
Error: rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
File: 5A40D3E78C135512BC4447988687E789A73E2C20.mft (raw, json)
Hash identifier: 8GbjYLIQvK29RFaw4w7iyH9CNIj9dmbvCHjq5cEm1/8=
Subject key identifier: 17:BA:A1:32:7F:F6:EA:81:D5:8E:8B:F4:BC:DC:B4:3B:C0:4E:AA:8C
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Certificate issuer: /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial: 7881B4E23948E89C3F20CA4ABC17B99B983D40E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
Manifest number: 79
Signing time: Thu 15 Oct 2026 03:04:45 +0000
Manifest this update: Thu 15 Oct 2026 02:59:45 +0000
Manifest next update: Fri 16 Oct 2026 06:53:45 +0000
Files and hashes: 1: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: CcIGdT55RjKfVxYWwDoPAAoRQrBgg9i0I31tbhx79tw=)
2: 5A40D3E78C135512BC4447988687E789A73E2C20.crl (hash: PpFK2550ydcbr840uz1xgtXGFSvZQ3YcKKrobl4h+Oo=)
3: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: UVOVadSw6VDeGZIdlFJ1FOwZn7iXLlg1EqYX8I9FWDk=)
4: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: p1sJWpGiZM7O9MtO6kI1tOKvb1V+0H28ctmeAyYx5yA=)
5: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: 47PFiIrN8YcgeyMYrPnpq8sw1cn8CKOc9QsHZObWaiI=)
6: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: EXw8MBp0C2jL7qq/slSRTBtC84Zq78Kd9N8xPDG+MPw=)
7: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: tftKrmZZklMgc4dBJRERAFTdNXEAoD4sM8JJrsQF46w=)
8: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: tdXUFupULNZKgr/w0C5EyOmm/ohhrLBXnnTwJMIelIM=)
9: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: PHlLU6EBn+KwgERm+tPlUEdoLYTiUPlZg5NHJbQMN04=)
10: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: xDntTwhPB4XbvoGLNelJS6bPDWp1hb5W0Gl/HScIXQo=)
11: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: gPRN1PiE4hKS95HTYb5THWXUdyfO0TOoeYyLM7n5OMg=)
12: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: VpHe8diSksGSFx+uhTzuPlsu7YWEidEzJ+QbPDuF8OE=)
13: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: sWTASS4g/VzQt8ztnYDAizFTeNgJZn9vWfZfOQ+b4aw=)
14: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cna1NytKvpGl0P/xPip5ft+23sNxBBqsGIju8aP9bS8=)
15: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: d+TJN7XsBrH6LbhjzoGCAQ2udf7x8XrVutGzhi6i5k0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 06:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:81:b4:e2:39:48:e8:9c:3f:20:ca:4a:bc:17:b9:9b:98:3d:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
Validity
Not Before: Oct 15 02:59:45 2026 GMT
Not After : Oct 16 06:53:45 2026 GMT
Subject: CN=17BAA1327FF6EA81D58E8BF4BCDCB43BC04EAA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:39:86:40:bf:e2:53:68:f5:e7:6b:93:49:
1b:75:d1:da:99:3e:bc:83:c6:1f:46:28:2e:aa:4c:
8b:9d:f1:60:4c:83:a4:3f:b7:29:f8:ef:39:b1:83:
ad:be:92:0a:6b:1e:29:82:21:3d:67:48:2b:f4:10:
7b:c7:ac:47:6b:65:1d:72:dd:d0:72:bc:cc:80:6b:
4a:f1:16:6f:d5:83:75:dc:a4:b8:17:8c:08:54:25:
c5:fc:92:e3:3f:03:9d:03:b3:ec:0a:ee:75:d0:23:
a7:3d:09:c7:fc:6f:81:b1:35:3a:74:97:e4:a7:2e:
97:b4:e7:f7:4c:41:77:6c:bf:e1:7e:e0:37:3e:86:
28:ef:5f:84:4a:44:1f:50:79:36:07:48:ed:f3:1b:
9b:ad:9d:ad:c7:cd:ff:65:41:69:df:de:8d:57:75:
a7:ca:16:61:03:1c:0b:b2:8f:53:fe:de:80:f2:e7:
42:84:e2:2a:e8:26:60:70:38:d5:bc:0e:7b:8e:fc:
cd:04:af:df:b2:22:b9:99:ff:2c:9f:1f:9e:be:94:
b8:d7:ec:87:7c:28:f5:a4:bd:0c:12:72:13:6c:62:
e2:6a:ad:76:1e:3f:08:50:fd:42:7f:bc:c3:cf:5d:
7c:9e:4c:c1:de:56:b8:32:f2:68:26:0f:77:00:26:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:A1:32:7F:F6:EA:81:D5:8E:8B:F4:BC:DC:B4:3B:C0:4E:AA:8C
X509v3 Authority Key Identifier:
keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:47:fc:17:63:64:d2:82:d3:6e:78:bf:5d:7f:19:a8:77:
a0:df:5d:b0:aa:b5:3c:28:f5:47:3a:ff:3e:6f:4f:91:8d:6d:
33:c9:ac:01:75:d4:01:a0:50:fc:8b:2f:3d:09:60:17:d5:fa:
6e:ef:34:e0:dc:5b:31:95:c0:3c:7f:7a:bd:d8:d3:b5:73:f4:
12:9a:e5:27:13:62:42:73:58:21:b6:ae:ab:ba:83:00:2f:45:
b0:ef:35:26:da:42:e0:02:26:0f:dc:1a:21:6c:b5:5e:7e:d3:
87:51:47:72:98:56:d3:38:b9:a0:75:d3:bf:b5:8c:9c:b5:7e:
7f:a6:fa:af:b2:31:17:02:89:cd:94:a4:40:69:46:99:c4:c1:
0c:80:ee:b3:51:83:ce:92:b6:eb:58:e7:af:04:45:5e:68:a2:
73:db:e8:28:06:96:0b:6d:f9:b4:37:2e:0c:87:86:16:b3:97:
d6:6f:cf:64:15:ac:cc:c0:7e:0b:d0:11:ac:a2:e0:21:9b:8b:
87:12:9e:e4:34:ee:9e:a9:e6:1f:fb:44:8d:4f:47:38:9f:d5:
49:04:36:4c:6a:a1:38:2f:de:0e:98:8d:dc:fd:68:b7:ad:5b:
63:ca:67:c7:fc:54:34:34:2f:5c:6c:c5:08:64:d6:ad:7d:83:
5a:10:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 01:11:37 2026 by rpki-client