
Error: rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
File: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft (raw, json)
Hash identifier: 1j/pmpqyAmTKO0SLTfam9qWC+V7zzeXHakdnYuFhHPA=
Subject key identifier: FC:B9:A0:66:A9:81:52:AF:D5:44:3A:BC:A0:26:BC:96:E4:1A:8A:30
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Certificate issuer: /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial: 53CA61D2143B21B8483D1DF67DA649B194799A24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
Manifest number: 56
Signing time: Sat 31 Oct 2026 13:30:43 +0000
Manifest this update: Sat 31 Oct 2026 13:25:43 +0000
Manifest next update: Sun 01 Nov 2026 17:17:43 +0000
Files and hashes: 1: 817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl (hash: gNNrdLOcGqp01uh7/rKGjpWOoQx9rHhv3lEzMVjmywg=)
2: 3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (hash: ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=)
3: 3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (hash: jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 17:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ca:61:d2:14:3b:21:b8:48:3d:1d:f6:7d:a6:49:b1:94:79:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Validity
Not Before: Oct 31 13:25:43 2026 GMT
Not After : Nov 1 17:17:43 2026 GMT
Subject: CN=FCB9A066A98152AFD5443ABCA026BC96E41A8A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:27:61:11:a7:32:10:d0:14:f1:15:00:34:
e7:f3:59:57:56:e8:c8:f5:fa:0d:5f:09:19:7b:aa:
8e:33:76:b3:16:76:8b:f9:dc:d8:35:d6:2e:6e:79:
b9:e6:1d:d8:2b:56:8a:be:1a:f3:85:5a:21:8d:8c:
76:ee:1c:93:a6:29:c6:b5:5d:d9:9e:bf:eb:01:a3:
7a:d6:fd:85:0c:60:71:e1:b7:18:7f:67:61:00:22:
ed:b0:90:62:79:07:0e:56:6a:a1:85:fd:3f:ba:d8:
81:07:95:c6:d0:5a:d8:9e:dc:7d:86:c3:cc:f1:82:
61:a2:b2:20:d8:fa:8f:f0:57:53:cc:63:17:7e:cc:
e9:dd:c2:1f:b1:7d:40:24:11:f7:e0:28:7a:cd:5e:
37:70:d7:b9:21:15:d3:12:54:7a:7c:99:24:27:70:
5c:a0:be:20:d2:9a:6c:80:03:eb:27:19:f1:34:b5:
e5:fa:4f:a7:1c:bd:03:58:c3:ac:11:82:cd:d5:17:
f6:2c:66:96:59:b8:ef:b3:6a:fb:7c:34:d0:13:aa:
0e:33:a2:c8:cb:c5:16:f6:04:6a:f7:af:2e:ae:54:
e4:dd:e6:9c:cb:0e:bd:e3:3a:c3:ef:8d:1b:a3:a0:
4e:84:a1:13:0e:0b:5a:9e:89:eb:67:c1:2c:d4:ee:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:A0:66:A9:81:52:AF:D5:44:3A:BC:A0:26:BC:96:E4:1A:8A:30
X509v3 Authority Key Identifier:
keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:15:6e:eb:7c:86:6e:2f:65:15:7e:bf:c7:bd:2c:ca:5a:23:
a0:2b:cf:3e:14:be:d1:5c:ca:6e:6b:0a:b6:4f:c2:96:4e:87:
af:8f:ca:65:ef:a6:7f:fd:9d:76:93:dd:2f:2d:86:ab:0c:2b:
ae:5a:c8:bd:c3:c2:0f:4c:b3:eb:16:aa:47:25:8f:0b:d7:82:
e7:53:08:f0:de:20:de:08:50:7f:b3:8f:48:17:e8:10:50:f5:
04:d2:a5:9f:ba:d7:8a:b2:71:c7:6e:cf:53:f4:3d:3c:90:f4:
29:dd:e6:72:1b:da:64:26:89:22:ca:3f:c7:5d:a5:86:a1:91:
7a:c6:47:92:d7:d1:d6:33:8c:79:ca:b7:c3:52:96:68:cf:f5:
70:cb:d8:b0:08:d7:36:7e:fb:91:dc:84:cb:97:79:22:89:97:
08:cb:f2:a2:96:2f:f7:cc:7d:3d:c5:51:af:a7:e2:22:ce:31:
34:70:d5:63:23:a3:37:39:11:5c:1a:39:da:28:ce:69:f7:67:
95:c8:fd:99:79:5f:ad:fb:30:4c:07:12:d7:78:55:73:f4:a5:
df:f3:63:45:6a:69:b5:bf:bc:80:33:1e:d1:a2:ea:69:5c:d5:
f7:df:84:62:d0:b7:28:65:6b:eb:8e:88:86:9f:84:e2:81:fb:
e6:4a:15:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU8ph0hQ7IbhIPR32faZJsZR5miQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjFBNTAzQTM3NkM1NjRGNjVCRkIyN0ZENTFBM0I0
RDVDOTJGNjAeFw0yNjEwMzExMzI1NDNaFw0yNjExMDExNzE3NDNaMDMxMTAvBgNV
BAMTKEZDQjlBMDY2QTk4MTUyQUZENTQ0M0FCQ0EwMjZCQzk2RTQxQThBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWCdhEacyENAU8RUANOfzWVdW
6Mj1+g1fCRl7qo4zdrMWdov53Ng11i5uebnmHdgrVoq+GvOFWiGNjHbuHJOmKca1
Xdmev+sBo3rW/YUMYHHhtxh/Z2EAIu2wkGJ5Bw5WaqGF/T+62IEHlcbQWtie3H2G
w8zxgmGisiDY+o/wV1PMYxd+zOndwh+xfUAkEffgKHrNXjdw17khFdMSVHp8mSQn
cFygviDSmmyAA+snGfE0teX6T6ccvQNYw6wRgs3VF/YsZpZZuO+zavt8NNATqg4z
osjLxRb2BGr3ry6uVOTd5pzLDr3jOsPvjRujoE6EoRMOC1qeietnwSzU7hf/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/LmgZqmBUq/VRDq8oCa8luQaijAwHwYDVR0j
BBgwFoAUgX8aUDo3bFZPZb+yf9UaO01ckvYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1
cm0vMC84MTdGMUE1MDNBMzc2QzU2NEY2NUJGQjI3RkQ1MUEzQjRENUM5MkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0YxQTUwM0EzNzZDNTY0
RjY1QkZCMjdGRDUxQTNCNEQ1QzkyRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1cm0vMC84
MTdGMUE1MDNBMzc2QzU2NEY2NUJGQjI3RkQ1MUEzQjRENUM5MkY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAARVu63yGbi9lFX6/x70sylojoCvPPhS+0VzKbmsKtk/Clk6Hr4/KZe+mf/2d
dpPdLy2GqwwrrlrIvcPCD0yz6xaqRyWPC9eC51MI8N4g3ghQf7OPSBfoEFD1BNKl
n7rXirJxx27PU/Q9PJD0Kd3mchvaZCaJIso/x12lhqGResZHktfR1jOMecq3w1KW
aM/1cMvYsAjXNn77kdyEy5d5IomXCMvyopYv98x9PcVRr6fiIs4xNHDVYyOjNzkR
XBo52ijOafdnlcj9mXlfrfswTAcS13hVc/Sl3/NjRWpptb+8gDMe0aLqaVzV99+E
YtC3KGVr646Ihp+E4oH75koVVg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:03:06 2026 by rpki-client