
Error: rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
File: 5A40D3E78C135512BC4447988687E789A73E2C20.mft (raw, json)
Hash identifier: 6L7wYuNaHO8bO23ivqZPe+/4nHnXl5DkblMkvZObOBk=
Subject key identifier: 61:99:F8:09:A9:2F:F2:F0:27:80:A5:3B:00:6F:1A:87:CC:C0:4D:7B
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Certificate issuer: /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial: 49226991AF7689B55AE2925588AC64FED69EE1E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
Manifest number: 33
Signing time: Sun 23 Aug 2026 02:53:14 +0000
Manifest this update: Sun 23 Aug 2026 02:48:14 +0000
Manifest next update: Mon 24 Aug 2026 05:27:14 +0000
Files and hashes: 1: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: UVOVadSw6VDeGZIdlFJ1FOwZn7iXLlg1EqYX8I9FWDk=)
2: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: sWTASS4g/VzQt8ztnYDAizFTeNgJZn9vWfZfOQ+b4aw=)
3: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: PHlLU6EBn+KwgERm+tPlUEdoLYTiUPlZg5NHJbQMN04=)
4: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: xDntTwhPB4XbvoGLNelJS6bPDWp1hb5W0Gl/HScIXQo=)
5: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: 47PFiIrN8YcgeyMYrPnpq8sw1cn8CKOc9QsHZObWaiI=)
6: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: tftKrmZZklMgc4dBJRERAFTdNXEAoD4sM8JJrsQF46w=)
7: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: d+TJN7XsBrH6LbhjzoGCAQ2udf7x8XrVutGzhi6i5k0=)
8: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: CcIGdT55RjKfVxYWwDoPAAoRQrBgg9i0I31tbhx79tw=)
9: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: gPRN1PiE4hKS95HTYb5THWXUdyfO0TOoeYyLM7n5OMg=)
10: 5A40D3E78C135512BC4447988687E789A73E2C20.crl (hash: hotsnBinFIhmKeG+t0eHCG6YR9xiTF8mgxn7ZnyI3yg=)
11: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: EXw8MBp0C2jL7qq/slSRTBtC84Zq78Kd9N8xPDG+MPw=)
12: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: VpHe8diSksGSFx+uhTzuPlsu7YWEidEzJ+QbPDuF8OE=)
13: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: tdXUFupULNZKgr/w0C5EyOmm/ohhrLBXnnTwJMIelIM=)
14: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cna1NytKvpGl0P/xPip5ft+23sNxBBqsGIju8aP9bS8=)
15: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: p1sJWpGiZM7O9MtO6kI1tOKvb1V+0H28ctmeAyYx5yA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 05:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:22:69:91:af:76:89:b5:5a:e2:92:55:88:ac:64:fe:d6:9e:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
Validity
Not Before: Aug 23 02:48:14 2026 GMT
Not After : Aug 24 05:27:14 2026 GMT
Subject: CN=6199F809A92FF2F02780A53B006F1A87CCC04D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:9e:a2:10:aa:77:17:59:82:5b:15:a5:fa:
6a:d1:6e:60:ae:de:40:f7:e2:ef:28:b5:b7:42:6b:
10:fa:f2:5c:f9:74:8a:53:7f:b9:a1:99:03:f0:c4:
ff:3f:a6:ed:94:76:a9:bc:42:4e:2e:d7:28:43:de:
13:1f:2e:1c:6e:e9:8a:bf:11:01:ae:99:e5:76:02:
70:c2:28:ce:6b:ac:8f:24:b7:7d:ad:da:bf:da:bc:
8d:0b:ce:8a:1d:ef:61:34:3a:51:5f:08:a3:ce:73:
be:a7:ba:04:97:2e:fd:64:ab:02:10:3f:dd:95:77:
