
Error: rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
File: 8F7C897DFF70774947A63DAC93567C79586D1B6C.mft (raw, json)
Hash identifier: Zwo/sot6Co+GqmxjtY5XeMV6i4LZFaiuvGk/y6RDrzs=
Subject key identifier: C1:27:FC:F4:C3:FB:BB:AB:79:3F:53:1C:6A:D5:C3:34:A8:03:B4:F8
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Certificate issuer: /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial: 38357144AC9134191CA892D825F5447637931382
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
Manifest number: 04E4
Signing time: Thu 29 Oct 2026 04:32:56 +0000
Manifest this update: Thu 29 Oct 2026 04:27:56 +0000
Manifest next update: Fri 30 Oct 2026 07:53:56 +0000
Files and hashes: 1: 3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (hash: GqN5IX+bmxqmm+8/1bjCat4WBG3v7hsNsZkjjn96TaQ=)
2: 323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (hash: UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=)
3: 8F7C897DFF70774947A63DAC93567C79586D1B6C.crl (hash: /JfvgAYV3yCsZP/rfQZQeaRe/WvsFEsDA1IC5sC94yI=)
4: 3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (hash: OS68o1TGNwneKN/uHeQ3QEUgEwYru5Aj5p0IxB/BEwc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:35:71:44:ac:91:34:19:1c:a8:92:d8:25:f5:44:76:37:93:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Validity
Not Before: Oct 29 04:27:56 2026 GMT
Not After : Oct 30 07:53:56 2026 GMT
Subject: CN=C127FCF4C3FBBBAB793F531C6AD5C334A803B4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:70:65:96:c6:18:1d:4f:0c:21:9d:9a:fc:
d2:c1:d1:8d:88:f5:67:e0:e8:75:51:88:bf:84:d3:
92:0f:39:f9:2f:4a:4a:3a:47:e4:97:32:56:94:47:
ff:a0:dc:d6:af:1f:23:00:81:fa:ca:cb:d4:2b:30:
d1:1a:83:b1:32:da:10:b5:ea:09:93:58:e5:2d:7c:
cb:10:8f:d2:95:59:31:f5:1b:fe:59:71:88:03:4d:
23:f3:fe:41:e9:30:ea:27:43:f8:c3:9f:c3:45:b3:
d8:5d:78:33:0c:a3:82:93:34:9e:63:2e:87:f2:6e:
a8:1c:35:d3:4c:d1:2f:b7:43:ad:57:bb:61:8d:7a:
70:24:b0:d7:59:33:52:8a:c5:53:c2:92:37:92:6c:
fd:64:c3:43:0c:32:a4:77:28:27:82:36:2f:f8:a8:
fe:4a:01:5b:f2:be:87:97:81:7e:b2:ab:70:5f:ee:
16:88:30:c1:18:89:f0:c3:2d:74:86:8b:63:06:26:
7e:e3:73:e6:46:4a:96:41:fd:74:50:b7:51:2a:e5:
fe:82:4d:ab:5d:e5:92:05:df:93:46:9b:9e:69:84:
f4:56:32:ba:72:d7:0f:83:ba:b3:fc:46:39:37:16:
06:72:dc:b9:b2:3e:3b:10:18:05:10:11:ab:6c:b2:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:FC:F4:C3:FB:BB:AB:79:3F:53:1C:6A:D5:C3:34:A8:03:B4:F8
X509v3 Authority Key Identifier:
keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:27:96:b2:dd:e7:7c:d9:17:4e:50:74:b2:7f:ad:8f:aa:20:
