
Error: rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
File: 834325D3983126D2D723BBC6EC0C6196882A6196.mft (raw, json)
Hash identifier: 1GvHYnF4msJMW8LBcl1danb3Cnh69KeSQHxDjT8aJmU=
Subject key identifier: 1A:33:98:82:75:D4:A3:88:05:6A:5F:A0:59:99:51:32:B3:51:E5:E3
Authority key identifier: 83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
Certificate issuer: /CN=834325D3983126D2D723BBC6EC0C6196882A6196
Certificate serial: 3CEAD42B32EC1EA5DDC96F2A3988F9B245B0AAAF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
Manifest number: 0425
Signing time: Sat 31 Oct 2026 14:02:40 +0000
Manifest this update: Sat 31 Oct 2026 13:57:40 +0000
Manifest next update: Sun 01 Nov 2026 16:23:40 +0000
Files and hashes: 1: 323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (hash: EOmtlBeeWZknhQW4AE3sw4WJfOLn280GQVnbdfSEE7k=)
2: 834325D3983126D2D723BBC6EC0C6196882A6196.crl (hash: Ek5uyM3X3bEV0ENQaUUclvLTir6NBompP+/3trjisc8=)
3: 3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (hash: hd1pP278w63N1IRyJlRJVGjbWfpCQLn3VEk8JPrF/eg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ea:d4:2b:32:ec:1e:a5:dd:c9:6f:2a:39:88:f9:b2:45:b0:aa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834325D3983126D2D723BBC6EC0C6196882A6196
Validity
Not Before: Oct 31 13:57:40 2026 GMT
Not After : Nov 1 16:23:40 2026 GMT
Subject: CN=1A33988275D4A388056A5FA059995132B351E5E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:15:de:0d:86:9c:a5:13:b0:7b:4e:b8:79:
9e:ee:56:fa:17:d7:12:de:86:f5:23:fa:5f:1b:12:
59:15:83:30:3d:a2:25:cb:cd:48:64:a8:b1:0e:75:
f4:53:29:ca:b9:24:06:2d:6c:07:73:87:cf:b2:89:
80:eb:d3:e1:60:80:11:82:a7:98:59:af:6a:fa:55:
79:5b:be:5a:48:a0:e2:35:8c:e4:1c:8e:75:e1:50:
05:fc:89:11:19:f3:00:22:ae:fc:ed:8c:5e:e1:39:
0b:50:91:57:ab:fa:0f:9f:ce:85:26:3b:18:bd:5b:
4a:ab:cb:90:32:6b:38:86:bc:dc:a0:d9:f5:45:1b:
61:6c:9f:6a:90:2f:07:74:4b:31:38:8a:d7:de:4d:
f1:5d:17:da:44:a5:bd:6e:fd:cc:73:e8:ce:1a:29:
69:4e:82:30:40:22:8a:03:6d:1a:2e:82:fb:2b:a7:
e3:de:5e:67:9b:89:95:47:48:65:19:fa:fb:ff:02:
09:7e:d9:84:8f:e2:2a:04:bb:41:17:98:92:8a:cf:
d8:16:e9:f5:1b:33:cf:4a:01:a1:a3:be:6c:3f:14:
8d:5b:bd:78:d0:f2:a1:79:54:59:09:2e:7c:5d:e4:
bd:8f:8b:6b:da:d5:6f:31:a7:69:92:ac:6c:08:e7:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:98:82:75:D4:A3:88:05:6A:5F:A0:59:99:51:32:B3:51:E5:E3
X509v3 Authority Key Identifier:
keyid:83:43:25:D3:98:31:26:D2:D7:23:BB:C6:EC:0C:61:96:88:2A:61:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/834325D3983126D2D723BBC6EC0C6196882A6196.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/4/834325D3983126D2D723BBC6EC0C6196882A6196.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2f:1e:f4:32:e0:29:0d:f6:54:07:b4:60:58:ec:e4:af:75:
90:c5:44:2d:42:ec:8e:c4:d3:14:6a:82:b9:71:69:80:89:b8:
95:2d:a1:39:dd:68:42:ec:bc:8a:c3:54:31:d2:11:1b:42:14:
cd:bd:ad:9b:79:92:5e:7b:90:55:c1:75:d1:07:00:62:d9:78:
f2:83:f9:a5:ff:49:ec:d1:49:5e:28:18:28:5e:dc:7a:c2:d8:
8f:32:7f:11:b3:c3:6e:d8:56:d8:ab:d2:9c:26:18:92:81:fd:
89:ec:8b:8c:a8:29:27:f9:71:a5:02:ed:87:ca:91:01:f7:29:
43:f7:aa:23:7b:06:d0:f1:f5:e5:54:6e:06:00:fd:2c:95:2c:
aa:8b:b7:5c:ad:c4:2a:18:f6:76:a0:ac:c1:67:a8:5b:eb:87:
3e:4d:18:9d:7c:8b:d0:91:04:fe:a1:dc:b8:a6:56:04:05:80:
67:e2:1c:28:0c:c8:fb:08:d8:bd:7f:9f:a4:56:48:88:a6:c8:
df:1d:5f:e4:c0:a2:4d:41:14:e4:45:e8:a0:ac:3e:f9:cb:9d:
8a:02:f1:a6:bf:d2:e0:1d:13:bb:80:56:75:a1:6c:0d:41:d5:
fd:a9:cc:f5:4e:32:e4:8b:9d:13:a1:dd:db:23:bb:cc:6f:8a:
4b:f6:d3:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPOrUKzLsHqXdyW8qOYj5skWwqq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM0MzI1RDM5ODMxMjZEMkQ3MjNCQkM2RUMwQzYxOTY4
ODJBNjE5NjAeFw0yNjEwMzExMzU3NDBaFw0yNjExMDExNjIzNDBaMDMxMTAvBgNV
BAMTKDFBMzM5ODgyNzVENEEzODgwNTZBNUZBMDU5OTk1MTMyQjM1MUU1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvhXeDYacpROwe064eZ7uVvoX
1xLehvUj+l8bElkVgzA9oiXLzUhkqLEOdfRTKcq5JAYtbAdzh8+yiYDr0+FggBGC
p5hZr2r6VXlbvlpIoOI1jOQcjnXhUAX8iREZ8wAirvztjF7hOQtQkVer+g+fzoUm
Oxi9W0qry5AyaziGvNyg2fVFG2Fsn2qQLwd0SzE4itfeTfFdF9pEpb1u/cxz6M4a
KWlOgjBAIooDbRougvsrp+PeXmebiZVHSGUZ+vv/Agl+2YSP4ioEu0EXmJKKz9gW
6fUbM89KAaGjvmw/FI1bvXjQ8qF5VFkJLnxd5L2Pi2va1W8xp2mSrGwI55iHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGjOYgnXUo4gFal+gWZlRMrNR5eMwHwYDVR0j
BBgwFoAUg0Ml05gxJtLXI7vG7AxhlogqYZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0MxczFZQVFORjQzQ2NTdFloOFNaMXZleVNmaTkxeGtxTFNyanVmM2pZ
TksvNC84MzQzMjVEMzk4MzEyNkQyRDcyM0JCQzZFQzBDNjE5Njg4MkE2MTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNDMyNUQzOTgzMTI2RDJE
NzIzQkJDNkVDMEM2MTk2ODgyQTYxOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0MxczFZQVFORjQzQ2NTdFloOFNaMXZleVNmaTkxeGtxTFNyanVmM2pZTksvNC84
MzQzMjVEMzk4MzEyNkQyRDcyM0JCQzZFQzBDNjE5Njg4MkE2MTk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsC8e9DLgKQ32VAe0YFjs5K91kMVELULsjsTTFGqCuXFpgIm4lS2hOd1oQuy8
isNUMdIRG0IUzb2tm3mSXnuQVcF10QcAYtl48oP5pf9J7NFJXigYKF7cesLYjzJ/
EbPDbthW2KvSnCYYkoH9ieyLjKgpJ/lxpQLth8qRAfcpQ/eqI3sG0PH15VRuBgD9
LJUsqou3XK3EKhj2dqCswWeoW+uHPk0YnXyL0JEE/qHcuKZWBAWAZ+IcKAzI+wjY
vX+fpFZIiKbI3x1f5MCiTUEU5EXooKw++cudigLxpr/S4B0Tu4BWdaFsDUHV/anM
9U4y5IudE6Hd2yO7zG+KS/bT/g==
-----END CERTIFICATE-----
Generated at Sat Oct 31 18:52:53 2026 by rpki-client