
Error: rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
File: 40636332B02FA344DE75686E874C7425B2C58624.mft (raw, json)
Hash identifier: cDIoz+66hBmUIM3qrD1ytsAPvnydDmJZ3p1F6im+xtY=
Subject key identifier: EB:1F:B1:7D:CE:E9:DB:22:C5:B5:25:59:E2:85:B6:00:EB:11:F6:29
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Certificate issuer: /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial: 7935550725A50A294AB9B7368582E8838A8BB0BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
Manifest number: 04E8
Signing time: Tue 03 Nov 2026 22:38:26 +0000
Manifest this update: Tue 03 Nov 2026 22:33:26 +0000
Manifest next update: Wed 04 Nov 2026 23:22:26 +0000
Files and hashes: 1: 40636332B02FA344DE75686E874C7425B2C58624.crl (hash: cOabzh6xetaTaFk8+sPu+8DtgTAq8kihiQK9lXHCTSk=)
2: 3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa (hash: 14gDW6bEJ9nJvPx8geN4NCkeLK5VnotpToXU6B74rok=)
3: 3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (hash: TsrN8pTw6ZoFMtakcgirSnXXXiQlJtEA8lLaO/9aSf8=)
4: 3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (hash: 1zlZh1RIyKIORzy/QdPKcAzVf4S4RmInWHqoPdIt8qs=)
5: 3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa (hash: /f1V0+9KbBzDlBJGGbpsQIfjbnVsZ4ioE+6Q7Tknrh4=)
6: 323830343a313539343a3a2f33332d3333203d3e20323633333936.roa (hash: 6jOZ/akJsCcydY98wvMjgXw/yMnB/On87tVhv/IQqHo=)
7: 3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (hash: ZutIjgA9rply9urf4o/OjFFNcP6znXGqJErFQUef1dc=)
8: 323830343a313539343a3a2f33322d3332203d3e20323633333936.roa (hash: 10EDhCZ/lsgtyh2/uvnbJQXhbfL58osWesEEi3zL6B0=)
9: 323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (hash: hLzqmsCKgsDSOYYsfd9uplhuDbU2l7wN+x1Gqbuga7Y=)
10: 3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa (hash: pFcTTFEs7PFgDKngTK+jG96Za1sfiHeBOPiCfu6eDWE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 04 Nov 2026 23:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:35:55:07:25:a5:0a:29:4a:b9:b7:36:85:82:e8:83:8a:8b:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
Validity
Not Before: Nov 3 22:33:26 2026 GMT
Not After : Nov 4 23:22:26 2026 GMT
Subject: CN=EB1FB17DCEE9DB22C5B52559E285B600EB11F629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:14:0b:08:81:77:78:fc:07:df:25:54:d5:
09:5e:58:85:42:7a:c6:83:38:5b:bb:44:0f:cf:20:
eb:fc:7d:70:65:27:37:84:59:67:1b:91:a7:81:9b:
b0:76:c6:fd:e3:db:0f:af:bd:e8:e5:f6:c8:2b:2c:
c4:9a:99:53:dd:be:96:0d:0e:82:34:40:0f:4d:3f:
89:d6:b3:b6:36:fe:b4:d0:77:52:dd:42:93:fd:d8:
9f:2d:30:2b:1c:ad:75:65:63:43:ec:ec:11:9f:5d:
8f:f6:50:af:c8:df:28:db:bd:f1:c3:2f:04:ae:b8:
46:d9:76:fa:0a:ad:0d:9b:3f:4a:9e:90:8c:a8:b3:
b2:6f:fa:bb:17:b5:9b:73:8a:94:ed:e6:a6:1a:e1:
32:2e:10:48:85:0a:03:4f:ec:14:87:da:42:0c:f0:
60:ce:df:16:c1:0d:f6:bc:c4:93:d7:16:b3:98:48:
57:be:14:b2:d2:06:06:de:a9:11:94:8c:ec:52:a5:
9b:a3:a4:eb:f8:ee:bf:7c:7f:44:96:8b:b7:80:c1:
67:47:58:78:05:7b:61:29:f1:d1:2c:d7:20:9a:e8:
12:02:18:ed:b5:04:5d:e4:53:ec:1e:3b:5c:80:ff:
a0:a3:9c:1d:36:1a:81:87:48:56:2d:0f:6a:1d:8a:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:B1:7D:CE:E9:DB:22:C5:B5:25:59:E2:85:B6:00:EB:11:F6:29
X509v3 Authority Key Identifier:
keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:14:a9:24:a4:03:57:8c:3d:a4:cc:42:ea:ae:28:9a:d3:ff:
8a:2a:33:44:32:39:94:62:12:38:78:11:a7:33:cd:d2:d5:cb:
e0:81:c9:fd:21:4d:36:ac:d3:77:4c:f1:84:c6:ab:e1:63:43:
24:65:83:fd:fd:c6:14:45:87:24:cd:da:71:21:fd:0e:d1:84:
a6:ad:0a:f6:1c:e5:07:a4:48:36:6a:d6:24:85:46:06:99:60:
9b:13:4b:c0:a5:fa:ab:f6:60:45:aa:5a:a7:f5:cc:98:6b:20:
84:2a:bc:b6:43:dc:52:5b:06:4f:f0:cb:f4:85:07:3e:ed:7a:
d1:11:c3:d7:4b:d4:55:53:fe:85:29:38:9d:86:77:e6:38:84:
02:2c:f7:23:a1:3a:68:69:23:08:46:33:6c:56:12:7d:06:32:
1d:ba:af:ea:30:56:32:35:d0:9d:a9:08:a5:ff:9f:02:d6:c6:
2c:a7:33:a6:76:4d:3b:1a:2f:17:78:06:68:61:c2:f3:52:f8:
8e:06:65:18:1c:7e:e0:c7:a0:14:48:33:d9:e9:91:93:4d:bf:
3b:48:f3:40:be:5e:27:bc:2b:94:a4:e0:05:ce:70:e0:6c:a8:
93:4b:e9:f1:4a:a7:33:40:5b:b3:66:7d:b8:86:21:31:24:11:
26:08:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:15:13 2026 by rpki-client