5d:00:81:a5:dc:b9:18:1f:31:82:cb:aa:0b:8f:82:c9:0c:17:
55:05:17:a8:ea:88:65:b6:60:70:5b:9b:2e:94:00:b7:91:f6:
f0:a0:0e:b9:ff:ca:62:d3:08:88:e5:fe:86:43:9b:d9:99:90:
80:b1:36:24:cd:f5:8b:f8:39:ff:d7:c3:8b:6e:64:e5:bb:09:
bf:b0:d8:38:a0:3a:ee:ce:ca:ed:5c:51:24:15:6b:97:48:ff:
1f:0f:fc:19:67:ca:0b:d4:c0:78:ba:13:df:8b:19:d0:96:2c:
ff:c7:ce:ed:bd:d0:fc:8b:34:a2:a4:3e:18:0c:ba:43:30:9f:
1a:f4:1a:b2:41:a3:09:ae:17:a0:86:ed:aa:4e:14:ef:46:f5:
dd:8b:c4:af:5c:05:af:dc:45:40:7f:c0:cb:ca:52:61:00:e1:
60:a9:7e:3b:ef:f8:24:74:5d:8d:b1:20:ee:8c:1d:26:8e:5e:
a2:b4:c9:d5:3c:5a:62:c8:d7:c8:74:42:d0:5e:b8:ca:5e:c3:
76:a3:40:68:2d:2a:9f:9e:4e:da:09:1c:00:a5:ea:c8:50:48:
e2:02:15:80:66:cb:c8:7e:6b:ca:67:07:a8:50:20:29:e0:e9:
f2:b7:f8:9d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUODVxRKyRNBkcqJLYJfVEdjeTE4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY3Qzg5N0RGRjcwNzc0OTQ3QTYzREFDOTM1NjdDNzk1
ODZEMUI2QzAeFw0yNjEwMjkwNDI3NTZaFw0yNjEwMzAwNzUzNTZaMDMxMTAvBgNV
BAMTKEMxMjdGQ0Y0QzNGQkJCQUI3OTNGNTMxQzZBRDVDMzM0QTgwM0I0RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp73BllsYYHU8MIZ2a/NLB0Y2I
9Wfg6HVRiL+E05IPOfkvSko6R+SXMlaUR/+g3NavHyMAgfrKy9QrMNEag7Ey2hC1
6gmTWOUtfMsQj9KVWTH1G/5ZcYgDTSPz/kHpMOonQ/jDn8NFs9hdeDMMo4KTNJ5j
LofybqgcNdNM0S+3Q61Xu2GNenAksNdZM1KKxVPCkjeSbP1kw0MMMqR3KCeCNi/4
qP5KAVvyvoeXgX6yq3Bf7haIMMEYifDDLXSGi2MGJn7jc+ZGSpZB/XRQt1Eq5f6C
Tatd5ZIF35NGm55phPRWMrpy1w+DurP8Rjk3FgZy3LmyPjsQGAUQEatssv4jAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUwSf89MP7u6t5P1McatXDNKgDtPgwHwYDVR0j
BBgwFoAUj3yJff9wd0lHpj2sk1Z8eVhtG2wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QckY4V0VnVW16dTVlNjNEWlRjVFdueEdqRG1iZThIWFRCcm9yeHVLN2Zm
LzEvOEY3Qzg5N0RGRjcwNzc0OTQ3QTYzREFDOTM1NjdDNzk1ODZEMUI2Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84RjdDODk3REZGNzA3NzQ5NDdB
NjNEQUM5MzU2N0M3OTU4NkQxQjZDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1By
RjhXRWdVbXp1NWU2M0RaVGNUV254R2pEbWJlOEhYVEJyb3J4dUs3ZmYvMS84RjdD
ODk3REZGNzA3NzQ5NDdBNjNEQUM5MzU2N0M3OTU4NkQxQjZDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
fieWst3nfNkXTlB0sn+tj6ogXQCBpdy5GB8xgsuqC4+CyQwXVQUXqOqIZbZgcFub
LpQAt5H28KAOuf/KYtMIiOX+hkOb2ZmQgLE2JM31i/g5/9fDi25k5bsJv7DYOKA6
7s7K7VxRJBVrl0j/Hw/8GWfKC9TAeLoT34sZ0JYs/8fO7b3Q/Is0oqQ+GAy6QzCf
GvQaskGjCa4XoIbtqk4U70b13YvEr1wFr9xFQH/Ay8pSYQDhYKl+O+/4JHRdjbEg
7owdJo5eorTJ1TxaYsjXyHRC0F64yl7DdqNAaC0qn55O2gkcAKXqyFBI4gIVgGbL
yH5rymcHqFAgKeDp8rf4nQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:31:13 2026 by rpki-client