49:c0:c3:bd:fc:48:79:2a:aa:1a:90:33:f3:35:a1:
ce:15:80:07:1b:11:af:14:68:5e:dc:36:f2:b3:81:
58:d7:10:83:3b:19:95:4b:e0:f7:e5:72:12:ef:4a:
1a:11:e9:28:8f:7f:bf:57:2d:a0:91:da:fb:d8:ad:
f0:dc:52:eb:a8:2e:7b:bf:cb:ce:63:71:16:92:8d:
2c:ae:a7:d0:6f:e1:02:5e:6c:81:83:33:5a:7d:c1:
03:b7:95:35:24:45:a9:ed:4f:71:ae:f1:a3:73:46:
1b:ea:cf:b4:28:00:df:c6:b3:56:0c:c9:81:96:c9:
74:68:4d:1c:12:de:ab:08:d6:ed:1c:97:e2:70:6f:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:F8:09:A9:2F:F2:F0:27:80:A5:3B:00:6F:1A:87:CC:C0:4D:7B
X509v3 Authority Key Identifier:
keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:76:01:11:c9:a6:f7:a2:90:49:9d:75:8d:a4:c0:ae:19:
73:ca:9e:78:eb:b1:6a:04:4b:cf:29:eb:32:f0:95:72:78:a7:
7f:59:28:4c:ce:1c:46:63:d3:e2:14:7a:71:07:8c:2a:34:ac:
5e:d8:19:0c:5a:67:c9:d1:9f:cd:10:97:68:4b:c2:15:ee:43:
74:94:0f:24:48:70:92:6d:91:f0:56:8c:fd:3e:86:72:43:86:
b3:56:c0:59:45:5b:fb:1e:f0:17:cd:20:92:a0:f5:69:d4:b0:
23:a8:db:77:77:22:ab:5a:fa:4a:9b:08:87:43:19:c3:33:7f:
17:f1:0d:15:26:77:5e:bc:4c:c4:99:23:97:0d:0f:d3:c5:3b:
d8:9d:dc:89:2f:1a:ba:81:74:d7:d4:31:ce:a3:ee:26:8d:36:
a0:a8:d9:ac:8c:82:50:2f:dc:91:df:ee:af:d8:30:1d:cd:b7:
e6:f2:b6:65:64:78:dc:1a:8d:46:5e:3d:e9:6d:23:13:b4:53:
65:49:cb:46:b7:ca:59:b5:21:99:57:d2:7d:61:9e:cf:31:24:
b2:ec:06:02:42:88:68:26:cb:f7:2e:6c:eb:a0:6f:2c:c7:21:
c0:29:88:39:fb:a3:f5:3a:5b:be:a5:05:53:1b:bc:1a:74:31:
91:25:56:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSSJpka92ibVa4pJViKxk/tae4eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE0MEQzRTc4QzEzNTUxMkJDNDQ0Nzk4ODY4N0U3ODlB
NzNFMkMyMDAeFw0yNjA4MjMwMjQ4MTRaFw0yNjA4MjQwNTI3MTRaMDMxMTAvBgNV
BAMTKDYxOTlGODA5QTkyRkYyRjAyNzgwQTUzQjAwNkYxQTg3Q0NDMDREN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWu56iEKp3F1mCWxWl+mrRbmCu
3kD34u8otbdCaxD68lz5dIpTf7mhmQPwxP8/pu2Udqm8Qk4u1yhD3hMfLhxu6Yq/
EQGumeV2AnDCKM5rrI8kt32t2r/avI0Lzood72E0OlFfCKPOc76nugSXLv1kqwIQ
P92Vd0nAw738SHkqqhqQM/M1oc4VgAcbEa8UaF7cNvKzgVjXEIM7GZVL4PflchLv
ShoR6SiPf79XLaCR2vvYrfDcUuuoLnu/y85jcRaSjSyup9Bv4QJebIGDM1p9wQO3
lTUkRantT3Gu8aNzRhvqz7QoAN/Gs1YMyYGWyXRoTRwS3qsI1u0cl+Jwb8vXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYZn4Cakv8vAngKU7AG8ah8zATXswHwYDVR0j
BBgwFoAUWkDT54wTVRK8REeYhofniac+LCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMS81QTQwRDNFNzhDMTM1NTEyQkM0NDQ3OTg4Njg3RTc4OUE3M0UyQzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNDBEM0U3OEMxMzU1MTJC
QzQ0NDc5ODg2ODdFNzg5QTczRTJDMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQekUvMS81
QTQwRDNFNzhDMTM1NTEyQkM0NDQ3OTg4Njg3RTc4OUE3M0UyQzIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpR2ARHJpveikEmddY2kwK4Zc8qeeOuxagRLzynrMvCVcninf1koTM4cRmPT
4hR6cQeMKjSsXtgZDFpnydGfzRCXaEvCFe5DdJQPJEhwkm2R8FaM/T6GckOGs1bA
WUVb+x7wF80gkqD1adSwI6jbd3ciq1r6SpsIh0MZwzN/F/ENFSZ3XrxMxJkjlw0P
08U72J3ciS8auoF019QxzqPuJo02oKjZrIyCUC/ckd/ur9gwHc235vK2ZWR43BqN
Rl496W0jE7RTZUnLRrfKWbUhmVfSfWGezzEksuwGAkKIaCbL9y5s66BvLMchwCmI
Ofuj9TpbvqUFUxu8GnQxkSVWJA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 07:19:52 2026 by rpki-client