
Error: rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
File: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft (raw, json)
Hash identifier: 0X+U5KdL06IlXBJ9UFLIqRm71Lwl9pxB5TtQSFIROvg=
Subject key identifier: A4:B6:70:02:DF:76:EE:D8:4D:D0:D3:2F:B7:B3:6B:EB:8D:B8:3A:93
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Certificate issuer: /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial: 466D44A7792B6E3653A7878BB56A0A23CCFAA765
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
Manifest number: 04E1
Signing time: Thu 29 Oct 2026 14:30:01 +0000
Manifest this update: Thu 29 Oct 2026 14:25:01 +0000
Manifest next update: Fri 30 Oct 2026 16:43:01 +0000
Files and hashes: 1: 34352e3233352e39322e302f32332d3233203d3e20323637343130.roa (hash: 03Mqs/VxX4YlEDgZyihTQwdg0wG9WA4K0cWVShPcQ/0=)
2: 34352e3233352e39352e302f32342d3234203d3e20323637343130.roa (hash: hducqS2ZdGZm+SE5GdXxUznr8Wm7+DXWX3dd+MnB8yI=)
3: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl (hash: KIddU7KZHl+fYIbGF9V1Jm4jwu4eSKM1+8W6TRMkXlk=)
4: 34352e3233352e39332e302f32342d3234203d3e20323637343130.roa (hash: 1bgkEfX/ZiKH+p1a8vc8ehTtCBqKtbVVtw8qkL5lHGI=)
5: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (hash: bf/O8ThUR/sxxfb+3RnCJKyXL2K/OaMkDOc8hSaDklY=)
6: 34352e3233352e39342e302f32342d3234203d3e20323637343130.roa (hash: O1px1yBgfGPgKN2tRciqp1LjemGUV5DFMNwWLnJOCE4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 16:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6d:44:a7:79:2b:6e:36:53:a7:87:8b:b5:6a:0a:23:cc:fa:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Validity
Not Before: Oct 29 14:25:01 2026 GMT
Not After : Oct 30 16:43:01 2026 GMT
Subject: CN=A4B67002DF76EED84DD0D32FB7B36BEB8DB83A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:eb:3e:03:a7:eb:83:06:8e:14:c2:eb:fd:
ec:be:58:e4:bc:3b:21:0b:fe:bf:91:6b:0f:da:f6:
86:85:ec:0d:40:06:c7:99:6e:58:b9:68:20:46:f6:
fc:1a:e9:df:03:2c:b7:d6:9d:8b:05:ad:f3:72:01:
4e:b2:a1:f4:64:5a:c5:39:66:50:d9:02:e8:ab:02:
16:56:44:8d:93:34:dd:9c:ca:de:5d:dc:ca:f5:0c:
4b:cc:7c:b4:07:af:d9:97:6a:43:bb:90:b2:79:2b:
ab:20:2d:3d:db:cd:b8:4e:8f:10:7d:8e:f0:54:ee:
cb:2b:38:c9:96:3b:65:fe:9c:87:49:b3:57:c4:b9:
83:4a:a1:fc:4a:6e:b3:f2:a6:b1:7b:8e:9a:d6:59:
e3:ad:51:fc:ca:20:19:6b:b1:ae:d7:af:6a:e4:5d:
26:53:dc:b3:67:28:c4:4b:40:77:32:80:1d:83:ef:
ce:fe:97:67:35:b8:8f:cb:49:1d:b8:3e:70:a5:8e:
cf:27:59:7d:7e:1d:0e:ff:78:e2:81:6e:eb:3e:aa:
0f:62:57:37:c5:77:e0:24:2d:80:5a:44:78:bd:5b:
3d:46:bd:53:ef:76:6e:f4:02:2b:e3:99:40:ec:e9:
1e:d9:a2:f4:ff:39:19:be:99:39:0f:71:11:b2:11:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:70:02:DF:76:EE:D8:4D:D0:D3:2F:B7:B3:6B:EB:8D:B8:3A:93
X509v3 Authority Key Identifier:
keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d9:0b:21:70:33:e2:4c:ff:64:f0:da:b8:e9:b7:6b:d2:bc:
b5:7f:d9:f4:43:dc:4a:a0:fd:48:e3:11:6f:ea:6f:e2:f2:9d:
b6:77:2b:e1:22:2d:21:ad:89:06:56:dd:07:19:ee:b7:46:13:
aa:10:2d:3b:7c:34:dd:92:07:e1:e8:8f:23:38:76:c6:77:6e:
82:5b:f7:87:7a:f6:a8:ce:c6:dc:59:5b:d2:6d:11:e0:9f:cf:
3b:5c:2b:c5:9c:a6:cb:1c:ee:d3:66:46:ef:86:2d:eb:60:62:
e2:46:b6:57:e4:0d:dc:9c:a2:f6:38:68:17:db:68:af:c3:ae:
41:81:70:03:42:c4:33:f2:ff:e2:26:21:30:6a:68:97:b5:11:
ee:6f:1f:24:34:cf:e1:5d:77:06:e2:7d:ec:2a:ac:62:8e:12:
a2:82:ab:f8:8e:bf:9b:4c:1b:71:d6:a3:25:9f:3f:07:09:55:
5d:6a:ec:41:95:11:2a:f9:af:20:a6:f8:8f:d8:c5:98:7f:e9:
81:95:87:9c:e2:83:95:51:46:30:4d:69:2e:4f:b9:c6:3f:bf:
1c:9a:30:ef:cc:2c:30:b2:f3:ac:1d:1e:b2:cd:a4:26:ff:2b:
43:fe:db:1d:68:39:56:ef:7e:d0:03:d2:c8:0b:79:94:5c:86:
e8:4b:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:47:44 2026 by rpki-client