
Error: rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
File: 733F4B034A3788745713B6F81B211FD8957CF1EE.mft (raw, json)
Hash identifier: 9LSUQ9JbrW+sdObW/5WQmttZyzWeNRrtA7ZEO0jxdrM=
Subject key identifier: A9:C7:68:5F:0C:78:D1:6F:8B:ED:4B:2A:55:2D:EF:A1:8A:E4:13:C2
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Certificate issuer: /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial: 09F96ABA5D4786FCAAABFB19D5D437790FA9F8C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
Manifest number: 04CE
Signing time: Wed 14 Oct 2026 18:31:20 +0000
Manifest this update: Wed 14 Oct 2026 18:26:20 +0000
Manifest next update: Thu 15 Oct 2026 22:19:20 +0000
Files and hashes: 1: 3136382e302e3139362e302f32322d3234203d3e20323635323635.roa (hash: uIVDUZk2eLRH+jxk52HbsHUXpJiTBIzFAwde6PQTcGc=)
2: 323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (hash: f+YUrCN5kYvokNgrwug1C06hBM0mBzli4EV5hr5Ll6o=)
3: 733F4B034A3788745713B6F81B211FD8957CF1EE.crl (hash: 7wj62FRjqT4WXDUaTV1wBNs9qH1t4VogxegItRUtim4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 22:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f9:6a:ba:5d:47:86:fc:aa:ab:fb:19:d5:d4:37:79:0f:a9:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Validity
Not Before: Oct 14 18:26:20 2026 GMT
Not After : Oct 15 22:19:20 2026 GMT
Subject: CN=A9C7685F0C78D16F8BED4B2A552DEFA18AE413C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:20:65:f2:26:63:55:58:24:38:6b:73:b5:
f4:a9:81:56:13:2d:3f:ac:e9:57:81:b4:b4:7e:e1:
01:ea:81:0d:c9:fe:12:db:63:4c:29:94:32:2c:28:
ae:72:0d:5b:21:04:c1:70:08:be:ac:62:01:aa:51:
74:a6:56:03:51:d3:fe:f4:90:63:10:a1:37:5f:73:
fc:e8:dc:9f:ef:68:5b:84:2e:0c:cc:0a:02:a3:1e:
0b:07:a2:4d:c9:fd:07:64:96:e8:02:7d:58:49:89:
99:4e:32:f1:3f:47:bc:85:df:c0:ae:23:5b:00:80:
5b:fe:ff:53:82:83:94:5a:f0:09:e9:1e:04:ad:7d:
a5:cb:73:9f:3e:c6:90:f6:2e:25:81:d3:b5:e5:a9:
b1:2d:b3:20:77:cd:17:5f:7d:b2:09:b7:36:9e:55:
e5:cd:ed:f7:54:ad:16:ec:c1:26:fc:6e:dc:7b:bc:
ad:5a:94:94:97:b0:87:b8:47:77:a9:f0:df:2b:75:
10:4f:fe:0e:d6:55:7c:a2:3a:27:36:93:f6:94:0f:
90:b3:10:43:79:fc:be:a7:55:ab:bf:17:1a:f8:d3:
87:17:1a:a3:30:b7:ee:81:4f:0a:ef:25:27:81:25:
7a:2f:9d:f2:09:77:40:49:b8:60:bc:f5:e6:21:67:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:68:5F:0C:78:D1:6F:8B:ED:4B:2A:55:2D:EF:A1:8A:E4:13:C2
X509v3 Authority Key Identifier:
keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a6:38:f0:cf:e4:2f:ec:f6:8b:c2:1b:29:25:5a:50:a0:8a:
