:a9:eb:65:1c:a0:0f:4c:e8:35:f0:bc:92:0a:28:62:57:17:
0a:13:20:59:cd:c2:a1:ee:16:9e:42:ba:f1:e6:db:dc:3d:d5:
ce:ef:2e:a0:b1:74:45:66:86:64:93:66:9b:14:dd:02:85:3d:
19:db:f2:62:e9:8d:1b:1c:f5:12:d2:d6:15:d0:15:54:8c:ee:
2b:fe:c6:70:bb:dc:44:a7:7c:b0:65:fc:a6:d0:d4:20:30:bf:
d0:f0:79:8c:c2:85:f1:af:76:19:ce:e0:f8:50:0b:df:f0:4b:
8b:d4:4e:76:5b:e0:19:86:41:c3:82:94:ce:7b:f1:70:df:ea:
a6:ec:9f:3e:f2:fc:0a:7e:ab:6f:48:eb:28:50:c6:62:fa:7c:
e3:8c:1c:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWEcX2O0rHQNvR1z8/88koQdYsKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU0RENBNUU5RjQ1NThCQTM4ODkyNjQyODI5NjkyRjgz
OUYyQTIzMTAeFw0yNjEwMTMwNTE3MDBaFw0yNjEwMTQwODU1MDBaMDMxMTAvBgNV
BAMTKDAwMjdBMkU1NzY1MjEwRTg4RjE4RTRBNzA0MTkxQjlFMkFFNkQ3ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVSZZnXkY6tLJmVL4svkLU+5wg
m5QOahiccugAaitcgt3+VqUWlenMcnyhsG8NQzTLfV5wbdSHaXuwqRrjAUg8DYus
yJh+ne7u3WPnL2Nv/JoodP5SrzCgjuVoclYEVRax2uQ6DgKW5hZnw7Mj3J4Dur8J
02os42s2lCCTsZz1g9eMwj1OQiT+u8y4ck6b52Q8biEqHmc0Mxl5bNRQiZfZ0ugW
eR1MOuJRVl6LiAqLuQ4LfMG1OkFYsI2aAklErW8JjZGXe2wtExDQZVK4UINvFn3Y
UnR6nbCRXyiPb9Klqz2aVnH+1X/BZsQmR9hHGbvZX0eHL5OX0nwJ9vIdl7e7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUACei5XZSEOiPGOSnBBkbnirm14MwHwYDVR0j
BBgwFoAUTk3KXp9FWLo4iSZCgpaS+DnyojEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BM
N3MvMS80RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNERDQTVFOUY0NTU4QkEz
ODg5MjY0MjgyOTY5MkY4MzlGMkEyMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BMN3MvMS80
RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0iH9BTydOy75laq9iF+lxLrJwIiqfLJ6wdPb/VD4yvIvOSdc3l9sQL/uGuAo
XWy1reiMBrKXvv+eEnwoyMoBIvdkkkiE4w1o0YIP6PFmmjm8sEaMkp26uBALt0ol
9zFwkLtwApF/5H1LO02P+6nrZRygD0zoNfC8kgooYlcXChMgWc3Coe4WnkK68ebb
3D3Vzu8uoLF0RWaGZJNmmxTdAoU9GdvyYumNGxz1EtLWFdAVVIzuK/7GcLvcRKd8
sGX8ptDUIDC/0PB5jMKF8a92Gc7g+FAL3/BLi9ROdlvgGYZBw4KUznvxcN/qpuyf
PvL8Cn6rb0jrKFDGYvp844wcQA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:36:10 2026 by rpki-client