
Error: rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
File: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft (raw, json)
Hash identifier: hrc58fWl1Xu3LaSFj4TToUL+Ec3py2JWRmxHV+UJOpM=
Subject key identifier: D9:9F:CD:DF:30:6A:1E:BE:AF:DB:8A:09:5E:42:6B:48:A3:8E:B6:A5
Authority key identifier: 89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
Certificate issuer: /CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
Certificate serial: 597A59C30519A057E139CD103D2053E0C74F364B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
Manifest number: 0206
Signing time: Mon 19 Oct 2026 10:36:43 +0000
Manifest this update: Mon 19 Oct 2026 10:31:43 +0000
Manifest next update: Tue 20 Oct 2026 14:09:43 +0000
Files and hashes: 1: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl (hash: 3/OjTNg5a+bc2jDTEsx6DY9pPw6toQVLgJ6/AR3057M=)
2: 3137372e36362e3234382e302f32312d3234203d3e203532363630.roa (hash: xN3bu+hrUsdVdbix70SKkWGQ41cVVH+XPWAkjFYhZWM=)
3: 323830343a6330343a3a2f33322d3334203d3e203532363630.roa (hash: +G1IAl9Sd7m0R2Z+3JsRr5Gm0I2AW+JC75YFx96I7H0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl
rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 14:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7a:59:c3:05:19:a0:57:e1:39:cd:10:3d:20:53:e0:c7:4f:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
Validity
Not Before: Oct 19 10:31:43 2026 GMT
Not After : Oct 20 14:09:43 2026 GMT
Subject: CN=D99FCDDF306A1EBEAFDB8A095E426B48A38EB6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:04:8f:db:a6:20:4b:73:4d:26:fe:6b:d6:
c8:86:98:03:36:d0:e3:43:04:e9:70:3a:93:86:37:
35:fb:a6:38:7f:a6:15:14:e0:c4:fd:a6:6a:b9:18:
6f:4d:d5:d7:e3:46:35:f0:ae:a5:03:e5:7e:7e:c1:
da:be:2c:c4:29:ea:3a:1f:19:9f:ab:9c:ca:b4:0e:
34:e4:b5:05:fa:0a:d8:6d:20:4e:f3:e7:03:e3:7b:
92:bf:65:b2:a4:7e:f4:e4:d8:50:be:26:d1:3d:87:
eb:9e:aa:e2:1a:06:82:67:8a:64:41:7f:f3:90:71:
05:c7:c7:f2:42:e8:fd:5b:b9:b3:21:c4:ac:af:51:
83:db:8f:6c:3b:b5:ad:ae:b7:e8:e6:eb:ad:36:c4:
81:f5:a6:d5:71:26:a5:3d:25:50:6d:5c:80:34:0e:
88:79:ae:92:d0:dd:a6:a9:7e:64:af:3b:c9:c8:ba:
e2:f3:fc:d9:53:3d:6f:5c:25:6a:c5:32:b1:4e:c7:
32:1a:a4:72:73:e5:21:83:37:70:42:71:b0:d0:72:
db:73:fc:75:4f:8a:b1:43:66:da:4f:67:dc:47:85:
35:cf:49:46:11:10:e9:82:ea:70:69:cf:0c:1a:89:
48:d0:df:59:9f:e8:8c:05:7c:d6:56:91:a5:3b:3a:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:CD:DF:30:6A:1E:BE:AF:DB:8A:09:5E:42:6B:48:A3:8E:B6:A5
