
Error: rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json)
Hash identifier: uf5bnUOaKDd0bKWzpTvnoDrzEwff9yW/oqbsQuZaHcc=
Subject key identifier: 2C:64:B1:3D:79:72:AE:79:49:00:35:AF:67:6B:18:6D:9B:A9:0B:E4
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial: 7B55450A6CAD7E8029461DFE633ABAF2D11C09CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
Manifest number: 04DC
Signing time: Sat 31 Oct 2026 09:47:47 +0000
Manifest this update: Sat 31 Oct 2026 09:42:47 +0000
Manifest next update: Sun 01 Nov 2026 09:50:47 +0000
Files and hashes: 1: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: DYGx/T5AnQgCjOey+UURzZWhb0H67r/Ia6mcIhr9I/8=)
2: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: VM+fxocvTfytrUSA37Jp60aCgds7ab7xO1ccpVJrP54=)
3: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: iZmC1t/fjeUUNQnWbsucToAMSgInG3Ark2xpwjFVDnA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 09:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:55:45:0a:6c:ad:7e:80:29:46:1d:fe:63:3a:ba:f2:d1:1c:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Validity
Not Before: Oct 31 09:42:47 2026 GMT
Not After : Nov 1 09:50:47 2026 GMT
Subject: CN=2C64B13D7972AE79490035AF676B186D9BA90BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:03:5c:fc:c1:6b:5c:55:ef:fc:a1:af:bb:
a8:e0:c8:ee:d7:9b:7e:80:7e:78:18:ac:d2:53:0d:
17:d4:1d:d7:88:d5:90:f1:bb:6e:3b:98:57:d3:11:
b8:ce:d6:bc:a6:fc:48:76:22:a4:75:6f:a5:9e:ee:
da:fc:5b:77:82:0d:9a:35:93:93:6f:f1:6d:82:71:
29:0f:60:94:1b:00:7a:0c:06:a8:56:2b:db:8a:16:
ab:d0:c4:f2:6e:6d:73:7f:ab:4b:c9:ef:3e:45:e0:
b9:6f:f2:ec:83:52:c9:1c:7a:39:ed:b2:8b:fa:ff:
dd:c6:c7:63:a5:dd:93:02:69:30:da:c9:a1:5c:8e:
bf:1f:0b:51:b7:f1:1e:b1:2b:5b:f8:77:40:d3:b7:
d5:86:34:14:cd:8d:7a:f0:26:85:84:17:ae:b6:79:
c4:95:5a:68:3d:ec:90:85:a8:37:bf:ce:61:5f:fc:
02:1b:98:28:16:54:76:8d:fd:7b:cf:c8:00:28:81:
c9:2e:d8:d0:70:68:54:fb:f3:79:ef:ac:83:af:de:
0d:b0:f6:06:8c:68:95:2a:09:d0:b9:7b:ef:c1:7a:
f2:b1:ad:9c:40:f5:f1:1c:b8:fc:c8:56:d5:c2:8b:
6a:2f:6e:70:95:bc:47:d6:77:8e:3d:91:b6:22:1a:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:64:B1:3D:79:72:AE:79:49:00:35:AF:67:6B:18:6D:9B:A9:0B:E4
X509v3 Authority Key Identifier:
keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:af:ca:e0:7e:b7:2a:db:e9:ca:57:c6:08:d7:af:dd:ca:
72:19:3a:46:a8:7f:f0:0f:d4:59:8d:e9:67:15:a7:87:80:8a:
e4:92:01:47:19:93:f6:08:40:31:ce:b7:c7:4d:3c:5c:71:e9:
18:06:74:fd:d2:08:86:4b:80:e8:ba:47:3e:23:3e:e4:a9:be:
2a:cf:34:bf:7c:96:20:4d:45:d2:10:00:2d:d0:32:51:aa:7d:
af:09:bd:a0:f0:67:6d:13:0a:96:52:a6:34:b7:f0:7c:0b:ad:
d9:88:89:9b:7c:cc:e9:60:41:7d:4f:ec:58:cc:d5:0e:dd:51:
0d:2f:be:36:d2:00:12:1e:8f:be:be:32:31:43:d7:86:c8:9f:
44:78:f9:36:be:33:ae:7a:36:13:37:6d:dd:6a:7d:6e:3f:ba:
b3:dc:3f:3d:ad:d9:d7:98:17:ac:ee:ab:2b:44:bf:bd:03:61:
51:13:bb:b5:c3:30:b2:fa:55:30:9b:31:fb:7d:53:7b:68:b2:
90:34:e2:f0:15:f2:55:00:25:e1:f1:f0:34:02:fe:61:f0:94:
e3:87:db:61:62:ee:2c:1a:3a:0c:0e:7c:e9:4f:dd:12:f2:ca:
95:7b:11:82:98:3b:d2:ef:56:f4:27:ae:b8:a2:4a:cc:a8:ee:
f3:02:30:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe1VFCmytfoApRh3+Yzq68tEcCc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD
RDhBMjIzRjAeFw0yNjEwMzEwOTQyNDdaFw0yNjExMDEwOTUwNDdaMDMxMTAvBgNV
BAMTKDJDNjRCMTNENzk3MkFFNzk0OTAwMzVBRjY3NkIxODZEOUJBOTBCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3wNc/MFrXFXv/KGvu6jgyO7X
m36AfngYrNJTDRfUHdeI1ZDxu247mFfTEbjO1rym/Eh2IqR1b6We7tr8W3eCDZo1
k5Nv8W2CcSkPYJQbAHoMBqhWK9uKFqvQxPJubXN/q0vJ7z5F4Llv8uyDUskcejnt
sov6/93Gx2Ol3ZMCaTDayaFcjr8fC1G38R6xK1v4d0DTt9WGNBTNjXrwJoWEF662
ecSVWmg97JCFqDe/zmFf/AIbmCgWVHaN/XvPyAAogcku2NBwaFT783nvrIOv3g2w
9gaMaJUqCdC5e+/BevKxrZxA9fEcuPzIVtXCi2ovbnCVvEfWd449kbYiGt47AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULGSxPXlyrnlJADWvZ2sYbZupC+QwHwYDVR0j
BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo
TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1
Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E
QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVKqvyuB+tyrb6cpXxgjXr93Kchk6Rqh/8A/UWY3pZxWnh4CK5JIBRxmT9ghA
Mc63x008XHHpGAZ0/dIIhkuA6LpHPiM+5Km+Ks80v3yWIE1F0hAALdAyUap9rwm9
oPBnbRMKllKmNLfwfAut2YiJm3zM6WBBfU/sWMzVDt1RDS++NtIAEh6Pvr4yMUPX
hsifRHj5Nr4zrno2Ezdt3Wp9bj+6s9w/Pa3Z15gXrO6rK0S/vQNhURO7tcMwsvpV
MJsx+31Te2iykDTi8BXyVQAl4fHwNAL+YfCU44fbYWLuLBo6DA586U/dEvLKlXsR
gpg70u9W9CeuuKJKzKju8wIwmA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:14:50 2026 by rpki-client