
Error: rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
File: EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft (raw, json)
Hash identifier: faHVmQalgCFKOGKHVTOlY6f7rbVJQUl9Vt7XYMvpHmc=
Subject key identifier: 57:9A:15:71:F8:E9:8A:CC:37:C1:18:15:23:71:6B:28:5E:10:97:7C
Authority key identifier: EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
Certificate issuer: /CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Certificate serial: 74E3B0005807110BCBDEF82BCBD1220B120856BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
Manifest number: 0569
Signing time: Tue 13 Oct 2026 01:10:00 +0000
Manifest this update: Tue 13 Oct 2026 01:05:00 +0000
Manifest next update: Wed 14 Oct 2026 01:10:00 +0000
Files and hashes: 1: 323830343a366534383a3a2f33322d3335203d3e20323730353836.roa (hash: nFPOmSAfLWs6YOnilTluglYMDMDhIuQzPgJg2Usfc4M=)
2: EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl (hash: HuKFmzRSDmVbD0My0okJfs11VsGpNF/oX0j0HjZrtWM=)
3: 3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (hash: dqfh25QxS8RbRh9Z0pFvfixf33QBdpQUemQv4CBe7Kc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 01:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e3:b0:00:58:07:11:0b:cb:de:f8:2b:cb:d1:22:0b:12:08:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6
Validity
Not Before: Oct 13 01:05:00 2026 GMT
Not After : Oct 14 01:10:00 2026 GMT
Subject: CN=3082010A0282010100BA65C5EA5339B4E061C412F00AB6B7397E05321B7CDD9131C97D23FF441ECCE0AE54366811640BFB0892A9691B7D6379388716E29D1A63A71C7C4965282CE494450C5089A406894F37D34691C5CF640B4148829C0A8DF0669F63CD22F3E10232F0D7B7398E034C011BFF7FC10857564381C06F633E16064730B5B1BB60DE0EAB9821D016AAFF94F99E5C70A264B90543023162C667D39C4520EBC763C613DAF155CBC88C59B0F0F1B132FCC49795FEFC48428EA4440733F617FDF01E2D454582EA3A4FEDB9DABDBF882FDE7704347A40BC29F17ED1D7F68D3EFA67BC877ECDF84DA778D2A78B2868AAF08C4410143D2EE5F45C7CE02571EA1A6F122782127D530203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:c5:ea:53:39:b4:e0:61:c4:12:f0:0a:b6:
b7:39:7e:05:32:1b:7c:dd:91:31:c9:7d:23:ff:44:
1e:cc:e0:ae:54:36:68:11:64:0b:fb:08:92:a9:69:
1b:7d:63:79:38:87:16:e2:9d:1a:63:a7:1c:7c:49:
65:28:2c:e4:94:45:0c:50:89:a4:06:89:4f:37:d3:
46:91:c5:cf:64:0b:41:48:82:9c:0a:8d:f0:66:9f:
63:cd:22:f3:e1:02:32:f0:d7:b7:39:8e:03:4c:01:
1b:ff:7f:c1:08:57:56:43:81:c0:6f:63:3e:16:06:
47:30:b5:b1:bb:60:de:0e:ab:98:21:d0:16:aa:ff:
94:f9:9e:5c:70:a2:64:b9:05:43:02:31:62:c6:67:
d3:9c:45:20:eb:c7:63:c6:13:da:f1:55:cb:c8:8c:
59:b0:f0:f1:b1:32:fc:c4:97:95:fe:fc:48:42:8e:
a4:44:07:33:f6:17:fd:f0:1e:2d:45:45:82:ea:3a:
4f:ed:b9:da:bd:bf:88:2f:de:77:04:34:7a:40:bc:
29:f1:7e:d1:d7:f6:8d:3e:fa:67:bc:87:7e:cd:f8:
4d:a7:78:d2:a7:8b:28:68:aa:f0:8c:44:10:14:3d:
2e:e5:f4:5c:7c:e0:25:71:ea:1a:6f:12:27:82:12:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:15:71:F8:E9:8A:CC:37:C1:18:15:23:71:6B:28:5E:10:97:7C
X509v3 Authority Key Identifier:
keyid:EA:35:0D:DF:6B:8B:36:1C:D6:83:E0:FE:B3:EB:B5:3F:41:71:A9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/1/EA350DDF6B8B361CD683E0FEB3EBB53F4171A9A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:16:c7:44:dc:b9:4c:3e:d5:44:fc:23:bf:ee:cd:fd:c4:82:
fa:aa:af:12:0c:15:bb:23:a0:3e:7a:96:5c:e6:5c:06:f2:ba:
48:63:7e:76:3a:1f:ab:95:2b:02:eb:8a:91:45:10:ff:59:0d:
f5:8e:fa:1d:ba:55:ff:44:dc:bc:2f:8c:cc:06:96:08:65:e6:
d0:45:bf:59:0a:d4:80:f4:4b:ca:13:ed:15:d0:14:76:80:b1:
09:08:f7:27:61:66:6b:f2:44:ec:e9:32:ba:e0:1e:dd:ed:2c:
16:6a:f4:b1:df:b4:46:7d:b0:34:0f:f2:01:52:f1:56:92:69:
26:80:dc:17:23:13:e4:46:d6:59:fe:96:cf:ec:23:ce:01:4f:
1c:f1:d7:c8:41:ef:d0:cc:44:0d:e9:62:2a:2d:4d:66:84:94:
55:5e:45:38:ee:44:06:6c:7a:75:02:d5:91:43:2d:19:72:cb:
1a:3b:30:67:47:fc:a8:33:89:95:d5:03:ea:dc:05:de:bb:58:
57:0b:16:e2:52:72:ed:6e:d2:05:9f:49:94:9d:d5:18:1c:a2:
ad:b6:6d:94:66:52:dc:46:c2:bd:b8:a7:ed:61:ff:b0:ee:38:
d0:0b:90:d0:3c:29:66:c1:c0:fb:77:ce:ac:88:80:61:f1:ca:
9f:27:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:31:51 2026 by rpki-client