
Error: rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier: A1PJIV1uNF5ISq3uq6Cs9OoClPPmC7UNCx+OIhRR6Xw=
Subject key identifier: 9C:24:7A:55:E9:E3:DC:71:E6:AA:AD:DC:2F:3B:C6:B2:96:B7:0D:89
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial: 451625C604E49D50902E12FB67C214119B44A78C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number: 04E5
Signing time: Wed 28 Oct 2026 18:29:08 +0000
Manifest this update: Wed 28 Oct 2026 18:24:08 +0000
Manifest next update: Thu 29 Oct 2026 21:39:08 +0000
Files and hashes: 1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: 6gefx9YKqf292UE3Fs14rlFIRnfQMPw2Eq8nPfNJSO8=)
2: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: dBK5EWUwBHCRzo0bpYkF0fx5VE9hBRp/pTinxYG0hU8=)
3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: 6goGBettQXlYT3dwNzXMNEk/cOwbQJLprhXKpD/i9z0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 21:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:16:25:c6:04:e4:9d:50:90:2e:12:fb:67:c2:14:11:9b:44:a7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Validity
Not Before: Oct 28 18:24:08 2026 GMT
Not After : Oct 29 21:39:08 2026 GMT
Subject: CN=9C247A55E9E3DC71E6AAADDC2F3BC6B296B70D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:50:16:f3:40:d5:93:4c:4e:50:61:fa:e6:
54:3e:da:63:b5:8f:18:c7:8e:58:a2:68:03:6a:96:
d6:45:f0:40:00:a8:ef:e6:c4:e9:3a:59:86:9e:62:
ea:cd:e9:82:cc:35:53:81:62:9e:dc:79:ec:e1:b5:
53:58:ee:37:1d:ce:0b:a1:21:58:29:15:c1:3d:e2:
36:56:d3:f6:35:38:95:2d:2f:fa:03:41:ac:c8:5e:
4e:c3:20:23:bd:56:37:af:cd:d8:25:7d:98:16:3a:
3e:f6:14:c6:f8:60:79:4c:94:d0:1e:ba:77:2b:f9:
9a:f2:0c:56:35:49:f2:1d:7b:d3:f5:cd:36:1a:e5:
84:21:0d:cb:81:af:95:27:63:44:28:70:94:bb:8e:
64:57:af:08:f6:d1:8b:73:f9:96:db:b8:6c:7e:d0:
b8:95:25:62:63:e3:20:cf:48:44:bb:f4:4a:2c:9c:
ec:e8:84:b4:8f:37:22:33:3d:81:04:17:6a:5f:d0:
c1:d0:e6:b9:a8:b1:88:f2:c9:3c:eb:8c:4a:5c:45:
20:fb:0c:9a:c7:e2:58:69:b1:f2:35:f0:7e:7d:b9:
b0:00:3c:42:88:55:ad:0e:33:a8:44:be:a6:29:f2:
23:43:3b:89:77:58:65:a6:ef:a1:a5:ed:70:df:41:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:24:7A:55:E9:E3:DC:71:E6:AA:AD:DC:2F:3B:C6:B2:96:B7:0D:89
X509v3 Authority Key Identifier:
keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:51:dd:0c:6e:6f:48:fa:c2:e1:90:bc:83:87:14:89:e9:32:
98:62:1b:5c:78:46:35:2b:2c:ad:20:26:a9:e6:35:03:4b:1f:
72:16:a9:c8:8e:d8:f2:36:60:d5:86:b1:68:46:a6:37:74:2a:
96:96:b3:b2:5b:87:c4:2a:b5:99:22:ff:d3:3f:ed:d1:a9:65:
72:36:df:55:b3:bd:d4:c8:89:71:4e:b1:78:33:ba:d7:8c:04:
93:44:c4:89:4d:36:90:94:8b:34:24:93:e5:9f:aa:84:3b:de:
68:5a:ab:35:c8:4f:67:71:46:49:ca:19:59:c7:b4:8a:a1:e1:
3a:32:56:9a:dc:a9:0a:fd:8f:77:ae:2b:89:78:2e:50:bb:36:
b8:b9:9c:69:de:e1:0e:bb:83:74:c7:ae:ea:fd:dc:dd:08:ec:
a3:06:5f:6b:8b:c6:8c:b7:94:53:35:71:a2:ba:80:93:b6:ed:
bc:28:9a:7b:b7:31:6d:e5:ac:18:fd:49:63:bb:a0:21:64:c4:
6f:59:db:63:a3:cf:c9:25:45:af:69:54:bb:1c:20:74:91:04:
e6:a4:84:63:f2:d1:f5:3f:2b:ca:8c:bd:d6:b5:76:15:d8:eb:
29:92:d5:db:5b:95:52:6c:1b:ca:6c:2c:0b:49:0e:d4:53:15:
94:3f:82:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURRYlxgTknVCQLhL7Z8IUEZtEp4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF
NDY1OTIxODAeFw0yNjEwMjgxODI0MDhaFw0yNjEwMjkyMTM5MDhaMDMxMTAvBgNV
BAMTKDlDMjQ3QTU1RTlFM0RDNzFFNkFBQUREQzJGM0JDNkIyOTZCNzBEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+VAW80DVk0xOUGH65lQ+2mO1
jxjHjliiaANqltZF8EAAqO/mxOk6WYaeYurN6YLMNVOBYp7ceezhtVNY7jcdzguh
IVgpFcE94jZW0/Y1OJUtL/oDQazIXk7DICO9VjevzdglfZgWOj72FMb4YHlMlNAe
uncr+ZryDFY1SfIde9P1zTYa5YQhDcuBr5UnY0QocJS7jmRXrwj20Ytz+ZbbuGx+
0LiVJWJj4yDPSES79EosnOzohLSPNyIzPYEEF2pf0MHQ5rmosYjyyTzrjEpcRSD7
DJrH4lhpsfI18H59ubAAPEKIVa0OM6hEvqYp8iNDO4l3WGWm76Gl7XDfQaB3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnCR6Venj3HHmqq3cLzvGspa3DYkwHwYDVR0j
BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK
VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx
OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z
NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALlHdDG5vSPrC4ZC8g4cUiekymGIbXHhGNSssrSAmqeY1A0sfchapyI7Y8jZg
1YaxaEamN3QqlpazsluHxCq1mSL/0z/t0allcjbfVbO91MiJcU6xeDO614wEk0TE
iU02kJSLNCST5Z+qhDveaFqrNchPZ3FGScoZWce0iqHhOjJWmtypCv2Pd64riXgu
ULs2uLmcad7hDruDdMeu6v3c3QjsowZfa4vGjLeUUzVxorqAk7btvCiae7cxbeWs
GP1JY7ugIWTEb1nbY6PPySVFr2lUuxwgdJEE5qSEY/LR9T8ryoy91rV2FdjrKZLV
21uVUmwbymwsC0kO1FMVlD+CVA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:52:37 2026 by rpki-client