
Error: rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
File: 0B07367A81B15A220D69956D612B34AE5A9E594E.mft (raw, json)
Hash identifier: 1GAjuYGLQiyDdFY8PaRmPPt+dVc57fQWelr+uG1Y3fc=
Subject key identifier: 58:8D:2C:11:C9:D4:45:CC:7F:84:B9:28:99:20:31:2D:2B:28:7B:80
Authority key identifier: 0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E
Certificate issuer: /CN=0B07367A81B15A220D69956D612B34AE5A9E594E
Certificate serial: 4633D7E3069DC2F6667B7B9C76F8C5704F8E5F97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
Manifest number: 04E1
Signing time: Sun 01 Nov 2026 23:10:43 +0000
Manifest this update: Sun 01 Nov 2026 23:05:43 +0000
Manifest next update: Tue 03 Nov 2026 01:38:43 +0000
Files and hashes: 1: 0B07367A81B15A220D69956D612B34AE5A9E594E.crl (hash: hx/lOihM9YH2+uGK+ZB8WnwNUrf9Hzuac6eyk6YOeQ4=)
2: 3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa (hash: 5Qo+rZtqBKkbE1/hFOxkgyiMQLy7gpguM+WGUAs3yCg=)
3: 323830343a326662303a3a2f33322d3438203d3e20323634393036.roa (hash: PPoHrciuNKj8bZr/BZBR0qeQqoXngxr/RWUumb157TA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl
rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 01:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:33:d7:e3:06:9d:c2:f6:66:7b:7b:9c:76:f8:c5:70:4f:8e:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B07367A81B15A220D69956D612B34AE5A9E594E
Validity
Not Before: Nov 1 23:05:43 2026 GMT
Not After : Nov 3 01:38:43 2026 GMT
Subject: CN=588D2C11C9D445CC7F84B9289920312D2B287B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:d3:8e:47:89:05:ee:ea:33:c5:39:10:16:
2e:83:85:4c:3d:94:c3:e2:bf:4f:c0:de:e1:ba:40:
b3:d6:c3:e3:31:49:0f:9e:e3:c2:85:76:6a:87:4e:
a6:68:de:5f:d2:9e:0b:60:22:c3:a0:00:fe:3e:1d:
2c:57:ef:1d:ac:a9:9c:35:fb:09:fb:17:1e:d9:d9:
61:e7:32:55:01:bc:df:f7:03:7a:58:22:d9:2a:f9:
34:0c:eb:f6:60:c2:cc:43:d4:4b:e6:f7:83:92:e4:
ee:72:bd:33:7d:c8:6f:ab:e6:bd:7f:63:45:8e:51:
b9:c1:e0:75:49:39:bb:e5:99:7b:05:d7:6e:75:1c:
a9:b3:77:8d:d4:6c:5a:9d:94:41:04:a9:8a:92:d6:
8f:da:99:89:2f:c6:85:e9:80:bc:99:e4:f1:c5:8a:
7c:60:6b:19:08:bc:16:6e:a8:ae:60:3a:07:06:70:
ce:c1:75:0c:69:1f:67:9c:68:da:6f:c8:2d:40:b2:
66:af:9a:08:d8:e3:7b:29:d8:f4:b6:b8:14:aa:ea:
9f:43:db:14:4f:6d:d4:bd:15:0f:10:d9:88:0a:d8:
55:70:bc:c7:84:e0:c0:1c:6c:d7:53:3f:d6:a9:e4:
a7:5e:8a:a2:6e:df:95:03:2c:93:55:1c:62:91:87:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:2C:11:C9:D4:45:CC:7F:84:B9:28:99:20:31:2D:2B:28:7B:80
X509v3 Authority Key Identifier:
keyid:0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:8a:de:51:b4:bb:34:9e:51:f1:4f:7d:90:35:5c:2c:54:
