
Error: rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft
File: DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft (raw, json)
Hash identifier: RlEBDJmeFO5hApiwTBirALzavygO5TvsYSdWtMVRC4Y=
Subject key identifier: 6A:E5:BC:23:8F:65:20:87:03:DF:20:E3:C1:BA:E4:2E:6B:9A:D8:A9
Authority key identifier: DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA
Certificate issuer: /CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA
Certificate serial: 43B15561D1867E146109D310B6EA1FDD3A832DFA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft
Manifest number: 8F
Signing time: Wed 14 Oct 2026 21:20:11 +0000
Manifest this update: Wed 14 Oct 2026 21:15:11 +0000
Manifest next update: Fri 16 Oct 2026 00:10:11 +0000
Files and hashes: 1: 323830343a386565303a3a2f33322d313238203d3e20323733343533.roa (hash: qrT5F7w5lsQJT9f2S7Tiy14nPsm7JfCI43Xmrwr6vRA=)
2: 34352e3136342e3138372e302f32342d3332203d3e20323733343533.roa (hash: RS7Ru0U22xf6KcCDKoQtbNH5gu/B/qKynCsuEPCgqjk=)
3: DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl (hash: ZsfSwCIriKOuw8YVvQGiEKJCIEQrcFPjsVYPIpTnbCo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl
rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 00:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b1:55:61:d1:86:7e:14:61:09:d3:10:b6:ea:1f:dd:3a:83:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA
Validity
Not Before: Oct 14 21:15:11 2026 GMT
Not After : Oct 16 00:10:11 2026 GMT
Subject: CN=6AE5BC238F65208703DF20E3C1BAE42E6B9AD8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:d9:04:72:4f:f0:10:cf:16:24:c6:9a:e0:
8c:2d:6a:69:b5:27:61:73:3d:c1:25:fd:70:be:d0:
1f:17:05:c1:39:ef:d8:e1:a3:71:83:9e:cd:2e:79:
91:8d:aa:dd:c3:1f:4b:dd:93:7c:4e:3a:88:3c:f6:
ed:bb:a9:8e:46:36:bf:e1:11:81:c3:35:27:c4:77:
92:dd:33:58:dc:b9:0d:7b:b7:47:35:95:f2:97:39:
93:5b:15:aa:ae:d7:37:8c:38:f9:35:a8:23:38:95:
a3:86:14:be:dc:29:1e:2a:15:05:d6:cb:57:5b:80:
d7:de:1c:ee:26:62:22:70:58:78:27:fe:01:ed:4d:
14:16:5d:fb:a3:2b:e6:6f:1f:8c:65:b2:ae:de:60:
eb:3d:c5:eb:a1:77:e6:68:64:c7:e2:e9:2a:54:14:
68:e7:a0:05:0b:23:71:60:a9:dc:1e:36:9c:fa:24:
e6:2f:34:1b:0e:d4:e4:55:dc:2f:62:84:92:4f:20:
60:cd:03:bd:77:c3:09:27:9b:9f:10:a8:86:3e:82:
64:97:e2:8a:03:1d:fe:81:a1:63:70:48:ca:85:49:
1e:3c:31:6a:5f:2b:9c:c5:07:36:fe:e2:92:11:9b:
82:49:c6:63:41:d0:37:93:20:cd:b2:83:73:d9:1c:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:BC:23:8F:65:20:87:03:DF:20:E3:C1:BA:E4:2E:6B:9A:D8:A9
X509v3 Authority Key Identifier:
