
Error: rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
File: AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft (raw, json)
Hash identifier: K2flII1sAZ19FrFlYRVY54CXLqUeHTGuKmT/9uXdahs=
Subject key identifier: 49:88:35:9C:85:5F:46:15:24:86:41:EC:63:95:0A:EE:1F:90:52:43
Authority key identifier: AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
Certificate issuer: /CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
Certificate serial: 3834ADFAFE8683F927F1C9386315A56471319118
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
Manifest number: 049D
Signing time: Fri 16 Oct 2026 04:25:44 +0000
Manifest this update: Fri 16 Oct 2026 04:20:44 +0000
Manifest next update: Sat 17 Oct 2026 05:45:44 +0000
Files and hashes: 1: 323830343a343231633a3a2f33322d313238203d3e20323637343738.roa (hash: /0QT0wI7+eYcajSYhgsdXO6q1FxmDqkusXthKyF7MTU=)
2: AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl (hash: Ap/Wf0hXrvpwuDc+RoiEom40HTgC5QNptRJHkXjR31s=)
3: 3138312e3139312e3136342e302f32322d3332203d3e20323637343738.roa (hash: skY15WlSI4tcTncVtazqeblRHAT80w5RYqUax/oiGkQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl
rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 05:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:34:ad:fa:fe:86:83:f9:27:f1:c9:38:63:15:a5:64:71:31:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
Validity
Not Before: Oct 16 04:20:44 2026 GMT
Not After : Oct 17 05:45:44 2026 GMT
Subject: CN=4988359C855F4615248641EC63950AEE1F905243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:51:9a:f1:14:cb:99:8c:58:62:90:b1:77:
6c:1a:a5:b0:95:90:59:e7:d8:6c:1d:48:97:80:0f:
d2:64:d6:dc:1b:9e:09:68:a3:e5:98:ca:34:92:4e:
b8:b2:27:40:ad:82:fb:6e:03:a5:c6:74:f6:18:e2:
b0:13:84:a5:a8:b2:2d:0a:45:bd:3d:13:23:87:65:
04:c9:97:c5:1f:6a:ed:b9:89:f8:4a:27:e8:de:8f:
97:91:b9:77:14:05:f0:2b:be:f4:91:cb:8a:c1:ae:
95:0e:6e:2f:56:c8:23:72:99:6d:17:57:02:37:ff:
6d:70:55:b8:6f:29:a4:8f:cd:4b:7a:03:9b:b4:07:
e0:62:51:1e:a9:49:1c:95:52:89:6e:3f:99:b4:3c:
f2:cb:94:15:57:d4:c7:28:fd:5e:17:9e:c4:2e:ed:
15:63:c7:e5:56:73:28:16:6b:63:fd:68:b0:7b:fa:
03:a7:32:0e:e9:4f:79:99:fb:f8:5d:58:fd:c3:c9:
f8:68:25:e2:8f:1d:0b:07:a1:fb:40:de:51:e4:a0:
71:28:40:ab:b6:9e:0c:62:67:a7:e9:46:21:4d:9c:
69:9b:21:61:29:a1:49:4f:2a:4b:3e:1e:6f:be:5c:
98:ea:54:66:df:04:e2:df:ee:45:3d:09:fb:0f:2f:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:35:9C:85:5F:46:15:24:86:41:EC:63:95:0A:EE:1F:90:52:43
X509v3 Authority Key Identifier:
