
Error: rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
File: 09E4273A68D797D63840748E60E804BC3FFF247D.mft (raw, json)
Hash identifier: SZ4lXFzcSWEH8W2ARFg6fg3QUOIFyxZedOJV3gj2yLs=
Subject key identifier: 02:E1:F6:6D:97:96:DE:92:E1:F4:C3:29:8F:36:79:69:0A:71:DD:A5
Authority key identifier: 09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D
Certificate issuer: /CN=09E4273A68D797D63840748E60E804BC3FFF247D
Certificate serial: 5A6E7434A9D85CF209164E253CDCB487E60BCEFA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
Manifest number: 8B
Signing time: Sat 22 Aug 2026 17:46:04 +0000
Manifest this update: Sat 22 Aug 2026 17:41:04 +0000
Manifest next update: Sun 23 Aug 2026 21:27:04 +0000
Files and hashes: 1: 09E4273A68D797D63840748E60E804BC3FFF247D.crl (hash: cnHI8ddeFHuaLl8a8K8mmmEM2+ZyLc0FOQXNaUI5jmc=)
2: 323830343a363764383a3a2f33322d3334203d3e20323639363534.roa (hash: ilC0YOmsu6yQs/f9CvgRcZXm88LDEKwF7V1QW+PKEjo=)
3: 34352e3139302e3233322e302f32322d3234203d3e20323639363534.roa (hash: BX6D6o1/t/lqBKAc0J6zv9UsLyl72SAJC6jhjIfHDcg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl
rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 21:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:74:34:a9:d8:5c:f2:09:16:4e:25:3c:dc:b4:87:e6:0b:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E4273A68D797D63840748E60E804BC3FFF247D
Validity
Not Before: Aug 22 17:41:04 2026 GMT
Not After : Aug 23 21:27:04 2026 GMT
Subject: CN=02E1F66D9796DE92E1F4C3298F3679690A71DDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:dc:09:af:90:be:fc:03:a3:97:f1:ed:69:
b2:9c:a7:a4:2c:d9:3a:45:ff:45:01:6f:93:97:45:
8a:01:58:d1:f9:04:fb:6b:1e:56:bf:ec:2b:3e:41:
1f:ab:51:87:f0:87:66:ce:75:df:6f:cd:58:f5:02:
a8:ba:15:5a:e4:9c:b2:01:60:7c:62:48:69:44:e9:
c0:a6:63:2e:2e:b8:88:0f:65:99:81:fe:cd:d3:03:
19:99:95:7a:12:91:a5:c0:4c:c3:43:8a:c6:6e:d4:
95:99:3f:f4:c0:4c:71:f3:85:65:47:fc:bd:c2:14:
8d:12:64:49:7a:0d:1a:f7:a2:e5:fb:c8:19:3b:7f:
a8:a5:19:6e:bd:23:b2:53:4f:f3:cf:83:4b:10:b5:
72:61:3f:70:0c:ac:55:bd:34:4f:7a:1e:af:5d:b0:
5e:b2:b8:cd:a8:cc:1c:c0:9e:ac:5d:cf:80:9a:e6:
88:ac:26:ea:e3:25:60:65:8c:8d:0c:cf:19:00:50:
b1:49:c1:1a:af:9d:dd:e0:69:c8:4f:64:8c:4c:49:
b2:f7:a3:d5:2d:45:f4:33:10:18:35:52:a6:00:81:
e0:63:bf:bb:f8:de:91:34:d5:8d:17:d5:53:f1:e9:
44:c1:81:be:f7:f0:d0:d6:1c:fe:0d:35:f2:4e:83:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:F6:6D:97:96:DE:92:E1:F4:C3:29:8F:36:79:69:0A:71:DD:A5
X509v3 Authority Key Identifier:
keyid:09:E4:27:3A:68:D7:97:D6:38:40:74:8E:60:E8:04:BC:3F:FF:24:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09E4273A68D797D63840748E60E804BC3FFF247D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/09E4273A68D797D63840748E60E804BC3FFF247D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:f3:b7:ab:55:f2:5f:0b:04:de:dd:9f:55:34:f8:04:d3:
f9:f1:46:b5:1a:23:26:19:29:ef:1f:e6:f4:67:fe:b9:ec:22:
5b:59:ef:97:d4:f5:6f:6b:8c:cd:ba:c9:ba:fd:3f:be:6d:30:
93:38:89:cd:33:fb:19:97:d3:0e:b7:fc:3f:84:0f:3d:46:f3:
d2:d2:ee:b8:b5:9b:05:43:cf:80:c9:0b:61:46:96:6d:60:51:
6d:3b:4c:cc:40:4b:29:1d:ac:f4:9a:86:00:e4:e7:5b:ed:03:
f6:f3:3e:82:ad:4b:93:16:32:ce:3b:78:bb:ff:56:7b:70:6d:
a9:8d:08:d4:46:d9:6f:fd:24:e5:28:c2:07:a6:81:05:90:e4:
1e:2d:65:30:03:c8:81:a1:6f:d1:1d:63:d8:10:b6:14:cc:89:
07:23:29:76:c2:20:fe:d6:a8:67:81:c7:fa:f6:62:c5:6b:75:
63:b1:b5:74:46:0f:53:5d:54:13:58:17:25:54:56:97:5a:8f:
ce:8e:bf:ff:95:13:c7:06:05:64:bc:35:17:c3:d2:64:6d:ff:
3a:b7:9b:52:60:9e:27:15:de:e4:75:ad:2e:6f:2d:f9:44:15:
96:6c:43:72:12:b4:74:49:ef:dd:f2:86:29:fb:fd:0a:4b:9d:
9f:f4:69:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWm50NKnYXPIJFk4lPNy0h+YLzvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlFNDI3M0E2OEQ3OTdENjM4NDA3NDhFNjBFODA0QkMz
RkZGMjQ3RDAeFw0yNjA4MjIxNzQxMDRaFw0yNjA4MjMyMTI3MDRaMDMxMTAvBgNV
BAMTKDAyRTFGNjZEOTc5NkRFOTJFMUY0QzMyOThGMzY3OTY5MEE3MUREQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pdwJr5C+/AOjl/HtabKcp6Qs
2TpF/0UBb5OXRYoBWNH5BPtrHla/7Cs+QR+rUYfwh2bOdd9vzVj1Aqi6FVrknLIB
YHxiSGlE6cCmYy4uuIgPZZmB/s3TAxmZlXoSkaXATMNDisZu1JWZP/TATHHzhWVH
/L3CFI0SZEl6DRr3ouX7yBk7f6ilGW69I7JTT/PPg0sQtXJhP3AMrFW9NE96Hq9d
sF6yuM2ozBzAnqxdz4Ca5oisJurjJWBljI0MzxkAULFJwRqvnd3gachPZIxMSbL3
o9UtRfQzEBg1UqYAgeBjv7v43pE01Y0X1VPx6UTBgb738NDWHP4NNfJOg0TLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAuH2bZeW3pLh9MMpjzZ5aQpx3aUwHwYDVR0j
BBgwFoAUCeQnOmjXl9Y4QHSOYOgEvD//JH0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmRzQlVtSzN3VVNwTW5lQld6Njk0VlBvUnVqeEZ1ZEZwU0t5NDdzZ0Fu
SnUvMC8wOUU0MjczQTY4RDc5N0Q2Mzg0MDc0OEU2MEU4MDRCQzNGRkYyNDdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RTQyNzNBNjhENzk3RDYz
ODQwNzQ4RTYwRTgwNEJDM0ZGRjI0N0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RmRzQlVtSzN3VVNwTW5lQld6Njk0VlBvUnVqeEZ1ZEZwU0t5NDdzZ0FuSnUvMC8w
OUU0MjczQTY4RDc5N0Q2Mzg0MDc0OEU2MEU4MDRCQzNGRkYyNDdELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABwjzt6tV8l8LBN7dn1U0+ATT+fFGtRojJhkp7x/m9Gf+uewiW1nvl9T1b2uM
zbrJuv0/vm0wkziJzTP7GZfTDrf8P4QPPUbz0tLuuLWbBUPPgMkLYUaWbWBRbTtM
zEBLKR2s9JqGAOTnW+0D9vM+gq1LkxYyzjt4u/9We3BtqY0I1EbZb/0k5SjCB6aB
BZDkHi1lMAPIgaFv0R1j2BC2FMyJByMpdsIg/taoZ4HH+vZixWt1Y7G1dEYPU11U
E1gXJVRWl1qPzo6//5UTxwYFZLw1F8PSZG3/OrebUmCeJxXe5HWtLm8t+UQVlmxD
chK0dEnv3fKGKfv9Ckudn/Rp8w==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:20:13 2026 by rpki-client