06:8e:bf:bc:21:d3:b4:45:4b:c5:19:3e:83:2a:ad:50:a1:38:
a8:8c:bb:8c:0b:9f:61:49:ec:41:19:fc:b9:36:61:94:42:5f:
52:33:46:d3:98:be:12:c9:80:70:71:9e:4d:39:ee:a0:16:65:
6b:63:eb:6c:2d:98:2d:9f:e5:fd:69:6a:55:c6:ea:8b:2f:cd:
64:c0:14:fb:90:ef:5c:9f:48:76:fc:4d:74:90:be:4b:05:a5:
0b:13:23:2d:d8:76:2d:e9:71:15:02:d0:92:bb:8c:f9:4b:91:
f5:1a:b3:93:f3:34:c8:33:30:56:60:40:d7:b1:c2:77:0b:90:
df:70:8f:9c:aa:b7:f3:30:3e:f6:75:8e:f6:28:a2:f8:cc:40:
9d:05:cb:61:e9:79:d9:23:15:79:b0:d6:e6:e0:e7:7d:f3:af:
a9:00:80:09:67:6a:fd:12:9d:9c:bf:57:83:0d:b5:c2:88:c0:
5e:72:a4:70:10:82:fe:74:64:a1:52:60:55:5b:88:04:24:8a:
23:5a:6d:7c:f8:dd:f1:d3:a7:4d:24:df:65:7c:70:0a:d1:4e:
57:b9:23:b0:e1:68:d8:41:1f:1d:92:9b:a7:8a:d6:a9:30:84:
aa:fc:fc:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCflqul1Hhvyqq/sZ1dQ3eQ+p+MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzRjRCMDM0QTM3ODg3NDU3MTNCNkY4MUIyMTFGRDg5
NTdDRjFFRTAeFw0yNjEwMTQxODI2MjBaFw0yNjEwMTUyMjE5MjBaMDMxMTAvBgNV
BAMTKEE5Qzc2ODVGMEM3OEQxNkY4QkVENEIyQTU1MkRFRkExOEFFNDEzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNSBl8iZjVVgkOGtztfSpgVYT
LT+s6VeBtLR+4QHqgQ3J/hLbY0wplDIsKK5yDVshBMFwCL6sYgGqUXSmVgNR0/70
kGMQoTdfc/zo3J/vaFuELgzMCgKjHgsHok3J/QdklugCfVhJiZlOMvE/R7yF38Cu
I1sAgFv+/1OCg5Ra8AnpHgStfaXLc58+xpD2LiWB07XlqbEtsyB3zRdffbIJtzae
VeXN7fdUrRbswSb8btx7vK1alJSXsIe4R3ep8N8rdRBP/g7WVXyiOic2k/aUD5Cz
EEN5/L6nVau/Fxr404cXGqMwt+6BTwrvJSeBJXovnfIJd0BJuGC89eYhZ921AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqcdoXwx40W+L7UsqVS3voYrkE8IwHwYDVR0j
BBgwFoAUcz9LA0o3iHRXE7b4GyEf2JV88e4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlDeERqdnFIdzg3TmlIRGd2bVl3M0F4Rjljc3luZzV0aHRaTllYaHZY
SnMvMS83MzNGNEIwMzRBMzc4ODc0NTcxM0I2RjgxQjIxMUZEODk1N0NGMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczM0Y0QjAzNEEzNzg4NzQ1
NzEzQjZGODFCMjExRkQ4OTU3Q0YxRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnlDeERqdnFIdzg3TmlIRGd2bVl3M0F4Rjljc3luZzV0aHRaTllYaHZYSnMvMS83
MzNGNEIwMzRBMzc4ODc0NTcxM0I2RjgxQjIxMUZEODk1N0NGMUVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ6Y48M/kL+z2i8IbKSVaUKCKBo6/vCHTtEVLxRk+gyqtUKE4qIy7jAufYUns
QRn8uTZhlEJfUjNG05i+EsmAcHGeTTnuoBZla2PrbC2YLZ/l/WlqVcbqiy/NZMAU
+5DvXJ9IdvxNdJC+SwWlCxMjLdh2LelxFQLQkruM+UuR9Rqzk/M0yDMwVmBA17HC
dwuQ33CPnKq38zA+9nWO9iii+MxAnQXLYel52SMVebDW5uDnffOvqQCACWdq/RKd
nL9Xgw21wojAXnKkcBCC/nRkoVJgVVuIBCSKI1ptfPjd8dOnTSTfZXxwCtFOV7kj
sOFo2EEfHZKbp4rWqTCEqvz8OQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:49:25 2026 by rpki-client