
Error: rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File: 8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier: a/J4dp8u4241tRxo5334/CMxxB4+FggI6IntcSF45m8=
Subject key identifier: D3:EA:EE:14:81:BE:F1:6A:44:B4:D2:B1:65:B0:67:9A:B3:AA:B9:E6
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer: /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial: 49CC299B44B4A2412F130C7F035499F5D61A43F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number: 04E6
Signing time: Sun 01 Nov 2026 03:34:24 +0000
Manifest this update: Sun 01 Nov 2026 03:29:24 +0000
Manifest next update: Mon 02 Nov 2026 04:38:24 +0000
Files and hashes: 1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: G/v8kEtz/ibdrv3vSMOdvjAnz6pmVQHUq/LcQdnx5Qs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 04:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cc:29:9b:44:b4:a2:41:2f:13:0c:7f:03:54:99:f5:d6:1a:43:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Validity
Not Before: Nov 1 03:29:24 2026 GMT
Not After : Nov 2 04:38:24 2026 GMT
Subject: CN=D3EAEE1481BEF16A44B4D2B165B0679AB3AAB9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:8a:df:42:47:94:92:9b:b0:4d:35:54:86:
cc:33:30:f9:d7:6e:4b:7d:54:64:3c:da:7e:b4:c4:
ca:29:36:db:6b:c5:59:95:12:61:08:5a:55:70:01:
14:b6:44:3a:7f:dd:cf:dc:52:9e:7e:48:ef:c7:65:
81:35:c4:c6:98:94:16:1e:02:32:90:c9:9a:41:26:
f4:77:cc:59:7d:57:c9:75:6e:9f:3f:8f:f5:bb:b2:
cf:64:ee:ba:29:50:bc:f5:2b:87:c0:db:29:e7:d3:
2a:0a:6b:47:73:13:77:11:d0:2a:5f:b0:70:f1:8c:
00:6d:91:2a:2a:4c:1d:09:30:4d:6a:5b:a4:24:5b:
7e:ae:e1:30:46:d7:97:44:ff:56:a9:7a:51:50:46:
75:42:71:37:18:03:a5:14:f6:fd:90:19:1c:a1:46:
f1:c1:6a:d3:c1:4d:b7:b6:48:e1:12:43:8d:52:39:
2e:44:3c:f4:42:73:6c:51:9b:e3:96:08:22:38:a0:
9b:a4:bc:46:48:bd:f5:0c:7f:cd:eb:94:f0:3f:c1:
8a:6c:6f:a1:d1:c9:a9:76:d8:12:c8:e6:f0:8a:58:
b4:7b:7f:ec:60:94:e6:17:96:d3:3c:ec:08:3c:f5:
f3:f5:3b:38:bf:bf:40:e6:14:d6:bc:47:cc:c1:4b:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:EE:14:81:BE:F1:6A:44:B4:D2:B1:65:B0:67:9A:B3:AA:B9:E6
X509v3 Authority Key Identifier:
keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:45:01:f6:59:f8:15:71:8f:79:92:f4:65:54:13:dd:e1:
41:3d:a0:c5:9a:c6:fc:f3:21:63:23:cd:be:fb:67:68:76:3c:
96:73:8b:35:a4:d8:51:7c:00:fd:4f:f3:37:8f:99:fd:ea:98:
26:9a:b9:9b:e9:93:55:b6:58:3c:ec:d5:3d:0a:71:b9:e3:0c:
ea:57:39:69:18:c7:26:b3:2b:74:6f:ca:88:ed:22:ec:ea:fe:
1f:ee:7c:91:0e:52:20:ac:79:24:6b:af:40:55:6e:76:1f:27:
a1:d4:9c:69:a3:08:9c:18:d2:5d:07:69:4a:a0:89:70:69:78:
d9:3d:58:23:e7:22:da:a8:64:ac:56:5b:8b:f4:9d:a2:70:23:
5e:e7:1f:ed:93:44:8a:76:7c:ba:54:00:ab:de:df:1a:34:d0:
a0:3e:38:8b:d3:0b:8f:9b:0e:3c:f8:bc:f0:ad:59:f9:5b:2d:
39:7d:e6:79:ea:89:a2:2c:80:37:9c:21:c8:65:1a:cd:c8:3e:
df:a3:73:e5:5a:1e:84:fd:e3:6b:a0:70:56:d9:54:f9:02:1c:
37:39:48:08:82:88:e3:ca:e5:23:6a:be:29:31:d8:0d:f9:1c:
e2:74:83:0a:e1:3e:e1:0a:04:b2:6a:55:42:3e:47:e0:65:44:
91:87:a6:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUScwpm0S0okEvEwx/A1SZ9dYaQ/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBQTU3MkNEQUI3NDBBNTY5NzdGRkZDNjAyRjExM0U0
NzNGMkU3NzAeFw0yNjExMDEwMzI5MjRaFw0yNjExMDIwNDM4MjRaMDMxMTAvBgNV
BAMTKEQzRUFFRTE0ODFCRUYxNkE0NEI0RDJCMTY1QjA2NzlBQjNBQUI5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrYrfQkeUkpuwTTVUhswzMPnX
bkt9VGQ82n60xMopNttrxVmVEmEIWlVwARS2RDp/3c/cUp5+SO/HZYE1xMaYlBYe
AjKQyZpBJvR3zFl9V8l1bp8/j/W7ss9k7ropULz1K4fA2ynn0yoKa0dzE3cR0Cpf
sHDxjABtkSoqTB0JME1qW6QkW36u4TBG15dE/1apelFQRnVCcTcYA6UU9v2QGRyh
RvHBatPBTbe2SOESQ41SOS5EPPRCc2xRm+OWCCI4oJukvEZIvfUMf83rlPA/wYps
b6HRyal22BLI5vCKWLR7f+xglOYXltM87Ag89fP1Ozi/v0DmFNa8R8zBS+QlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0+ruFIG+8WpEtNKxZbBnmrOqueYwHwYDVR0j
BBgwFoAUjqpXLNq3QKVpd//8YC8RPkc/LncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBOS1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEz
SlcvMS84RUFBNTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUE1NzJDREFCNzQwQTU2
OTc3RkZGQzYwMkYxMTNFNDczRjJFNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RnBOS1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEzSlcvMS84
RUFBNTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAc1FAfZZ+BVxj3mS9GVUE93hQT2gxZrG/PMhYyPNvvtnaHY8lnOLNaTYUXwA
/U/zN4+Z/eqYJpq5m+mTVbZYPOzVPQpxueMM6lc5aRjHJrMrdG/KiO0i7Or+H+58
kQ5SIKx5JGuvQFVudh8nodScaaMInBjSXQdpSqCJcGl42T1YI+ci2qhkrFZbi/Sd
onAjXucf7ZNEinZ8ulQAq97fGjTQoD44i9MLj5sOPPi88K1Z+VstOX3meeqJoiyA
N5whyGUazcg+36Nz5VoehP3ja6BwVtlU+QIcNzlICIKI48rlI2q+KTHYDfkc4nSD
CuE+4QoEsmpVQj5H4GVEkYemBQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:42:39 2026 by rpki-client