
Error: rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
File: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft (raw, json)
Hash identifier: tLe9cr4buRJJVSjluO2/EW5im9EUMB2h2bC/wPYq0YM=
Subject key identifier: 54:07:CA:E4:F3:42:96:63:D5:2D:C9:AE:CD:CA:D1:3D:53:CE:42:E5
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Certificate issuer: /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial: 44A8FBC5F6BA89E878F78E0DFA2E28A4DA8DA5FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
Manifest number: 04C7
Signing time: Fri 09 Oct 2026 22:50:01 +0000
Manifest this update: Fri 09 Oct 2026 22:45:01 +0000
Manifest next update: Sat 10 Oct 2026 23:34:01 +0000
Files and hashes: 1: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl (hash: MgjscKVZIqqAN1WaNXZQ9fxdLNBqOx3XWfXjzUTlKcw=)
2: 34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (hash: 1bgkEfX/ZiKH+p1a8vc8ehTtCBqKtbVVtw8qkL5lHGI=)
3: 34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (hash: hducqS2ZdGZm+SE5GdXxUznr8Wm7+DXWX3dd+MnB8yI=)
4: 34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (hash: 03Mqs/VxX4YlEDgZyihTQwdg0wG9WA4K0cWVShPcQ/0=)
5: 34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (hash: O1px1yBgfGPgKN2tRciqp1LjemGUV5DFMNwWLnJOCE4=)
6: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (hash: bf/O8ThUR/sxxfb+3RnCJKyXL2K/OaMkDOc8hSaDklY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Oct 2026 23:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a8:fb:c5:f6:ba:89:e8:78:f7:8e:0d:fa:2e:28:a4:da:8d:a5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Validity
Not Before: Oct 9 22:45:01 2026 GMT
Not After : Oct 10 23:34:01 2026 GMT
Subject: CN=5407CAE4F3429663D52DC9AECDCAD13D53CE42E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:c4:0b:ea:ac:90:27:66:9c:53:ec:da:c8:
f6:e1:98:fb:7b:3f:85:c2:a9:df:65:b4:a4:33:96:
47:41:9e:75:75:49:61:90:fb:b6:e8:36:ea:99:95:
e6:0d:fa:11:65:dd:f2:1a:e8:01:26:e8:00:33:bd:
4b:d9:97:dd:64:df:21:49:08:54:7e:f5:07:04:45:
09:ac:d9:27:23:e7:bb:78:f5:07:1b:f0:c8:a2:69:
27:26:a2:7c:a3:bd:79:1e:7e:be:ae:bb:58:19:dd:
14:96:c4:25:8f:41:a9:9f:b2:54:51:f3:6a:14:86:
3d:70:02:0f:a9:b7:1f:02:dc:4b:cf:ef:c2:e4:64:
8f:1d:a9:52:75:34:95:13:b2:5e:a1:7a:76:45:ee:
0f:11:14:96:c1:a7:5e:e1:4b:f0:e6:6e:c5:8f:cd:
46:51:e9:6e:99:c6:26:98:7c:c8:f5:1e:9b:1a:31:
f6:bb:02:2a:03:c5:47:49:7d:a9:77:2f:eb:73:49:
d8:78:aa:f8:aa:22:57:13:91:b1:52:8e:60:1a:4c:
d1:dc:73:6b:3a:a9:f9:91:1f:03:7e:18:42:09:85:
2a:53:94:6c:f9:b0:2c:aa:d8:55:4d:f0:39:61:3a:
88:a6:d1:a1:c7:6c:b1:6b:59:16:44:f4:0d:e5:ba:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:CA:E4:F3:42:96:63:D5:2D:C9:AE:CD:CA:D1:3D:53:CE:42:E5
X509v3 Authority Key Identifier:
keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:9b:92:cc:8c:4d:f2:8a:b6:ff:06:b0:4f:33:fd:47:90:
97:df:d3:0a:15:fa:64:54:6c:b5:30:09:6a:02:29:06:37:22:
ad:1d:60:65:4c:11:98:b2:47:13:fc:70:e6:bf:66:be:bf:7d:
dd:dc:fd:c6:9b:11:d5:74:d0:26:e2:a1:eb:57:82:b7:af:5d:
e5:d6:a5:d1:1f:8f:a3:83:d3:41:b5:58:06:e6:4a:be:1f:d7:
3d:88:cb:6b:ea:55:90:88:91:d4:7c:96:ae:d2:fc:65:c8:84:
01:f5:65:f0:05:f0:f2:99:6e:76:cf:b2:ee:49:fc:4f:0e:cf:
25:9d:35:8a:9a:c5:5d:9c:a1:7d:d7:6b:fd:cf:f8:8c:df:0f:
11:ab:51:fd:18:87:ee:e7:f1:c5:a5:93:41:9b:ba:82:8e:a1:
0f:1e:91:d3:98:2b:38:f1:d0:ea:d2:9b:df:ac:61:f9:3f:7c:
0d:c2:25:d0:48:13:49:a8:43:7d:b9:f7:f1:83:41:88:7e:3c:
63:26:bf:cf:0a:f8:98:b3:16:1c:24:47:18:77:92:a3:dc:e3:
ef:21:b1:8c:dd:a0:d3:46:c9:0f:87:cf:4b:8e:25:56:f1:52:
6c:5a:13:35:ae:1e:af:b0:a6:71:69:e0:c1:50:b2:70:7c:d6:
c7:a4:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:54:40 2026 by rpki-client