
Error: rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
File: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft (raw, json)
Hash identifier: 8NPoiEatDksB2yTMxxG1hDJFA68f4P0pH4EPhmSOKkM=
Subject key identifier: DE:18:F6:40:76:39:9B:18:7D:0A:97:98:34:C2:4A:A0:1E:20:93:4C
Authority key identifier: A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
Certificate issuer: /CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Certificate serial: 7801C0DF77370122CBD77E2DD28C7987CFE83C47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
Manifest number: 04E4
Signing time: Fri 30 Oct 2026 19:19:20 +0000
Manifest this update: Fri 30 Oct 2026 19:14:20 +0000
Manifest next update: Sat 31 Oct 2026 22:10:20 +0000
Files and hashes: 1: 323830343a386434303a3a2f33322d3438203d3e20323733333435.roa (hash: g6OZSpwen1cePyDlND9tKg+HeJctA2FCr4CbcxbWtE4=)
2: 34352e372e35322e302f32322d3234203d3e20323733333435.roa (hash: NiZJYVVGZ0ftfwXmx9j8c/iOChmGAdbQaXcJVtzmGF0=)
3: A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl (hash: FL/vZ28DcLfJd7PpraOy+Pi+Hjj+RjO4mD3dvFC+OSE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 22:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:01:c0:df:77:37:01:22:cb:d7:7e:2d:d2:8c:79:87:cf:e8:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4
Validity
Not Before: Oct 30 19:14:20 2026 GMT
Not After : Oct 31 22:10:20 2026 GMT
Subject: CN=DE18F64076399B187D0A979834C24AA01E20934C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:0f:72:56:af:7d:f1:1f:81:e9:c5:d8:4b:
49:70:8e:ae:42:75:ed:e1:e6:fc:8d:43:db:41:4d:
c5:bb:be:1d:6f:7d:c3:5a:74:30:b1:76:fc:d7:03:
f9:9f:e2:e2:9d:5a:17:f3:56:80:9e:0b:bf:90:af:
61:10:93:86:a2:b3:02:28:1f:83:d1:29:28:4b:91:
9c:cd:21:7f:78:57:a6:fa:4c:37:4c:90:f2:de:58:
a3:30:92:c3:c3:b2:de:5f:84:83:f3:cd:d9:67:82:
9a:f9:7e:76:26:bf:14:3a:46:d0:28:28:38:94:d1:
ea:c2:a8:fc:ea:6e:d4:94:18:d0:a5:d7:3d:25:d9:
7e:4d:07:5a:6a:71:b5:29:de:4d:7a:9a:ad:cd:6f:
ab:7b:3b:a1:fb:81:7f:d2:7d:6b:d7:f9:13:64:b9:
cd:ae:55:b7:3b:e6:c9:06:ad:e2:c7:82:7f:ef:72:
37:79:0f:05:dc:28:96:c7:01:e2:6a:2f:79:c4:c6:
db:a8:27:2a:03:68:74:c2:9c:f9:d8:77:df:5e:4a:
08:30:83:5a:04:3c:73:59:e3:5a:5a:08:9f:aa:8a:
b1:5f:35:4f:e5:02:aa:81:6e:b1:2c:b3:81:a8:90:
38:c7:4e:7e:d0:f7:f1:bd:bf:9c:43:9b:d4:0e:c2:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:18:F6:40:76:39:9B:18:7D:0A:97:98:34:C2:4A:A0:1E:20:93:4C
X509v3 Authority Key Identifier:
