
Error: rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json)
Hash identifier: WRhbdt/f2XiNolV8l87AqAO+94zbnkFbBJuteMpVXTo=
Subject key identifier: 28:8C:7F:EB:3F:03:43:80:20:26:98:2C:9A:1E:D5:9C:B7:09:EF:B2
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial: 7E8C91FF6937F852EDCB74ACBDBEBB5D1BF556B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
Manifest number: 045F
Signing time: Wed 28 Oct 2026 06:44:45 +0000
Manifest this update: Wed 28 Oct 2026 06:39:45 +0000
Manifest next update: Thu 29 Oct 2026 10:31:45 +0000
Files and hashes: 1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: PwEE2yFzWkd/RQGOKXJbPG6Y0N/z1Yd/al3n0qj/auM=)
2: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: rpzTvujFf5WqwOlcgDZSFzIkdHepRTqi1III3eflS2U=)
3: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: lx6LkkFhxt38af9xNDLdYwScreDXl+yowikmxAZYYKA=)
4: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: P6G6AZFRp5kqOosNoCryglvvtcBc6hA5DOR0IbYdZVw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 10:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8c:91:ff:69:37:f8:52:ed:cb:74:ac:bd:be:bb:5d:1b:f5:56:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Validity
Not Before: Oct 28 06:39:45 2026 GMT
Not After : Oct 29 10:31:45 2026 GMT
Subject: CN=288C7FEB3F0343802026982C9A1ED59CB709EFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:19:af:80:6e:1e:b6:4f:36:b4:1c:43:26:
5f:c2:5f:64:03:f5:4e:dd:99:99:16:e8:7e:21:8c:
dc:0b:1d:30:8d:93:87:99:a3:d5:37:3e:0a:ec:32:
69:a8:19:5e:44:93:e9:4f:44:e7:23:f4:68:5b:80:
d8:bc:b7:a9:a0:7c:16:04:c2:0e:67:de:0d:d4:7d:
6c:34:76:8c:01:b1:b6:f2:d0:75:fd:f9:41:4c:ab:
30:95:ec:8c:94:62:2b:17:c4:be:a2:33:68:2e:34:
73:2c:69:e2:c1:94:b1:f7:d4:6c:71:4a:41:7f:eb:
1b:f9:22:94:32:ef:b8:4f:1a:39:dc:70:dd:54:c1:
99:53:12:6b:94:03:56:3c:be:4c:a1:70:f7:77:97:
80:2e:89:60:96:62:72:65:12:89:3d:78:59:84:ad:
4c:3a:fa:60:de:fb:8e:e8:10:14:15:2d:f3:7b:f1:
c2:93:1b:5d:33:10:10:e4:d7:c0:d6:29:f2:cb:e2:
dc:dd:da:62:70:9a:35:d8:95:de:6c:7a:63:8b:1c:
be:57:bb:03:0f:6a:00:11:08:f7:0d:e6:25:62:fd:
ee:ef:3e:86:3d:1f:c9:06:dd:54:42:ea:d6:ba:83:
75:3c:18:0e:19:1c:57:ea:93:20:c8:b0:8a:11:94:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8C:7F:EB:3F:03:43:80:20:26:98:2C:9A:1E:D5:9C:B7:09:EF:B2
X509v3 Authority Key Identifier:
keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9c:19:5a:28:8b:72:a4:b9:9d:48:43:63:2c:79:a1:8b:b3:
ed:20:8a:da:6f:54:8b:40:ac:ac:20:49:04:8e:7f:b9:39:a0:
36:b3:45:e8:14:db:b6:f5:01:57:27:66:ff:d8:95:8c:48:9f:
ea:45:a6:22:b1:30:7f:76:f5:b6:fe:73:75:5e:e9:ca:c9:b1:
c9:64:8a:8e:31:72:ad:dd:bf:33:e7:e1:db:d0:29:e4:bb:3b:
79:6a:d7:1e:2f:32:d5:5a:a7:a0:3c:6c:87:97:bd:96:30:81:
ab:ab:13:ed:eb:20:96:07:88:41:5d:18:ec:50:58:d2:05:43:
8d:41:cf:9b:44:50:65:5a:77:ae:1d:29:a8:c3:4d:b5:89:c8:
2d:a6:0a:be:eb:4d:47:db:53:ec:df:54:b0:ea:cc:81:e6:4f:
11:f8:2f:7f:f1:94:a5:00:e1:48:98:d3:52:96:20:00:84:e0:
a2:4f:0d:ef:71:4e:97:57:3d:d3:eb:af:64:15:07:f5:de:02:
24:9c:f9:0f:ac:5c:3a:06:12:50:b7:61:13:44:85:cb:e9:66:
53:ab:9b:36:cc:f9:59:c6:84:ac:3b:f1:4c:31:b9:29:c1:6b:
f6:5e:0b:16:be:3c:52:90:b8:c6:50:64:63:09:78:a9:96:d0:
d9:92:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:08:40 2026 by rpki-client