X509v3 Authority Key Identifier:
keyid:89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:92:c7:b7:98:fc:3a:a2:1d:a6:26:4a:f5:eb:8b:70:d5:e4:
3d:8e:86:14:96:89:fd:4f:cb:9a:16:3f:06:47:9c:be:c2:58:
81:3a:b2:b5:f2:28:7a:6d:bb:5a:26:0e:1e:9c:1c:89:fa:e5:
df:fa:5d:a9:43:e1:88:21:8b:b0:80:93:62:9a:f4:34:88:34:
b9:1d:9a:5d:12:50:19:c1:63:d4:3c:07:d4:8b:22:6c:75:ff:
1c:80:20:04:1d:ba:f8:8a:5d:3e:a1:71:e6:ba:ce:6e:70:bf:
ca:42:67:80:97:c5:dd:4e:2c:79:8e:ab:26:32:fb:22:c1:01:
6a:71:12:3c:55:b1:39:7f:ae:fc:4a:9e:04:1c:99:87:de:c8:
64:1f:ae:0f:f1:d8:9f:5d:f7:86:d6:a9:66:07:d0:af:eb:4d:
34:df:0c:0f:08:3f:fb:ad:da:c2:1c:f2:05:4e:f0:79:c4:45:
c1:ee:3d:d0:9c:62:1a:68:a4:25:b8:cf:4e:9a:12:50:64:c6:
a5:b0:0c:1c:1e:c4:fa:10:21:1b:38:8c:9d:db:19:2d:22:a9:
8d:7f:70:a5:30:f6:44:b3:32:0f:17:95:0f:14:1e:2d:a5:95:
4c:b9:99:7e:50:c1:c5:a6:d6:28:7b:61:8c:99:4b:f8:cf:29:
d0:a4:53:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWXpZwwUZoFfhOc0QPSBT4MdPNkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk4MzBDQjlFMzk1MkVCQjg4RERFMUI2MzcwNzUyN0Q2
MkY3QUI2MzAeFw0yNjEwMTkxMDMxNDNaFw0yNjEwMjAxNDA5NDNaMDMxMTAvBgNV
BAMTKEQ5OUZDRERGMzA2QTFFQkVBRkRCOEEwOTVFNDI2QjQ4QTM4RUI2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLswSP26YgS3NNJv5r1siGmAM2
0ONDBOlwOpOGNzX7pjh/phUU4MT9pmq5GG9N1dfjRjXwrqUD5X5+wdq+LMQp6jof
GZ+rnMq0DjTktQX6CthtIE7z5wPje5K/ZbKkfvTk2FC+JtE9h+uequIaBoJnimRB
f/OQcQXHx/JC6P1bubMhxKyvUYPbj2w7ta2ut+jm6602xIH1ptVxJqU9JVBtXIA0
Doh5rpLQ3aapfmSvO8nIuuLz/NlTPW9cJWrFMrFOxzIapHJz5SGDN3BCcbDQcttz
/HVPirFDZtpPZ9xHhTXPSUYREOmC6nBpzwwaiUjQ31mf6IwFfNZWkaU7OmX5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2Z/N3zBqHr6v24oJXkJrSKOOtqUwHwYDVR0j
BBgwFoAUiYMMueOVLruI3eG2NwdSfWL3q2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR
MXEvMC84OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5ODMwQ0I5RTM5NTJFQkI4
OERERTFCNjM3MDc1MjdENjJGN0FCNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNRMXEvMC84
OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtZLHt5j8OqIdpiZK9euLcNXkPY6GFJaJ/U/LmhY/BkecvsJYgTqytfIoem27
WiYOHpwcifrl3/pdqUPhiCGLsICTYpr0NIg0uR2aXRJQGcFj1DwH1IsibHX/HIAg
BB26+IpdPqFx5rrObnC/ykJngJfF3U4seY6rJjL7IsEBanESPFWxOX+u/EqeBByZ
h97IZB+uD/HYn133htapZgfQr+tNNN8MDwg/+63awhzyBU7wecRFwe490JxiGmik
JbjPTpoSUGTGpbAMHB7E+hAhGziMndsZLSKpjX9wpTD2RLMyDxeVDxQeLaWVTLmZ
flDBxabWKHthjJlL+M8p0KRTlA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 03:46:06 2026 by rpki-client