
Error: rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
File: 77B49FAE0B44A260013E4F5043DD07033113F7D0.mft (raw, json)
Hash identifier: YB1RcpV6JPoelHZoNLtAjdBOS8bOQXRou74SAUmf8YU=
Subject key identifier: 8C:FF:AB:28:CA:74:10:A3:5B:15:76:BA:0C:0A:90:25:A3:7F:B0:E5
Authority key identifier: 77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
Certificate issuer: /CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Certificate serial: 6F68564467F16D5A3CC6E6C277DE3EE4B64499F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
Manifest number: 022E
Signing time: Sun 23 Aug 2026 07:00:00 +0000
Manifest this update: Sun 23 Aug 2026 06:55:00 +0000
Manifest next update: Mon 24 Aug 2026 10:19:00 +0000
Files and hashes: 1: 3138372e36322e37362e302f32322d3234203d3e20323639373133.roa (hash: u2oUI7R5QkY07IuQmdqBcGMHSyvxstboigHHsngLHbc=)
2: 323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (hash: OekydxEboXttQnj/bhd3VXYL76popZsFf2yrfCqDBm4=)
3: 77B49FAE0B44A260013E4F5043DD07033113F7D0.crl (hash: NjHfSINt3WSt3t8nFIq5vbiveO/Ocs51i4EnIzJGTW8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 10:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:68:56:44:67:f1:6d:5a:3c:c6:e6:c2:77:de:3e:e4:b6:44:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Validity
Not Before: Aug 23 06:55:00 2026 GMT
Not After : Aug 24 10:19:00 2026 GMT
Subject: CN=8CFFAB28CA7410A35B1576BA0C0A9025A37FB0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:64:df:a0:52:4f:56:24:dc:27:01:b5:f4:f4:
ce:e2:69:1c:70:3e:d0:df:f9:df:c4:73:1f:fb:12:
2e:9d:e4:15:f3:cb:a3:38:93:5e:3a:ae:ec:8f:ec:
78:e8:ba:20:52:b0:40:32:3d:49:e1:49:3b:18:8e:
c4:00:ae:bc:52:fb:4b:97:50:40:f9:cd:a6:89:bf:
54:f3:6e:d5:00:c7:1d:a9:a5:db:96:a8:a0:e3:f2:
7f:b6:46:8a:8b:a9:3a:bd:6a:fc:c2:91:4d:05:2e:
e2:55:dd:37:2f:a9:cc:52:64:8d:4d:2b:58:d6:0a:
d5:0e:ff:48:3c:bb:9b:86:a6:44:7a:f8:fe:68:31:
d4:7b:b0:01:ad:a7:d5:dd:c8:fb:a5:70:b8:d4:b0:
c2:bd:53:b0:25:17:af:35:90:17:fe:83:67:9e:c0:
f6:b2:f1:a1:21:4b:65:58:17:0d:00:b0:3e:16:d8:
40:00:5b:d1:6e:c2:9d:e3:09:ee:bf:79:9c:93:05:
2a:40:f6:9a:d9:ed:31:2d:f9:d1:db:cf:fc:fb:fd:
2c:d7:61:b7:a3:1c:d9:aa:79:1d:e5:bf:af:8c:ec:
37:d9:cd:a0:c1:69:a6:33:d4:83:21:82:6b:c3:5c:
04:08:5f:73:eb:d8:66:9f:7a:e1:b5:9e:84:81:e0:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:AB:28:CA:74:10:A3:5B:15:76:BA:0C:0A:90:25:A3:7F:B0:E5
X509v3 Authority Key Identifier:
keyid:77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e0:7c:3f:3a:c8:af:de:87:b9:67:fb:14:92:c5:22:bb:6f:
7d:c3:12:2a:fe:67:57:32:01:fa:7e:6c:75:63:81:1b:f0:ef:
12:a1:9a:bd:63:b2:8f:69:2d:3e:32:28:17:d4:4f:c6:0a:5d:
09:21:b7:b6:07:85:c0:f5:88:d3:e6:a6:3f:c8:08:91:25:f1:
65:50:94:fd:f0:92:95:af:96:e1:ed:31:ac:eb:c9:95:db:ab:
8a:59:46:92:8f:26:0b:d7:9b:09:d7:f8:cf:55:99:a3:32:a5:
e9:48:c2:fc:a7:7b:e5:50:8d:91:8d:50:20:a3:df:b9:8c:0f:
fd:c1:f9:c8:a7:a1:49:30:04:5a:72:02:21:85:82:e9:49:b3:
7d:4a:0c:af:57:95:8a:f0:e6:9c:ac:43:50:48:61:e6:e4:e4:
4b:70:2a:68:3f:f7:16:10:c5:43:ad:ec:8e:55:13:8e:26:ee:
f2:17:f3:61:73:fb:31:d0:22:1f:79:ee:c7:6c:0c:6e:18:c4:
86:e4:0b:d2:52:94:60:f4:dd:fe:dd:a8:bd:38:ba:ec:ba:b9:
49:e1:64:6d:dd:cb:94:3b:aa:ad:9e:7d:4f:a9:40:9b:96:ab:
f3:b8:d1:87:cb:ae:4e:bc:c9:63:4a:90:f2:85:c8:bd:a7:f0:
39:a6:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:55:32 2026 by rpki-client