
Error: rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
File: 072772F63E62DC06EAED9A555C2C793CEFF59262.mft (raw, json)
Hash identifier: 9oiSNaTsRIRAm73YYnBKIB5/uQXATt9rNUGk7IJbqRE=
Subject key identifier: EB:4F:9C:FA:C5:70:01:88:55:33:D2:E1:1F:AC:8C:8F:03:EC:BE:75
Authority key identifier: 07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
Certificate issuer: /CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Certificate serial: 10459BDDE282E3E73D451BFB2AD190D5F7CC1B2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
Manifest number: 029E
Signing time: Wed 14 Oct 2026 08:30:00 +0000
Manifest this update: Wed 14 Oct 2026 08:25:00 +0000
Manifest next update: Thu 15 Oct 2026 10:46:00 +0000
Files and hashes: 1: 34352e3233362e36302e302f32342d3332203d3e20323731323034.roa (hash: tkxBdhmmrIiPacFA+zr4TDJ+Q8UjFK9N6hFvmYHgsyQ=)
2: 072772F63E62DC06EAED9A555C2C793CEFF59262.crl (hash: KT0AdyaZu5yAR8TnSNsmI1Wlvndc2BneATwhvUsAADk=)
3: 3137392e34392e3139302e302f32332d3332203d3e20323731323034.roa (hash: mOjjEPcviTZ+qCmYX6z5szjAD9RD9p34iWcHM8xiwZY=)
4: 3137392e34392e3138382e302f32332d3332203d3e20323731323034.roa (hash: 9YIbsc02CJRJnEUTXNcVcC3dwpP00GO1wKqEWWc8oqc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 10:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:45:9b:dd:e2:82:e3:e7:3d:45:1b:fb:2a:d1:90:d5:f7:cc:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072772F63E62DC06EAED9A555C2C793CEFF59262
Validity
Not Before: Oct 14 08:25:00 2026 GMT
Not After : Oct 15 10:46:00 2026 GMT
Subject: CN=EB4F9CFAC57001885533D2E11FAC8C8F03ECBE75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:4e:58:82:2a:ed:23:ad:39:98:47:85:c7:
79:ff:3c:95:0b:3d:d1:a6:c1:fb:3c:b7:50:fc:31:
dc:76:8f:72:e1:d3:a8:be:b4:e1:c4:21:53:97:41:
c0:ad:c6:d6:f7:9c:6a:02:ab:26:a3:17:a1:aa:da:
ff:7a:79:4e:47:14:32:65:ed:38:11:5d:95:eb:e2:
d0:61:80:19:c6:ce:48:08:bd:2f:81:63:82:e9:da:
77:31:79:86:bb:c6:0d:37:d2:8c:0a:08:51:47:14:
5c:21:8e:34:50:cb:5a:82:12:c8:a5:42:88:f0:7d:
87:78:9b:d5:4a:be:cf:91:dc:de:ad:11:57:97:e3:
b0:83:4d:c8:fd:a5:76:05:04:7a:56:fa:31:c8:d5:
71:2e:87:f4:36:f8:1d:e9:44:73:4f:d4:55:d0:a6:
c4:7d:1f:95:09:c8:e9:c8:15:23:be:26:37:64:79:
0d:3a:a1:ba:a3:af:b4:f8:35:71:cd:9c:ca:ba:f8:
ad:73:23:4e:ed:15:18:d4:ce:6c:53:b7:d6:07:45:
25:ad:5c:0f:32:87:9b:90:cf:b6:07:42:9f:20:ef:
72:16:0d:0f:3c:85:84:8e:e6:83:6b:39:6b:b7:6c:
53:1c:9f:dc:a6:81:05:5a:6e:a8:21:fe:ca:f7:0d:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:9C:FA:C5:70:01:88:55:33:D2:E1:1F:AC:8C:8F:03:EC:BE:75
X509v3 Authority Key Identifier:
keyid:07:27:72:F6:3E:62:DC:06:EA:ED:9A:55:5C:2C:79:3C:EF:F5:92:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/072772F63E62DC06EAED9A555C2C793CEFF59262.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/072772F63E62DC06EAED9A555C2C793CEFF59262.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:60:13:d6:46:2e:b9:5f:4d:4b:60:11:98:3b:3b:36:32:
e1:7d:f0:cb:24:1c:0d:63:9b:71:d8:84:6e:84:73:d8:6e:0e:
2d:48:67:92:53:11:57:5a:43:88:f2:01:41:b7:c9:5c:06:ba:
84:d3:5c:54:e2:a3:24:4e:a5:bb:d5:8d:fe:6c:c4:75:2b:13:
94:d7:8e:da:12:61:4f:79:ff:aa:70:56:33:6d:ec:8c:36:de:
63:90:13:6f:d4:57:f9:58:bd:c6:12:12:7f:0f:4d:3e:1d:fd:
66:4e:78:99:ef:22:50:69:07:50:d3:83:9b:39:19:50:95:ec:
9c:d1:94:bc:be:63:52:59:10:f2:0b:73:61:55:fe:31:e5:4e:
fb:7c:7d:cd:e9:eb:b7:8f:6c:66:80:99:50:44:23:7c:c3:c3:
30:86:72:89:62:3b:5e:7a:a1:39:ab:fc:ed:06:dd:cf:53:66:
9a:df:b7:d6:42:c6:3a:3b:c6:03:51:ec:ff:73:83:4e:59:b3:
89:da:08:bc:b5:75:61:c7:a7:d1:65:fb:b7:7b:59:0e:f5:f4:
b9:50:03:24:69:bb:4b:b6:3f:2e:89:b8:72:07:a6:e0:c8:fd:
0e:4d:df:bf:d6:16:cc:97:80:5e:4e:3b:2c:36:7e:1e:1e:ca:
94:64:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:50:50 2026 by rpki-client