
Error: rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
File: 66DCAA5522EEEC15CC978DE673986E897244B698.mft (raw, json)
Hash identifier: UGqvSyvDio9pJnIEZHoh1/hOlFXosVTRBbihYqfi2lo=
Subject key identifier: 15:0D:C1:5F:D5:2D:5E:C6:D6:A6:5D:4E:3E:FC:1F:1E:2C:FA:CC:8A
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Certificate issuer: /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial: 18713F7706B13FA4C889DBB3454CD475D0E63661
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
Manifest number: 04B7
Signing time: Mon 02 Nov 2026 09:58:39 +0000
Manifest this update: Mon 02 Nov 2026 09:53:39 +0000
Manifest next update: Tue 03 Nov 2026 10:47:39 +0000
Files and hashes: 1: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (hash: x84RGPPkt0sU6lKdwenGp4sAlumzGUiPtCRVvZsh/S4=)
2: 66DCAA5522EEEC15CC978DE673986E897244B698.crl (hash: 9ugaW1x4C84SJe9XwARDVTHuFH+fdEjXNgZ5O8LUKrQ=)
3: 323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (hash: I9gHK0OPZNSJDH24XSoutl8irH0yInPQz+/ZuTKvWxY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 10:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:71:3f:77:06:b1:3f:a4:c8:89:db:b3:45:4c:d4:75:d0:e6:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
Validity
Not Before: Nov 2 09:53:39 2026 GMT
Not After : Nov 3 10:47:39 2026 GMT
Subject: CN=150DC15FD52D5EC6D6A65D4E3EFC1F1E2CFACC8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:b1:54:d7:cd:9d:3e:75:1a:aa:63:17:cb:
96:8e:d1:0d:1b:96:40:dc:0f:8c:3a:66:6e:7e:d4:
84:14:d7:ab:3c:c0:56:9b:8d:4a:96:96:36:72:88:
35:eb:46:77:61:ec:08:e0:14:3e:92:fc:37:64:a8:
98:dd:58:d4:b3:cb:a3:b4:22:98:b2:d8:f8:5d:0c:
7a:57:d3:65:c9:16:52:4d:4b:c3:8e:72:cf:5d:0d:
22:25:12:99:15:a5:46:6d:90:a6:4a:d4:54:0d:24:
64:44:5f:ed:60:5b:a2:f8:91:b7:46:17:d2:41:1b:
92:4c:40:61:5c:bd:af:7a:7f:ad:9f:ac:47:30:36:
f8:ba:87:b6:88:d0:58:4a:1e:2d:09:f3:87:fa:77:
4b:30:68:76:71:81:99:f9:91:bf:6e:3c:93:73:f8:
30:4d:43:74:27:91:06:98:19:02:bd:e0:23:69:ae:
76:29:d2:8f:af:d1:57:8d:64:4b:6d:38:33:98:9e:
29:05:dd:7b:74:cb:42:7f:ea:e7:70:02:97:f3:91:
c7:1f:56:75:20:cb:86:57:b4:38:93:0d:30:2b:36:
c0:e6:56:4a:d8:a1:49:14:a7:b0:21:7c:a5:f4:73:
c2:7d:ee:f3:9c:10:73:06:2e:c7:f9:c4:70:9e:cc:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:C1:5F:D5:2D:5E:C6:D6:A6:5D:4E:3E:FC:1F:1E:2C:FA:CC:8A
X509v3 Authority Key Identifier:
keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:9e:ad:1d:2e:7a:71:e8:af:79:0d:45:76:bc:bd:05:1f:
bb:8f:2f:df:cf:11:89:47:a4:b4:65:b8:9b:63:51:2e:4b:41:
2c:73:57:c8:52:28:4a:fb:af:4f:64:f6:49:c8:f6:76:e9:31:
f7:e8:9c:83:6b:b7:00:88:2b:32:21:3f:a9:90:78:8d:be:2c:
26:a8:0e:c7:a3:e7:6b:d6:41:d0:a8:c6:0d:16:3b:f5:f1:01:
81:6e:5e:1f:1d:6a:80:5a:fe:30:57:33:81:03:e0:9e:c0:90:
77:22:16:6c:0f:52:2b:84:b1:97:cc:b8:d8:a1:90:21:c0:a5:
03:3a:ce:8f:74:24:38:62:e6:d5:4d:af:b2:53:c1:31:aa:27:
80:2c:01:95:cc:a7:7c:54:1a:77:ed:b6:ad:50:49:21:32:94:
b7:88:9e:bf:d1:cf:72:9d:1b:ea:c9:c1:9b:1a:86:b2:d7:79:
60:74:9a:b9:27:06:32:ec:27:08:d2:80:f9:d9:65:af:c0:03:
26:5a:13:50:16:cb:5f:b5:06:2f:8d:f0:4c:06:3d:c1:e7:45:
72:d8:14:eb:ab:1e:66:ae:9d:55:13:01:7c:14:75:27:54:b7:
ca:96:5d:50:82:5e:e7:df:a6:ac:55:22:88:dd:10:d3:c7:99:
9f:83:e6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGHE/dwaxP6TIiduzRUzUddDmNmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZEQ0FBNTUyMkVFRUMxNUNDOTc4REU2NzM5ODZFODk3
MjQ0QjY5ODAeFw0yNjExMDIwOTUzMzlaFw0yNjExMDMxMDQ3MzlaMDMxMTAvBgNV
BAMTKDE1MERDMTVGRDUyRDVFQzZENkE2NUQ0RTNFRkMxRjFFMkNGQUNDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFrFU182dPnUaqmMXy5aO0Q0b
lkDcD4w6Zm5+1IQU16s8wFabjUqWljZyiDXrRndh7AjgFD6S/DdkqJjdWNSzy6O0
Ipiy2PhdDHpX02XJFlJNS8OOcs9dDSIlEpkVpUZtkKZK1FQNJGREX+1gW6L4kbdG
F9JBG5JMQGFcva96f62frEcwNvi6h7aI0FhKHi0J84f6d0swaHZxgZn5kb9uPJNz
+DBNQ3QnkQaYGQK94CNprnYp0o+v0VeNZEttODOYnikF3Xt0y0J/6udwApfzkccf
VnUgy4ZXtDiTDTArNsDmVkrYoUkUp7AhfKX0c8J97vOcEHMGLsf5xHCezE4/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFQ3BX9UtXsbWpl1OPvwfHiz6zIowHwYDVR0j
BBgwFoAUZtyqVSLu7BXMl43mc5huiXJEtpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5W
YmsvMC82NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RENBQTU1MjJFRUVDMTVD
Qzk3OERFNjczOTg2RTg5NzI0NEI2OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5WYmsvMC82
NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoK+erR0uenHor3kNRXa8vQUfu48v388RiUektGW4m2NRLktBLHNXyFIoSvuv
T2T2Scj2dukx9+icg2u3AIgrMiE/qZB4jb4sJqgOx6Pna9ZB0KjGDRY79fEBgW5e
Hx1qgFr+MFczgQPgnsCQdyIWbA9SK4Sxl8y42KGQIcClAzrOj3QkOGLm1U2vslPB
MaongCwBlcynfFQad+22rVBJITKUt4iev9HPcp0b6snBmxqGstd5YHSauScGMuwn
CNKA+dllr8ADJloTUBbLX7UGL43wTAY9wedFctgU66seZq6dVRMBfBR1J1S3ypZd
UIJe59+mrFUiiN0Q08eZn4Pmlw==
-----END CERTIFICATE-----
Generated at Tue Nov 3 02:09:08 2026 by rpki-client