keyid:AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:98:b0:d9:bf:ee:19:cb:d0:a1:40:4b:11:a5:fd:50:e1:
f9:d6:31:e7:74:d4:9a:3b:7e:f7:ea:a0:0f:53:bb:47:2c:bb:
d1:c1:55:4a:c9:06:1a:7e:56:5b:29:68:74:7c:e4:10:73:0f:
ed:d6:9e:3e:6c:79:a5:ee:25:1a:17:25:e5:f1:a8:81:db:c5:
bf:3e:e1:1a:86:4c:b7:af:04:ba:12:17:11:e1:9b:cc:d1:46:
ea:6b:dc:fa:fc:c6:ee:1b:ec:52:a8:ec:9e:85:63:db:26:31:
1d:c0:9f:92:55:05:d8:f5:6b:1d:ca:a8:11:89:e1:68:c0:e0:
94:27:0a:68:2d:b4:63:c9:2d:99:91:5a:17:b2:bb:60:a1:ad:
2a:b8:4a:47:45:b1:cc:e5:bb:e4:8f:85:9b:63:c3:85:7b:aa:
0f:ea:7f:3c:34:e0:c8:fd:14:b6:c4:12:84:c3:47:83:a8:35:
3c:9c:ad:43:08:57:4d:88:83:1c:87:cf:76:37:78:9b:59:95:
6b:bc:af:ad:b4:cb:e3:ef:8c:ae:d1:d1:61:90:0f:da:36:96:
34:85:0c:47:42:c3:2f:b6:da:d0:c3:f7:19:d9:4d:91:3b:04:
7c:a0:d1:6f:13:8a:72:a1:89:fe:84:ae:be:c5:f2:4f:b4:55:
1d:9b:0a:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUODSt+v6Gg/kn8ck4YxWlZHExkRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxNEM4ODY0QTAxQkUzQUE2MUUzN0RDQTMzQTVGNjZF
RjgzMTQzQjAeFw0yNjEwMTYwNDIwNDRaFw0yNjEwMTcwNTQ1NDRaMDMxMTAvBgNV
BAMTKDQ5ODgzNTlDODU1RjQ2MTUyNDg2NDFFQzYzOTUwQUVFMUY5MDUyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+VGa8RTLmYxYYpCxd2wapbCV
kFnn2GwdSJeAD9Jk1twbngloo+WYyjSSTriyJ0CtgvtuA6XGdPYY4rAThKWosi0K
Rb09EyOHZQTJl8Ufau25ifhKJ+jej5eRuXcUBfArvvSRy4rBrpUObi9WyCNymW0X
VwI3/21wVbhvKaSPzUt6A5u0B+BiUR6pSRyVUoluP5m0PPLLlBVX1Mco/V4XnsQu
7RVjx+VWcygWa2P9aLB7+gOnMg7pT3mZ+/hdWP3DyfhoJeKPHQsHoftA3lHkoHEo
QKu2ngxiZ6fpRiFNnGmbIWEpoUlPKks+Hm++XJjqVGbfBOLf7kU9CfsPL7HRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSYg1nIVfRhUkhkHsY5UK7h+QUkMwHwYDVR0j
BBgwFoAUqxTIhkoBvjqmHjfcozpfZu+DFDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXUyQ0VHQVdMYkhFQzZ3dVRuY3Fnak1WdVFldHNiQXo0NUd5cG13aXJ0
dFIvMC9BQjE0Qzg4NjRBMDFCRTNBQTYxRTM3RENBMzNBNUY2NkVGODMxNDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCMTRDODg2NEEwMUJFM0FB
NjFFMzdEQ0EzM0E1RjY2RUY4MzE0M0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXUyQ0VHQVdMYkhFQzZ3dVRuY3Fnak1WdVFldHNiQXo0NUd5cG13aXJ0dFIvMC9B
QjE0Qzg4NjRBMDFCRTNBQTYxRTM3RENBMzNBNUY2NkVGODMxNDNCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATZ2YsNm/7hnL0KFASxGl/VDh+dYx53TUmjt+9+qgD1O7Ryy70cFVSskGGn5W
WylodHzkEHMP7daePmx5pe4lGhcl5fGogdvFvz7hGoZMt68EuhIXEeGbzNFG6mvc
+vzG7hvsUqjsnoVj2yYxHcCfklUF2PVrHcqoEYnhaMDglCcKaC20Y8ktmZFaF7K7
YKGtKrhKR0WxzOW75I+Fm2PDhXuqD+p/PDTgyP0UtsQShMNHg6g1PJytQwhXTYiD
HIfPdjd4m1mVa7yvrbTL4++MrtHRYZAP2jaWNIUMR0LDL7ba0MP3GdlNkTsEfKDR
bxOKcqGJ/oSuvsXyT7RVHZsKeg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 15:58:25 2026 by rpki-client