keyid:A0:A8:EF:33:7A:CF:86:96:4B:1E:46:A7:D6:BA:5B:0F:94:D8:74:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExamRGe3zBiJppCRBT5AXU2Ww5FUb4tYhmUHyL3NRcph/1/A0A8EF337ACF86964B1E46A7D6BA5B0F94D874F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8f:5d:b5:b2:27:2e:6b:6d:e2:60:c2:cc:77:23:2e:e1:c9:
c6:40:f5:1b:4b:b2:38:51:18:3d:a2:7e:eb:a9:9d:06:c1:98:
e8:69:ca:56:47:8a:7e:a6:43:77:c3:22:0a:74:e4:03:1b:b6:
2a:39:c1:96:ea:59:a0:0a:45:9e:5a:af:0d:45:4a:57:63:0f:
03:f1:ed:fd:df:24:10:72:c3:1c:36:08:6e:21:bc:ef:bc:41:
1b:ab:b2:cf:e3:55:58:56:14:ab:78:6f:5f:be:80:1b:ff:1f:
31:49:a2:6b:e5:d4:0d:b0:24:53:fc:93:bf:1d:5c:08:df:70:
9c:4b:3a:70:c2:4b:91:2b:6f:67:e5:d0:12:f3:cb:a7:71:02:
7f:ff:7a:c5:eb:ab:66:67:cb:12:b7:86:80:94:5b:be:26:d1:
ce:2d:12:65:b3:f7:de:10:68:5b:db:94:33:90:df:1c:ca:9d:
8c:84:ee:b0:2d:8b:21:92:b6:72:08:ee:ec:bb:e1:a0:b2:c7:
b6:73:27:f7:12:16:d9:ce:5b:f4:cd:f4:b5:54:94:d3:9c:5f:
6d:17:6f:c1:a7:94:b7:9a:4a:ab:11:46:94:98:b4:56:a0:dc:
f6:a8:d1:e7:ad:ed:dd:bb:0a:b6:5d:7a:6d:4e:b6:11:2f:a5:
f4:79:37:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeAHA33c3ASLL134t0ox5h8/oPEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBOEVGMzM3QUNGODY5NjRCMUU0NkE3RDZCQTVCMEY5
NEQ4NzRGNDAeFw0yNjEwMzAxOTE0MjBaFw0yNjEwMzEyMjEwMjBaMDMxMTAvBgNV
BAMTKERFMThGNjQwNzYzOTlCMTg3RDBBOTc5ODM0QzI0QUEwMUUyMDkzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Zg9yVq998R+B6cXYS0lwjq5C
de3h5vyNQ9tBTcW7vh1vfcNadDCxdvzXA/mf4uKdWhfzVoCeC7+Qr2EQk4aiswIo
H4PRKShLkZzNIX94V6b6TDdMkPLeWKMwksPDst5fhIPzzdlngpr5fnYmvxQ6RtAo
KDiU0erCqPzqbtSUGNCl1z0l2X5NB1pqcbUp3k16mq3Nb6t7O6H7gX/SfWvX+RNk
uc2uVbc75skGreLHgn/vcjd5DwXcKJbHAeJqL3nExtuoJyoDaHTCnPnYd99eSggw
g1oEPHNZ41paCJ+qirFfNU/lAqqBbrEss4GokDjHTn7Q9/G9v5xDm9QOwnXNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3hj2QHY5mxh9CpeYNMJKoB4gk0wwHwYDVR0j
BBgwFoAUoKjvM3rPhpZLHkan1rpbD5TYdPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJj
cGgvMS9BMEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQThFRjMzN0FDRjg2OTY0
QjFFNDZBN0Q2QkE1QjBGOTREODc0RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RXhhbVJHZTN6QmlKcHBDUkJUNUFYVTJXdzVGVWI0dFlobVVIeUwzTlJjcGgvMS9B
MEE4RUYzMzdBQ0Y4Njk2NEIxRTQ2QTdENkJBNUIwRjk0RDg3NEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoY9dtbInLmtt4mDCzHcjLuHJxkD1G0uyOFEYPaJ+66mdBsGY6GnKVkeKfqZD
d8MiCnTkAxu2KjnBlupZoApFnlqvDUVKV2MPA/Ht/d8kEHLDHDYIbiG877xBG6uy
z+NVWFYUq3hvX76AG/8fMUmia+XUDbAkU/yTvx1cCN9wnEs6cMJLkStvZ+XQEvPL
p3ECf/96xeurZmfLEreGgJRbvibRzi0SZbP33hBoW9uUM5DfHMqdjITusC2LIZK2
cgju7LvhoLLHtnMn9xIW2c5b9M30tVSU05xfbRdvwaeUt5pKqxFGlJi0VqDc9qjR
563t3bsKtl16bU62ES+l9Hk3kg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:22:01 2026 by rpki-client