
Error: rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
File: 805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft (raw, json)
Hash identifier: RH0/ktmMKTv+WBA8sKRTlujL+bpJlWm15YBKXANzPmY=
Subject key identifier: F5:C8:EE:06:D8:9B:C9:95:E8:A3:33:2F:DC:65:7B:A2:65:40:D6:1C
Authority key identifier: 80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
Certificate issuer: /CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Certificate serial: 2A9927856CBA87B0C1861BA46C511B7F2DAE577A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
Manifest number: 04E3
Signing time: Thu 29 Oct 2026 02:28:29 +0000
Manifest this update: Thu 29 Oct 2026 02:23:29 +0000
Manifest next update: Fri 30 Oct 2026 04:10:29 +0000
Files and hashes: 1: 805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl (hash: XTvmpIlvJG10bjYg0GUXkon6sExuxPP06ZaIk16oWjc=)
2: 3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa (hash: ZASR3o0HKQ1hOZT0aWCdjybgkfy/HTufuL9S8gZwaGc=)
3: 323830343a333936383a3a2f33322d3438203d3e20323636303239.roa (hash: wfjol/JK4zjkEKq2cEgWW+T2DuKEQiMv7dfod4lgydA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 04:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:99:27:85:6c:ba:87:b0:c1:86:1b:a4:6c:51:1b:7f:2d:ae:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Validity
Not Before: Oct 29 02:23:29 2026 GMT
Not After : Oct 30 04:10:29 2026 GMT
Subject: CN=F5C8EE06D89BC995E8A3332FDC657BA26540D61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:e4:2a:ac:15:4e:cb:7c:33:5f:cd:02:3f:
db:90:36:87:e7:9c:85:cc:e8:cc:93:08:94:97:42:
8b:e2:4b:32:53:95:44:eb:e8:6a:b9:51:ab:89:b0:
63:f1:91:10:e0:ad:72:1d:df:4e:e7:d6:34:bc:7c:
44:3c:60:f9:7b:b3:8e:6c:9d:cf:8d:13:b5:cf:78:
38:d5:99:bd:70:60:0b:56:81:84:0b:91:28:5a:c9:
b5:82:9c:2f:52:09:c9:df:54:4d:bf:6e:e4:c0:d1:
e6:69:4d:36:84:10:eb:06:fe:71:8b:95:20:d5:27:
99:08:11:c1:c0:98:b8:83:45:91:ce:e4:cb:b7:b8:
a1:83:83:ae:c3:31:66:3a:f7:fd:ae:3c:50:0f:7d:
8b:9d:a2:ea:c6:0c:65:9b:cd:4f:dc:14:ba:01:ce:
f7:f6:08:7e:ad:bc:74:52:ca:d9:a7:90:2e:86:b4:
68:bb:64:45:b5:f8:72:88:5c:6b:6a:be:38:57:29:
ff:37:56:40:bf:c5:6b:85:9f:f2:ec:8b:03:ab:27:
ca:f1:3b:b8:18:53:bc:70:6a:26:ce:35:13:8e:b1:
0d:6f:de:d7:80:12:7c:a5:ac:81:01:7b:f0:6d:3f:
35:c4:ea:41:43:fa:ca:37:53:54:ce:d5:60:47:d9:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:EE:06:D8:9B:C9:95:E8:A3:33:2F:DC:65:7B:A2:65:40:D6:1C
X509v3 Authority Key Identifier:
keyid:80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c7:dd:30:b2:7e:bb:b2:88:ae:c4:a3:c3:cc:34:b6:90:6a:
e4:42:5d:80:bc:10:7f:e0:de:53:46:d1:d2:ed:2a:d5:f6:1b:
96:cf:53:1b:90:f4:24:8b:8b:54:72:45:45:47:34:56:57:5a:
07:21:2e:65:d1:00:3b:4d:6a:a2:5e:eb:ca:71:b5:c2:aa:82:
4a:d5:16:68:bd:a3:3e:b4:79:b0:94:9c:36:ee:67:42:23:1d:
62:05:26:0d:b8:0d:02:2f:ea:19:af:44:94:98:cf:ef:8d:ed:
b0:77:c4:56:c6:f0:90:b3:d6:be:67:ce:6f:eb:43:25:4b:df:
c4:ad:a5:de:0f:6e:be:22:db:2b:4b:b0:05:56:78:a9:83:68:
0e:d0:a6:6f:13:a9:d9:48:50:74:11:d0:a3:9d:5d:72:b3:dc:
e8:54:1f:c4:56:1c:2b:a0:47:7b:34:98:91:64:aa:a4:1d:21:
a1:45:99:9f:f4:3b:78:3c:01:a2:17:0c:96:05:14:94:ed:fc:
23:49:13:83:9a:ed:0b:53:0b:d7:51:0d:5c:45:22:c4:9c:93:
78:ca:29:3a:3e:05:e8:2b:c4:b5:bb:7e:fd:c2:92:61:59:30:
62:87:9f:90:d9:eb:0b:d3:ff:08:21:39:44:a5:5a:bf:08:c7:
83:c1:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:30:30 2026 by rpki-client