
Error: rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
File: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft (raw, json)
Hash identifier: ZKQRMJdILQ2MQNTFf+8JLCKBsPtH6Cp3k3bTTt7R/4c=
Subject key identifier: F5:03:8A:B2:06:81:E5:4B:40:14:93:9B:09:17:F4:70:88:BA:A2:91
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Certificate issuer: /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial: 3EA847D4AEF491FED6681BCA7BC4B25DA9327008
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
Manifest number: 04C7
Signing time: Thu 08 Oct 2026 17:42:47 +0000
Manifest this update: Thu 08 Oct 2026 17:37:47 +0000
Manifest next update: Fri 09 Oct 2026 21:39:47 +0000
Files and hashes: 1: 34352e372e35322e302f32322d3234203d3e20323733333435.roa (hash: NiZJYVVGZ0ftfwXmx9j8c/iOChmGAdbQaXcJVtzmGF0=)
2: 323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (hash: g6OZSpwen1cePyDlND9tKg+HeJctA2FCr4CbcxbWtE4=)
3: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl (hash: z7N9q4aefBXnVNip3aU3sEv3GnekTdXwQKosg/WCszc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 21:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a8:47:d4:ae:f4:91:fe:d6:68:1b:ca:7b:c4:b2:5d:a9:32:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Validity
Not Before: Oct 8 17:37:47 2026 GMT
Not After : Oct 9 21:39:47 2026 GMT
Subject: CN=F5038AB20681E54B4014939B0917F47088BAA291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:13:4c:3d:4e:f1:e3:95:53:13:f1:d2:c4:
4a:9f:01:74:c2:c9:86:b5:99:cb:f6:04:d5:8e:e6:
50:13:4b:cf:22:7a:84:cb:97:df:6b:04:f8:9f:be:
c6:3d:0d:22:93:90:0a:c7:7f:96:4f:3f:0b:fc:8c:
b2:65:28:bb:b2:a9:bb:72:48:00:fb:07:fb:5b:21:
57:bc:8d:b7:c4:bc:a3:fa:57:30:6e:db:f7:eb:44:
d4:26:e6:51:47:fd:d7:fb:bf:83:74:19:48:28:09:
38:12:63:f9:37:eb:1d:cf:b1:c9:7c:54:4f:b6:71:
5c:5e:86:c8:7d:36:b3:45:69:09:6f:05:83:fa:b2:
f9:43:45:43:c8:7a:1f:c5:c9:87:34:7d:27:a7:5c:
8e:61:fc:c8:56:51:01:7d:1b:8f:8f:9a:e2:48:27:
7a:a9:c1:cf:f8:ee:e0:fc:1e:6c:da:6e:15:94:a5:
3e:a3:1f:f6:49:9e:fd:e4:4e:9f:47:18:ef:76:01:
7a:37:c6:7d:ac:c6:5b:b4:9e:87:e5:58:10:ea:8d:
c5:89:3d:fb:fa:c1:3c:91:c4:1e:62:72:d1:9b:03:
ad:04:d4:2a:f9:ae:09:ce:99:c1:dd:32:50:98:fa:
1d:a0:d5:65:89:a3:46:54:7f:af:63:36:96:5a:ee:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:8A:B2:06:81:E5:4B:40:14:93:9B:09:17:F4:70:88:BA:A2:91
X509v3 Authority Key Identifier:
keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dd:f7:cb:14:20:bc:5c:b4:fe:db:2c:95:69:96:c7:19:7e:
5f:14:2f:78:e6:57:17:77:6d:fa:76:37:f6:60:e8:0d:56:61:
0f:b5:5d:f9:f3:91:ef:2d:0f:80:b8:89:ee:70:02:f6:11:d5:
97:ad:36:12:1d:db:12:ed:f6:1d:18:62:c7:e4:ec:78:14:b2:
eb:bf:1a:2f:15:2b:d3:5d:2d:7d:5b:2e:11:cc:88:8d:16:45:
72:19:21:2f:37:7d:57:23:4e:d8:34:e2:32:05:d6:75:66:66:
81:e0:cb:70:0e:62:1f:55:63:ab:48:51:1f:ca:e6:82:44:19:
cf:2a:d4:f5:19:3c:4a:26:2f:63:5d:54:62:25:f7:f5:fb:ee:
e5:41:cb:f2:f9:6f:65:0d:28:60:bf:30:7c:c0:56:53:4a:90:
c3:53:5c:a1:75:3f:98:06:b7:3c:a6:52:10:73:0d:ba:c3:5d:
ed:91:83:2d:ce:95:cc:e1:df:39:02:6d:57:8b:e2:df:1a:cb:
52:70:a5:b7:ec:8c:ad:59:27:63:b4:17:f9:44:cd:6c:48:71:
b8:53:20:14:72:70:0c:2a:c2:5e:28:c9:67:cf:72:85:17:65:
b1:bb:0d:c8:a7:7c:c9:84:68:71:a3:c3:3c:e4:2a:47:d7:ad:
8e:28:a9:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPqhH1K70kf7WaBvKe8SyXakycAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBOEVGMzM3QUNGODY5NjRCMUU0NkE3RDZCQTVCMEY5
NEQ4NzRGNDAeFw0yNjEwMDgxNzM3NDdaFw0yNjEwMDkyMTM5NDdaMDMxMTAvBgNV
BAMTKEY1MDM4QUIyMDY4MUU1NEI0MDE0OTM5QjA5MTdGNDcwODhCQUEyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWhNMPU7x45VTE/HSxEqfAXTC
yYa1mcv2BNWO5lATS88ieoTLl99rBPifvsY9DSKTkArHf5ZPPwv8jLJlKLuyqbty
SAD7B/tbIVe8jbfEvKP6VzBu2/frRNQm5lFH/df7v4N0GUgoCTgSY/k36x3Pscl8
VE+2cVxehsh9NrNFaQlvBYP6svlDRUPIeh/FyYc0fSenXI5h/MhWUQF9G4+PmuJI
J3qpwc/47uD8HmzabhWUpT6jH/ZJnv3kTp9HGO92AXo3xn2sxlu0noflWBDqjcWJ
Pfv6wTyRxB5ictGbA60E1Cr5rgnOmcHdMlCY+h2g1WWJo0ZUf69jNpZa7qKPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9QOKsgaB5UtAFJObCRf0cIi6opEwHwYDVR0j
BBgwFoAUoKjvM3rPhpZLHkan1rpbD5TYdPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJj
cGgvMS9BMEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQThFRjMzN0FDRjg2OTY0
QjFFNDZBN0Q2QkE1QjBGOTREODc0RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJjcGgvMS9B
MEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK933yxQgvFy0/tsslWmWxxl+XxQveOZXF3dt+nY39mDoDVZhD7Vd+fOR7y0P
gLiJ7nAC9hHVl602Eh3bEu32HRhix+TseBSy678aLxUr010tfVsuEcyIjRZFchkh
Lzd9VyNO2DTiMgXWdWZmgeDLcA5iH1Vjq0hRH8rmgkQZzyrU9Rk8SiYvY11UYiX3
9fvu5UHL8vlvZQ0oYL8wfMBWU0qQw1NcoXU/mAa3PKZSEHMNusNd7ZGDLc6VzOHf
OQJtV4vi3xrLUnClt+yMrVknY7QX+UTNbEhxuFMgFHJwDCrCXijJZ89yhRdlsbsN
yKd8yYRocaPDPOQqR9etjiip0Q==
-----END CERTIFICATE-----
Generated at Fri Oct 9 07:18:51 2026 by rpki-client