
Error: rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File: 8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier: tqdmfyYT+14mPZwGzuN7/Yv/kh1pVYenPKl/z5e5dyE=
Subject key identifier: ED:77:39:C4:51:E4:5F:1C:73:9C:08:E6:82:8C:23:B0:DE:49:6A:61
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer: /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial: 41CA0E42464E5F6E9FF1D6151138AC7A60DDB15E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number: 04CC
Signing time: Mon 12 Oct 2026 17:24:03 +0000
Manifest this update: Mon 12 Oct 2026 17:19:03 +0000
Manifest next update: Tue 13 Oct 2026 20:21:03 +0000
Files and hashes: 1: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: GK0N/dXcGwTo/aodpfd/vk8KKjT+VX376Flyr7bqU5M=)
2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 20:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ca:0e:42:46:4e:5f:6e:9f:f1:d6:15:11:38:ac:7a:60:dd:b1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Validity
Not Before: Oct 12 17:19:03 2026 GMT
Not After : Oct 13 20:21:03 2026 GMT
Subject: CN=ED7739C451E45F1C739C08E6828C23B0DE496A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:c4:8a:d6:35:16:87:60:49:1a:6d:69:f3:
68:3b:42:91:21:5d:a8:ed:b1:85:60:5d:29:c0:6c:
65:c7:08:55:93:3e:9a:10:a5:86:53:fd:ca:6c:e6:
7f:0c:e3:e9:89:a3:23:3c:38:1a:f6:9e:2f:c3:c9:
e1:b3:a2:cd:66:77:2d:21:06:1e:67:5c:41:b8:10:
99:60:57:b9:af:af:a4:f6:63:29:5c:0c:46:cd:f0:
8d:9e:92:a3:dd:5e:b4:a5:c3:0e:82:d5:16:20:09:
41:98:f6:73:63:cf:95:9a:fd:a9:31:a2:47:cf:9e:
9f:63:9b:22:e6:e3:84:f8:6f:d8:fa:af:59:39:17:
2a:9c:c3:c0:84:f3:fc:c4:3a:43:32:b7:c7:20:81:
a4:df:6a:3e:6c:be:27:de:c1:e5:a6:0d:88:eb:74:
5c:0c:ed:58:55:70:86:85:1b:5d:a2:c4:03:86:15:
ca:fd:13:19:aa:23:78:67:47:97:c7:82:9b:c1:df:
31:80:1c:a2:f4:39:09:6f:01:0a:6c:42:28:d2:e8:
41:f1:dc:38:fd:be:f1:5d:4f:8c:b1:67:34:3c:d2:
40:00:30:45:c7:d1:5f:84:07:2e:a5:df:11:0f:14:
5e:dc:b7:84:40:94:77:3d:0d:17:13:3a:06:70:51:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:39:C4:51:E4:5F:1C:73:9C:08:E6:82:8C:23:B0:DE:49:6A:61
X509v3 Authority Key Identifier:
keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:19:a2:6d:54:4b:d5:b9:1b:67:51:58:40:28:26:cb:7f:46:
ac:d8:1e:65:01:5a:30:90:2a:7f:f7:1b:a2:83:8e:29:ce:27:
4d:2e:29:ee:9b:70:11:b2:76:3f:7e:ae:94:4b:34:60:b6:ed:
d9:3b:a1:4d:91:99:8f:d2:e3:36:52:4d:8b:eb:6c:8d:b9:4d:
da:f4:70:b4:4c:b2:45:fd:c2:0c:4e:eb:8f:c5:13:af:59:40:
b8:52:56:69:dc:cc:9a:ec:f1:01:4c:a4:dd:17:a6:f8:92:8d:
68:05:6e:62:50:62:19:83:dc:b1:20:fa:15:44:cb:44:81:4a:
52:7f:fe:6f:ba:22:45:c2:05:24:f6:e4:9a:2a:a6:e4:b1:38:
a0:51:3c:e5:01:59:6e:49:6c:be:eb:75:8d:21:b1:88:ef:2b:
cd:3f:db:2e:bb:e0:86:23:63:62:0f:ee:ee:c1:4d:9e:75:1d:
fa:1c:eb:4f:bf:bb:25:35:6d:73:91:55:f5:0c:7c:db:02:91:
a4:c0:45:f3:f6:5f:b1:5d:2c:45:3b:af:1a:cf:ad:c3:73:e7:
4c:b6:9f:16:e8:a3:bc:af:07:2e:1b:4a:9c:92:03:81:10:7a:
e8:9f:c2:1a:b0:bb:92:d3:83:69:b1:98:4b:78:3b:a7:3a:96:
aa:21:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:06:25 2026 by rpki-client