
Error: rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier: 3mQV2sNkdOdoKEqqgaT4rQ5rEQQMt3DY+Uaok0dj9+U=
Subject key identifier: 1A:86:23:E1:13:4D:4E:9A:D9:81:8E:D6:A2:EF:C4:F3:EE:F6:88:C3
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer: /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial: 32032BD0B4637608E17DF3242314DF1050B00131
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number: 0460
Signing time: Thu 15 Oct 2026 06:57:58 +0000
Manifest this update: Thu 15 Oct 2026 06:52:58 +0000
Manifest next update: Fri 16 Oct 2026 08:01:58 +0000
Files and hashes: 1: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: +TjYpdAsXU+fnV67ojc5JHJAQKNZnNONC8l1uYJW+M8=)
2: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: NZujrVTIXEbJ/ah47MK1vGl3GMmJWho+DffI2Yz4cU4=)
3: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: 4DfyV13MwtfXM/uhjYRxYqb11JnPCP9rJTUEYoKqFAc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 08:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:03:2b:d0:b4:63:76:08:e1:7d:f3:24:23:14:df:10:50:b0:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Validity
Not Before: Oct 15 06:52:58 2026 GMT
Not After : Oct 16 08:01:58 2026 GMT
Subject: CN=1A8623E1134D4E9AD9818ED6A2EFC4F3EEF688C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:6f:a5:d4:01:06:51:a7:5c:c9:c4:5e:00:
24:56:93:ba:0e:7b:a1:4f:00:63:31:26:4d:9a:5c:
13:fd:a1:c5:9e:bf:74:68:13:fc:d5:89:4d:1d:34:
b6:4f:3d:87:92:4c:0b:36:ba:c0:7c:0a:e1:4f:c2:
93:96:e4:93:fe:b2:65:6f:ed:ad:7d:97:df:69:dd:
9e:08:fe:e1:53:29:ab:0e:03:a0:e8:58:60:86:f5:
71:6f:f1:21:6c:8f:4d:ca:fc:7b:78:ea:a3:73:d9:
24:9a:3e:63:7a:ff:f1:a4:3b:78:f5:69:01:c1:5d:
1d:68:4e:83:b5:18:a2:26:de:c6:dd:04:71:2f:65:
74:d4:66:fb:af:c2:95:8a:4d:8b:08:e7:8b:da:5b:
1c:93:11:d1:88:02:03:db:52:39:b9:a6:e7:22:28:
3d:2b:a8:f8:21:0d:6e:4a:cd:95:e2:80:c5:36:f6:
17:70:de:47:c5:d1:c6:06:32:d8:9d:9e:da:05:81:
5d:d3:d8:c0:4e:1e:2e:3a:f7:38:63:5e:bb:a6:32:
40:dc:74:ef:4b:47:9a:5c:6e:86:9b:43:9f:b6:4d:
b6:d9:ea:75:3b:c4:aa:68:be:35:56:a9:b7:42:bf:
32:30:2c:51:f7:98:d9:c9:c6:39:b1:b0:a7:b3:b6:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:86:23:E1:13:4D:4E:9A:D9:81:8E:D6:A2:EF:C4:F3:EE:F6:88:C3
X509v3 Authority Key Identifier:
keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:12:0f:a4:f5:dc:a0:f6:93:9a:3e:58:d8:b0:64:2d:16:a2:
7d:ab:11:30:62:db:f9:cb:2d:f0:d3:39:cb:4c:4a:ea:b2:fd:
4d:18:8e:df:1e:da:a9:29:b1:07:27:7d:a5:e4:17:07:ca:b6:
35:74:e3:c6:b9:e1:e7:d6:4a:fb:9b:a3:23:46:a1:60:07:09:
0d:ce:e4:69:ce:32:80:5d:44:4d:68:b2:d0:04:d4:7b:c9:a8:
9f:7e:36:34:f2:7c:4e:58:4a:aa:17:00:12:32:58:a7:48:c5:
4c:45:39:46:06:75:05:8d:aa:69:dc:9a:6d:3e:a5:06:ff:45:
52:47:84:23:e0:51:c7:69:56:be:85:6f:ef:c2:d0:85:23:9e:
84:a0:ad:1a:46:b9:91:dd:82:47:14:a6:15:98:3f:d9:c3:8c:
81:ca:ac:e4:ad:42:c8:58:6e:38:4d:78:94:8d:ea:76:f1:6b:
9e:5a:1d:7e:74:a6:2d:22:94:5d:b8:c7:75:77:f3:6d:c9:00:
1e:63:ec:9a:3a:f1:1e:83:b3:44:46:78:e2:05:fd:7d:f4:f6:
d3:ed:2b:f4:57:c6:b3:5f:ff:ac:70:a5:53:d2:0c:d6:21:c5:
3f:0c:3a:e1:6e:ad:4e:ff:72:19:61:de:1d:f7:d9:df:3e:c9:
c7:8b:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:31:18 2026 by rpki-client