
Error: rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
File: BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft (raw, json)
Hash identifier: TUSrRXmLvreR0ECjhvxd9tfGmTkajXPxiacOslPCboY=
Subject key identifier: DA:DA:33:F2:E5:47:54:E6:1B:01:AC:7F:DE:5F:A9:A2:F7:F1:62:37
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Certificate issuer: /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial: 7F1BF722C803F21D462BD75B3B254F3B65C2E684
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
Manifest number: 0330
Signing time: Fri 09 Oct 2026 22:23:39 +0000
Manifest this update: Fri 09 Oct 2026 22:18:39 +0000
Manifest next update: Sun 11 Oct 2026 02:15:39 +0000
Files and hashes: 1: 3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (hash: IMX9UdwBxXRPLc0X0/j7feimiNAg9z6Y0pLv402RuXs=)
2: 3136342e3136332e32342e302f32332d3233203d3e20323635393336.roa (hash: +gsP+Lr3IaF1U743PXORMLvPmAAZY0iznBd+U3lyhIs=)
3: 3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (hash: YfWFBEOeJXXOLIHO6WNr7Ij0EyHyX5Udg4NU7VZtAcM=)
4: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (hash: s6ol0rD2mKxuW23tNpj/XhXqtq0c7rUoyap48tJKL44=)
5: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (hash: 2IZ3ydIv1kmjMrdfxVV1ooWjVHtwJteit1TfiLCQyBs=)
6: 3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (hash: kdFvMOUtrBiMhEyS1uCvpaD3VXeg4oEwVlJ9EgSzc1g=)
7: 3136342e3136332e32342e302f32322d3232203d3e20323635393336.roa (hash: J40z/WNUzh6NLrmNccEuMKuiYMwNciNV1IPKU1BBa/I=)
8: BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl (hash: NNRqQRmF2UbnEm+7cpPCVgh4qCTTGx3ZL3HrPsH6PBE=)
9: 3136342e3136332e32362e302f32342d3234203d3e20323635393336.roa (hash: PJrszwL06gJXoEEGKYzrBj1hJMnv8uVrLF+St6XmlpA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 02:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1b:f7:22:c8:03:f2:1d:46:2b:d7:5b:3b:25:4f:3b:65:c2:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Validity
Not Before: Oct 9 22:18:39 2026 GMT
Not After : Oct 11 02:15:39 2026 GMT
Subject: CN=DADA33F2E54754E61B01AC7FDE5FA9A2F7F16237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:c8:d6:6e:97:81:f3:db:8f:f7:85:ae:54:
5f:b6:e5:bf:aa:e9:b7:95:5d:9f:c7:cb:92:6b:cc:
11:78:96:b2:3c:bc:c3:df:c0:34:3b:4d:f8:01:04:
5e:f7:91:b1:7c:3b:76:3e:10:9c:89:5d:96:01:fc:
bd:b1:86:7a:5f:7b:42:9b:d1:6f:9c:2f:9d:09:45:
16:83:95:86:62:0f:cd:23:33:64:87:a3:87:b8:a0:
51:89:0d:cc:6c:41:ba:a1:bd:87:3c:11:11:8a:06:
54:c6:24:6e:00:41:b5:0e:09:7d:be:1b:7c:92:1e:
0f:78:e9:0d:bc:47:a5:59:29:17:7d:09:3b:d5:6c:
17:94:d0:5c:41:19:81:ed:6c:dd:a8:4b:f4:c1:e9:
96:1e:de:58:04:bc:6c:60:11:be:6a:19:b4:32:ac:
ac:66:e9:ef:cd:84:ad:f7:6e:cf:98:a9:c8:43:47:
51:ac:bc:ec:fd:70:16:f9:18:d6:c5:45:e1:43:c4:
a6:4d:ae:75:b3:ab:fb:cf:c2:1b:08:74:b8:61:83:
0a:e9:80:de:dd:1d:80:92:85:1b:98:ed:96:68:d9:
3d:c5:f2:8a:cf:e0:39:0f:07:59:db:0b:0f:c0:fa:
62:6e:bf:50:68:a1:e1:28:51:c0:15:10:a1:b0:ff:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DA:33:F2:E5:47:54:E6:1B:01:AC:7F:DE:5F:A9:A2:F7:F1:62:37
X509v3 Authority Key Identifier:
keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:cd:c4:45:cf:0e:f1:7b:9c:04:f1:50:1c:bb:c7:65:8a:
dd:2e:d0:d3:b7:e1:80:21:0d:b1:0f:8f:98:b3:7e:85:a0:2d:
b0:5c:db:a5:9c:de:b2:74:b1:04:c5:06:2a:8b:db:dd:5f:23:
e8:19:66:72:e8:48:1c:b7:7b:28:03:f6:59:31:3f:34:26:ec:
1c:7d:28:3d:95:9e:82:83:fb:ae:c5:12:83:aa:89:83:b6:3c:
6b:3c:22:77:cf:43:8e:1d:d8:f7:03:f3:2e:e6:82:81:07:26:
a2:13:9f:c8:e1:93:42:aa:c6:5d:c2:79:63:37:81:02:e6:60:
13:58:0a:b2:e4:69:c8:67:44:80:c8:e3:bb:ab:61:b3:80:64:
7d:83:a1:a7:75:46:5f:02:54:c6:35:af:65:28:40:94:51:d4:
13:e0:e9:37:af:8a:fb:65:2d:20:f1:57:ad:6a:12:6b:a6:c7:
6a:7a:72:85:91:3c:a2:ba:1e:6f:b5:cb:19:d7:ec:15:5d:58:
f8:71:c5:94:aa:08:2a:8e:b7:be:40:cd:f6:42:51:c6:92:bd:
42:78:0e:0b:4f:37:50:f4:f9:0f:d8:03:9c:95:68:9d:28:af:
fb:d9:b0:d0:31:80:3c:1f:6a:31:2b:81:3f:fa:58:22:49:c4:
98:55:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:32:45 2026 by rpki-client