
Error: rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier: UebSMW0NU3cJOXtmaZHbsexmiK7o+ajiZ57F+QH1vbU=
Subject key identifier: C5:F3:85:CC:8E:85:4C:B2:96:7C:EA:68:A4:77:A2:8D:32:D3:ED:3A
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 02859A1457258F4C8654142637A386C02D1A2FBA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number: 04E2
Signing time: Wed 28 Oct 2026 07:20:00 +0000
Manifest this update: Wed 28 Oct 2026 07:15:00 +0000
Manifest next update: Thu 29 Oct 2026 08:16:00 +0000
Files and hashes: 1: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
2: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
3: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
4: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
5: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: dkYNten6hG8+FVMFJRzEpxfyAtGBykMJ61yYbya1doM=)
6: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
7: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 08:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:85:9a:14:57:25:8f:4c:86:54:14:26:37:a3:86:c0:2d:1a:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Oct 28 07:15:00 2026 GMT
Not After : Oct 29 08:16:00 2026 GMT
Subject: CN=C5F385CC8E854CB2967CEA68A477A28D32D3ED3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:31:65:cf:ae:1c:b4:67:a7:ce:09:26:58:
fe:52:28:5b:f0:ab:f8:5a:c8:c8:9f:05:47:86:04:
1d:a8:da:4c:33:40:e5:5e:a7:a1:58:11:59:8e:3a:
41:6a:0c:de:81:90:e2:a5:84:26:e1:0d:e5:3c:13:
bc:24:d7:1b:bf:92:13:3a:48:39:ab:d1:8d:cd:2e:
94:a4:aa:51:9d:ba:17:62:ae:93:8b:d9:4f:a6:f0:
5b:11:ee:14:07:36:23:a0:ca:82:d8:65:57:ec:e7:
8d:90:ac:ad:c2:e6:b6:22:52:f7:5b:5c:e5:d0:07:
1c:a6:bb:f4:2a:06:69:44:d8:25:3f:f2:09:3a:2c:
e1:19:ca:2a:c3:48:16:8f:41:35:1f:3e:50:a6:cf:
ab:0d:80:d4:e4:a2:f2:d5:cc:a7:8c:d9:1e:9a:ad:
08:31:69:66:30:90:7e:4e:1a:f5:76:c4:76:ed:eb:
49:e3:05:2e:62:d0:07:bd:7a:06:6e:62:d3:0a:2b:
6c:97:33:ef:14:92:0c:bf:11:65:e7:4a:3c:19:d3:
6b:1b:8e:d6:87:db:b2:81:09:ba:e1:e7:15:88:ee:
f2:73:d8:78:a2:e2:15:c5:97:2a:4d:a5:f7:20:3b:
3f:90:e7:41:19:da:a1:55:20:f2:2b:f6:98:d0:83:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:85:CC:8E:85:4C:B2:96:7C:EA:68:A4:77:A2:8D:32:D3:ED:3A
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:8b:7e:22:07:77:c9:11:7c:d0:2f:9e:c5:b7:7e:2d:2b:
fd:75:5a:93:ce:46:d8:cf:c0:04:18:0a:be:50:20:25:c1:b1:
81:89:96:b5:b0:bb:57:01:08:92:2a:1f:74:ff:27:b1:cb:3c:
fa:09:d0:1e:00:41:02:f4:3c:d3:bd:62:5c:9b:bf:19:58:b9:
b2:cf:26:78:8c:f1:0b:58:bb:14:84:15:b4:ba:dd:57:70:ee:
40:e1:bf:fa:a8:0a:af:7d:2c:09:41:e0:81:19:95:86:52:10:
3f:42:c7:5c:18:11:fd:1f:6b:71:2c:5b:19:a8:b2:29:46:9e:
10:c8:b2:8a:89:d6:92:a0:8f:43:99:c9:59:7e:8e:7d:0f:5c:
e3:b0:d6:05:0e:9e:bc:8e:4c:0a:bc:c9:4b:d5:8a:15:8a:c6:
ab:ed:fe:a2:4c:30:3b:2f:9d:18:17:23:4d:e2:75:a8:55:eb:
3d:50:4a:ae:cc:d0:ec:cf:4e:d5:17:dd:87:60:87:d7:53:d3:
fd:43:0a:af:b9:5f:30:0f:18:25:ed:d4:65:87:12:b2:47:3e:
7c:8a:45:83:78:48:d4:40:b2:49:89:ba:85:b5:b0:d3:e1:e9:
8e:b5:09:a6:70:08:ad:79:d5:96:c8:5e:dc:a5:93:97:25:c7:
8e:c7:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:52 2026 by rpki-client