
Error: rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
File: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json)
Hash identifier: DuQyUp/0aJM06OtbffDl5YLT5ltvd9De4Q7NhEGAt+k=
Subject key identifier: 46:09:EC:A1:ED:7F:8F:AD:68:99:14:EB:A6:01:37:65:A1:EA:E5:29
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Certificate issuer: /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial: 3BE0C0E69A0C6F56CDFC6D8F15051DE8F76A0F6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
Manifest number: 047A
Signing time: Mon 12 Oct 2026 06:09:18 +0000
Manifest this update: Mon 12 Oct 2026 06:04:18 +0000
Manifest next update: Tue 13 Oct 2026 09:38:18 +0000
Files and hashes: 1: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: pHeDqtys0oxqOH/UxQN/VTDkaMsbzRMeaM0COUEXtHU=)
2: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: G1q3aDXg2LtQnvumA1dOUF1K4leeKhWExsaU+z9Zmvk=)
3: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: IcZwwhQ2J8hWITHTr4hQGS/84f220KK3tuW6qpaJC6o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 09:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e0:c0:e6:9a:0c:6f:56:cd:fc:6d:8f:15:05:1d:e8:f7:6a:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Validity
Not Before: Oct 12 06:04:18 2026 GMT
Not After : Oct 13 09:38:18 2026 GMT
Subject: CN=4609ECA1ED7F8FAD689914EBA6013765A1EAE529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:1a:b0:df:fb:c5:f6:cd:f4:d0:76:d1:03:
4d:ae:96:25:19:d7:c9:ab:3a:0c:9e:b3:f3:34:14:
dd:6c:1b:bf:c8:88:08:23:10:ff:48:0d:e0:ee:51:
28:48:8a:c7:08:50:2a:01:05:79:85:2e:8f:69:d3:
d3:0d:8e:7c:5f:34:bf:94:9d:47:ce:69:4a:92:1a:
1c:e0:ae:68:5b:49:cc:ef:cb:62:12:12:3d:94:d5:
42:a4:ad:fd:2e:bb:7e:5f:e3:22:ba:12:6e:e1:54:
05:aa:bc:2e:1c:4a:e0:6d:99:32:40:fb:36:4f:d8:
7c:63:f9:4f:ef:c4:ea:4f:4a:84:8d:bb:46:95:de:
00:53:9f:17:47:44:63:26:31:41:ba:eb:10:57:53:
8f:67:92:34:8e:bf:25:67:df:ae:84:81:9c:b8:9a:
ff:18:7b:22:af:cd:9f:5e:41:1e:44:67:8f:3b:a4:
40:51:76:7a:ab:de:a7:e5:35:0e:fd:e1:66:b9:ad:
4b:48:2a:ad:37:27:58:c4:a3:5c:36:39:39:ee:61:
50:e7:ad:b9:70:7d:c9:96:9a:1f:ab:4e:0b:25:58:
ed:50:71:45:4f:fd:76:96:98:3a:6a:40:bd:f4:e9:
3a:07:8b:de:85:46:9b:90:15:17:ac:0f:d2:55:9a:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:EC:A1:ED:7F:8F:AD:68:99:14:EB:A6:01:37:65:A1:EA:E5:29
X509v3 Authority Key Identifier:
keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:47:20:ed:ae:60:e3:05:ae:da:25:6e:cd:e6:a4:a4:f4:
fa:47:00:44:6e:5f:a2:68:a9:9b:42:95:41:64:c0:87:b0:da:
7a:00:8b:f2:8c:2b:88:a5:09:e9:76:94:87:fe:66:8b:9c:ec:
de:75:3d:48:b3:58:71:01:db:c1:5b:53:5b:a3:5c:e6:ea:14:
50:27:46:9b:0e:02:bb:8c:40:10:bc:e4:c6:d2:da:10:a9:96:
5e:ff:c1:49:14:1a:3e:67:03:44:e5:c7:a1:6a:50:21:62:03:
24:80:fd:61:92:91:57:1c:bb:9a:ce:bf:a6:79:99:e6:04:61:
22:45:54:7a:24:6f:08:1b:86:59:2e:51:17:fc:ec:00:9c:5e:
1c:39:71:bf:98:a9:78:4b:3c:81:e7:a1:95:91:ba:6f:ca:63:
b7:b8:05:a8:fa:de:e3:46:e6:56:0c:09:8e:77:81:02:40:27:
56:3d:6b:37:f0:9f:a7:04:4b:dc:3a:5d:39:c0:6b:33:94:db:
74:96:f0:5d:40:65:fd:51:4c:dd:91:6c:44:3c:75:77:79:6f:
2a:76:d4:14:89:77:d3:1a:b2:45:6a:29:d5:a3:6e:de:f1:af:
73:88:28:35:96:61:a9:6f:73:3f:f9:2b:0a:f4:65:76:33:ca:
17:74:a1:d5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUO+DA5poMb1bN/G2PFQUd6PdqD2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZG
RDY5MkQ4ODAeFw0yNjEwMTIwNjA0MThaFw0yNjEwMTMwOTM4MThaMDMxMTAvBgNV
BAMTKDQ2MDlFQ0ExRUQ3RjhGQUQ2ODk5MTRFQkE2MDEzNzY1QTFFQUU1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7hqw3/vF9s300HbRA02uliUZ
18mrOgyes/M0FN1sG7/IiAgjEP9IDeDuUShIiscIUCoBBXmFLo9p09MNjnxfNL+U
nUfOaUqSGhzgrmhbSczvy2ISEj2U1UKkrf0uu35f4yK6Em7hVAWqvC4cSuBtmTJA
+zZP2Hxj+U/vxOpPSoSNu0aV3gBTnxdHRGMmMUG66xBXU49nkjSOvyVn366EgZy4
mv8YeyKvzZ9eQR5EZ487pEBRdnqr3qflNQ794Wa5rUtIKq03J1jEo1w2OTnuYVDn
rblwfcmWmh+rTgslWO1QcUVP/XaWmDpqQL306ToHi96FRpuQFResD9JVmlnrAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQURgnsoe1/j61omRTrpgE3ZaHq5SkwHwYDVR0j
BBgwFoAUwst8GlLnXA1LOU4J/GPqz/1pLYgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84V3RoTnNhcHRCc1BFRWU4YUxmeEhBeWFTeEFublQ5eXVXZWdIU2RITVZN
LzAvQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZGRDY5MkQ4OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMkNCN0MxQTUyRTc1QzBENEIz
OTRFMDlGQzYzRUFDRkZENjkyRDg4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX
dGhOc2FwdEJzUEVFZThhTGZ4SEF5YVN4QW5uVDl5dVdlZ0hTZEhNVk0vMC9DMkNC
N0MxQTUyRTc1QzBENEIzOTRFMDlGQzYzRUFDRkZENjkyRDg4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
qIdHIO2uYOMFrtolbs3mpKT0+kcARG5fomipm0KVQWTAh7DaegCL8owriKUJ6XaU
h/5mi5zs3nU9SLNYcQHbwVtTW6Nc5uoUUCdGmw4Cu4xAELzkxtLaEKmWXv/BSRQa
PmcDROXHoWpQIWIDJID9YZKRVxy7ms6/pnmZ5gRhIkVUeiRvCBuGWS5RF/zsAJxe
HDlxv5ipeEs8geehlZG6b8pjt7gFqPre40bmVgwJjneBAkAnVj1rN/CfpwRL3Dpd
OcBrM5TbdJbwXUBl/VFM3ZFsRDx1d3lvKnbUFIl30xqyRWop1aNu3vGvc4goNZZh
qW9zP/krCvRldjPKF3Sh1Q==
-----END CERTIFICATE-----
Generated at Mon Oct 12 17:08:37 2026 by rpki-client