
Error: rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File: 8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier: bZ0IpcF4MNE8OTjFb1GKFt6wbGyzrEzwWKUTWmbVu8E=
Subject key identifier: FD:CA:5C:25:29:05:5B:B3:D4:C0:82:3A:B6:80:CC:24:16:8F:06:0E
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer: /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial: 718ED1C6A9A84924AE5339FF649FA5E3CEF7AC33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number: 04E7
Signing time: Sun 01 Nov 2026 20:42:50 +0000
Manifest this update: Sun 01 Nov 2026 20:37:50 +0000
Manifest next update: Mon 02 Nov 2026 23:08:50 +0000
Files and hashes: 1: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: tZnQrSYoSWk9EN1nMg6pjAGhlLl9aUr2SeA3vjWWDDg=)
2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 23:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8e:d1:c6:a9:a8:49:24:ae:53:39:ff:64:9f:a5:e3:ce:f7:ac:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Validity
Not Before: Nov 1 20:37:50 2026 GMT
Not After : Nov 2 23:08:50 2026 GMT
Subject: CN=FDCA5C2529055BB3D4C0823AB680CC24168F060E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:19:53:c2:75:79:b7:00:e3:6d:88:bd:54:
c3:5f:7b:d0:fb:9d:fd:88:19:96:ad:4b:fc:63:c3:
0e:af:53:79:74:c0:ed:71:0f:8c:f2:9f:55:62:64:
b1:ac:2f:32:2e:84:35:c3:9e:5a:fd:4b:6b:d1:fe:
50:ec:52:e0:42:00:1c:5a:cc:35:4c:51:c2:b3:9e:
73:75:7a:e6:98:48:c8:9d:75:ee:57:96:13:ea:de:
ee:be:27:bb:56:d3:09:16:80:c8:ca:01:67:3e:06:
8d:e6:6a:5d:5e:38:a1:3f:08:4f:3c:6d:ad:91:3a:
ba:e4:0f:ce:af:7d:23:b8:ee:b0:0d:0e:61:9e:a6:
29:81:e3:12:28:74:02:20:bf:61:21:b7:b7:fa:a0:
f6:de:ef:00:6f:c1:07:1a:63:ef:e9:8b:a0:1a:a8:
0c:dd:93:ca:70:e7:18:fe:05:a7:7a:02:cb:b5:07:
58:b2:e3:26:da:a7:19:5c:de:e9:61:64:58:25:8f:
6b:ff:f0:0b:39:43:08:9e:91:f1:b2:e8:30:a8:c2:
d1:64:4b:d4:c8:5d:6d:6c:23:7b:99:76:bc:d6:84:
b8:23:38:51:cd:72:8c:13:18:0a:82:44:92:1f:93:
e0:99:3a:56:fc:b8:eb:cc:7b:55:8e:46:56:e8:6b:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:5C:25:29:05:5B:B3:D4:C0:82:3A:B6:80:CC:24:16:8F:06:0E
X509v3 Authority Key Identifier:
keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f1:32:4b:82:13:60:69:f0:c1:39:e7:ca:39:78:a1:27:39:
7f:39:70:98:78:5b:c5:83:73:10:08:51:92:2a:15:19:b2:5e:
84:e7:8e:9c:c8:f6:7a:5e:bd:96:6d:06:e6:e1:56:f6:ad:8b:
2b:89:1a:bd:d0:ba:2b:6c:35:1f:da:a1:4d:88:c9:0a:4a:ba:
71:8e:3e:76:53:27:97:2e:5d:8e:25:4d:6d:43:c4:cd:05:09:
4f:ce:63:ef:9c:28:e1:e1:c1:ea:03:dc:58:e2:00:2e:78:e8:
4f:47:76:9d:4f:3c:fe:98:28:ad:70:cd:46:9f:e4:e6:dc:6f:
05:00:ef:36:18:3d:b9:39:e5:df:f2:6c:2f:a9:ff:48:20:54:
68:58:b3:29:bc:06:ec:9c:af:53:d4:e3:b1:a9:56:bb:89:42:
94:77:cf:f9:44:ae:b6:86:93:72:3c:30:8e:52:3d:f1:d9:4f:
f7:74:a1:87:8d:ee:90:61:21:ce:2c:28:19:23:da:52:b9:dc:
ef:2e:b8:9f:32:81:4a:37:18:ba:f0:2a:75:1c:86:01:9d:1f:
3e:8d:e6:a6:4d:92:a4:15:ba:dc:4b:d5:4d:48:26:60:b7:fa:
c9:9e:6e:b3:ba:9c:e5:6c:3a:17:fa:90:7b:f9:22:df:71:24:
aa:ec:bd:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcY7RxqmoSSSuUzn/ZJ+l4873rDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBQTU3MkNEQUI3NDBBNTY5NzdGRkZDNjAyRjExM0U0
NzNGMkU3NzAeFw0yNjExMDEyMDM3NTBaFw0yNjExMDIyMzA4NTBaMDMxMTAvBgNV
BAMTKEZEQ0E1QzI1MjkwNTVCQjNENEMwODIzQUI2ODBDQzI0MTY4RjA2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZRlTwnV5twDjbYi9VMNfe9D7
nf2IGZatS/xjww6vU3l0wO1xD4zyn1ViZLGsLzIuhDXDnlr9S2vR/lDsUuBCABxa
zDVMUcKznnN1euaYSMidde5XlhPq3u6+J7tW0wkWgMjKAWc+Bo3mal1eOKE/CE88
ba2ROrrkD86vfSO47rANDmGepimB4xIodAIgv2Eht7f6oPbe7wBvwQcaY+/pi6Aa
qAzdk8pw5xj+Bad6Asu1B1iy4ybapxlc3ulhZFglj2v/8As5QwiekfGy6DCowtFk
S9TIXW1sI3uZdrzWhLgjOFHNcowTGAqCRJIfk+CZOlb8uOvMe1WORlboa0jPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/cpcJSkFW7PUwII6toDMJBaPBg4wHwYDVR0j
BBgwFoAUjqpXLNq3QKVpd//8YC8RPkc/LncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBOS1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEz
SlcvMS84RUFBNTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUE1NzJDREFCNzQwQTU2
OTc3RkZGQzYwMkYxMTNFNDczRjJFNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnBOS1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEzSlcvMS84
RUFBNTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABvEyS4ITYGnwwTnnyjl4oSc5fzlwmHhbxYNzEAhRkioVGbJehOeOnMj2el69
lm0G5uFW9q2LK4kavdC6K2w1H9qhTYjJCkq6cY4+dlMnly5djiVNbUPEzQUJT85j
75wo4eHB6gPcWOIALnjoT0d2nU88/pgorXDNRp/k5txvBQDvNhg9uTnl3/JsL6n/
SCBUaFizKbwG7JyvU9TjsalWu4lClHfP+USutoaTcjwwjlI98dlP93Shh43ukGEh
ziwoGSPaUrnc7y64nzKBSjcYuvAqdRyGAZ0fPo3mpk2SpBW63EvVTUgmYLf6yZ5u
s7qc5Ww6F/qQe/ki33Ekquy9eA==
-----END CERTIFICATE-----
Generated at Mon Nov 2 05:56:09 2026 by rpki-client