2d:d7:6b:05:10:98:fb:59:bf:0e:f9:61:bb:e1:81:aa:56:a8:
18:c5:f3:02:86:14:dd:68:6e:80:2a:5e:a0:35:3b:16:7b:2d:
38:dd:30:ce:e9:ea:21:0f:30:93:da:c2:e8:91:b0:e6:22:24:
99:8c:13:7b:8b:9c:e4:17:be:f5:d4:69:96:d4:89:73:cf:34:
63:8c:93:1b:80:cd:1e:d2:b0:ba:90:d3:76:ea:8e:7b:3d:8d:
32:de:0a:4e:4a:eb:c9:88:f1:39:50:8b:b7:d5:5c:89:a9:db:
26:f2:56:5c:9a:bc:ed:52:45:32:e5:6e:81:47:33:50:c0:5a:
88:b7:19:21:6b:71:c7:7c:39:68:67:68:95:62:2d:34:ab:a8:
d5:d1:c5:64:ff:8b:cc:10:ba:9d:35:5b:e1:05:61:dc:6c:9d:
45:9e:da:af:ab:a1:b3:71:ef:e1:0b:c2:02:6e:3e:ba:fb:03:
49:38:ab:d0:d5:78:c8:b6:08:53:7d:59:e3:83:0c:ec:08:ab:
aa:f2:7d:de:c0:b5:55:13:55:c7:14:98:03:2e:21:5e:b5:29:
f2:7a:d9:6f:71:a2:62:f0:dc:be:4c:db:05:04:b0:35:cf:e2:
66:ab:74:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURjPX4wadwvZme3ucdvjFcE+OX5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwNzM2N0E4MUIxNUEyMjBENjk5NTZENjEyQjM0QUU1
QTlFNTk0RTAeFw0yNjExMDEyMzA1NDNaFw0yNjExMDMwMTM4NDNaMDMxMTAvBgNV
BAMTKDU4OEQyQzExQzlENDQ1Q0M3Rjg0QjkyODk5MjAzMTJEMkIyODdCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwtOOR4kF7uozxTkQFi6DhUw9
lMPiv0/A3uG6QLPWw+MxSQ+e48KFdmqHTqZo3l/SngtgIsOgAP4+HSxX7x2sqZw1
+wn7Fx7Z2WHnMlUBvN/3A3pYItkq+TQM6/ZgwsxD1Evm94OS5O5yvTN9yG+r5r1/
Y0WOUbnB4HVJObvlmXsF1251HKmzd43UbFqdlEEEqYqS1o/amYkvxoXpgLyZ5PHF
inxgaxkIvBZuqK5gOgcGcM7BdQxpH2ecaNpvyC1AsmavmgjY43sp2PS2uBSq6p9D
2xRPbdS9FQ8Q2YgK2FVwvMeE4MAcbNdTP9ap5KdeiqJu35UDLJNVHGKRh//BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWI0sEcnURcx/hLkomSAxLSsoe4AwHwYDVR0j
BBgwFoAUCwc2eoGxWiINaZVtYSs0rlqeWU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJaNG5oNERoQVRFZktNcnZ3TWZVQkVRWnRXaEI0MkZ4WkRzVk5NRnA1
YlYvMS8wQjA3MzY3QTgxQjE1QTIyMEQ2OTk1NkQ2MTJCMzRBRTVBOUU1OTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMDczNjdBODFCMTVBMjIw
RDY5OTU2RDYxMkIzNEFFNUE5RTU5NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWJaNG5oNERoQVRFZktNcnZ3TWZVQkVRWnRXaEI0MkZ4WkRzVk5NRnA1YlYvMS8w
QjA3MzY3QTgxQjE1QTIyMEQ2OTk1NkQ2MTJCMzRBRTVBOUU1OTRFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+6K3lG0uzSeUfFPfZA1XCxULddrBRCY+1m/Dvlhu+GBqlaoGMXzAoYU3Whu
gCpeoDU7FnstON0wzunqIQ8wk9rC6JGw5iIkmYwTe4uc5Be+9dRpltSJc880Y4yT
G4DNHtKwupDTduqOez2NMt4KTkrryYjxOVCLt9VcianbJvJWXJq87VJFMuVugUcz
UMBaiLcZIWtxx3w5aGdolWItNKuo1dHFZP+LzBC6nTVb4QVh3GydRZ7ar6uhs3Hv
4QvCAm4+uvsDSTir0NV4yLYIU31Z44MM7AirqvJ93sC1VRNVxxSYAy4hXrUp8nrZ
b3GiYvDcvkzbBQSwNc/iZqt0Sg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 12:47:50 2026 by rpki-client