keyid:DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:18:80:6c:32:c5:06:12:a4:98:1f:6d:5f:4b:13:70:f9:
73:a7:be:fa:72:a1:ea:25:7d:89:45:76:ce:c0:98:21:47:d6:
dd:d3:1a:7f:35:7e:b5:1d:55:ec:5e:ad:77:50:2a:02:ad:cb:
12:27:57:d2:9d:7c:3b:43:ae:f8:38:58:fe:4b:c4:05:83:7f:
6f:cc:1e:de:37:13:8f:51:60:ef:5a:47:7b:1b:f3:80:bf:98:
f9:32:1f:ea:95:6e:14:4f:d1:2a:73:e8:ac:98:d4:8b:d3:ea:
29:69:eb:06:84:5a:c2:69:c9:45:2a:69:13:46:1f:54:ac:cd:
71:53:b4:db:01:62:b7:4b:1c:97:04:ff:72:45:ab:7e:fc:9b:
58:d2:20:5f:82:19:ec:70:49:71:c6:d7:17:80:e1:6e:fd:92:
db:50:28:ab:d3:ae:ab:2d:d1:e8:d5:da:ea:da:1b:b9:74:23:
fc:2b:8a:00:72:35:da:41:70:87:d7:43:f6:b3:3c:cb:6d:7f:
7d:37:6e:47:19:6a:8c:db:9c:cb:d3:3a:8e:b6:2a:3c:33:a0:
fc:17:6e:69:50:86:3f:a2:6e:05:cd:3b:82:d9:90:a9:1d:57:
27:ba:a8:69:ef:75:56:1e:b2:89:12:58:94:de:68:b5:e4:d4:
57:4a:ca:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ7FVYdGGfhRhCdMQtuof3TqDLfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBMTdFRUQzQ0EyNDVCN0FFOEQzRTc0ODM5RTExN0Q2
NjE4QUZCQTAeFw0yNjEwMTQyMTE1MTFaFw0yNjEwMTYwMDEwMTFaMDMxMTAvBgNV
BAMTKDZBRTVCQzIzOEY2NTIwODcwM0RGMjBFM0MxQkFFNDJFNkI5QUQ4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowNkEck/wEM8WJMaa4Iwtamm1
J2FzPcEl/XC+0B8XBcE579jho3GDns0ueZGNqt3DH0vdk3xOOog89u27qY5GNr/h
EYHDNSfEd5LdM1jcuQ17t0c1lfKXOZNbFaqu1zeMOPk1qCM4laOGFL7cKR4qFQXW
y1dbgNfeHO4mYiJwWHgn/gHtTRQWXfujK+ZvH4xlsq7eYOs9xeuhd+ZoZMfi6SpU
FGjnoAULI3FgqdweNpz6JOYvNBsO1ORV3C9ihJJPIGDNA713wwknm58QqIY+gmSX
4ooDHf6BoWNwSMqFSR48MWpfK5zFBzb+4pIRm4JJxmNB0DeTIM2yg3PZHPKNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUauW8I49lIIcD3yDjwbrkLmua2KkwHwYDVR0j
BBgwFoAU26F+7TyiRbeujT50g54RfWYYr7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEM0dHRhaFdIQnBoRHNodUVkU1o2eEVxcGMxY0dWa3FROWJmcDdRWnlF
RjYvMC9EQkExN0VFRDNDQTI0NUI3QUU4RDNFNzQ4MzlFMTE3RDY2MThBRkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTE3RUVEM0NBMjQ1QjdB
RThEM0U3NDgzOUUxMTdENjYxOEFGQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEM0dHRhaFdIQnBoRHNodUVkU1o2eEVxcGMxY0dWa3FROWJmcDdRWnlFRjYvMC9E
QkExN0VFRDNDQTI0NUI3QUU4RDNFNzQ4MzlFMTE3RDY2MThBRkJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsQYgGwyxQYSpJgfbV9LE3D5c6e++nKh6iV9iUV2zsCYIUfW3dMafzV+tR1V
7F6td1AqAq3LEidX0p18O0Ou+DhY/kvEBYN/b8we3jcTj1Fg71pHexvzgL+Y+TIf
6pVuFE/RKnPorJjUi9PqKWnrBoRawmnJRSppE0YfVKzNcVO02wFit0sclwT/ckWr
fvybWNIgX4IZ7HBJccbXF4Dhbv2S21Aoq9Ouqy3R6NXa6tobuXQj/CuKAHI12kFw
h9dD9rM8y21/fTduRxlqjNucy9M6jrYqPDOg/BduaVCGP6JuBc07gtmQqR1XJ7qo
ae91Vh6yiRJYlN5oteTUV0rK3Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:52:29 2026 by rpki-client