
Error: rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
File: 805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft (raw, json)
Hash identifier: Kgx9/0ZOdfDrZZWD/qg7OGmbJwk7hZVJqOkjfqqDs2E=
Subject key identifier: A3:6D:76:A3:55:36:B9:31:68:38:00:E2:63:8D:60:16:A0:4D:26:F0
Authority key identifier: 80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
Certificate issuer: /CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Certificate serial: 08E8C851D3B12CE518427C63217F5ED30365B2C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
Manifest number: 04E9
Signing time: Mon 02 Nov 2026 10:43:20 +0000
Manifest this update: Mon 02 Nov 2026 10:38:20 +0000
Manifest next update: Tue 03 Nov 2026 14:32:20 +0000
Files and hashes: 1: 323830343a333936383a3a2f33322d3438203d3e20323636303239.roa (hash: wfjol/JK4zjkEKq2cEgWW+T2DuKEQiMv7dfod4lgydA=)
2: 805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl (hash: wbreB1TYeEqOGlanlZQ8B1c5o/yRTP4E17VK3zdISq4=)
3: 3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa (hash: ZASR3o0HKQ1hOZT0aWCdjybgkfy/HTufuL9S8gZwaGc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 14:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e8:c8:51:d3:b1:2c:e5:18:42:7c:63:21:7f:5e:d3:03:65:b2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Validity
Not Before: Nov 2 10:38:20 2026 GMT
Not After : Nov 3 14:32:20 2026 GMT
Subject: CN=A36D76A35536B931683800E2638D6016A04D26F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:c6:5c:97:e0:86:d8:90:a6:63:be:ff:af:
37:91:b0:79:78:10:7d:cb:aa:a1:15:c3:87:33:42:
73:4e:4f:70:c5:7d:03:a6:6d:7c:0a:1a:c1:a6:5e:
24:5a:49:df:64:1f:6e:f2:91:bf:b3:b8:7a:00:07:
10:d5:de:38:94:46:c2:78:eb:18:03:98:00:60:9c:
19:5b:20:a9:29:56:18:ce:cf:df:82:16:6f:91:8b:
41:12:31:a8:28:29:bf:4d:7b:c4:90:11:11:fa:c5:
1e:86:cf:bf:36:fe:00:06:de:c7:2a:06:b8:bd:2c:
df:35:4b:89:b0:7e:cd:3a:fd:02:b4:8a:22:ed:3c:
c3:c1:60:87:91:c7:20:95:a4:5c:c3:ee:d2:da:85:
44:b2:15:cb:36:d3:ef:46:8f:46:ad:4f:eb:48:92:
31:67:45:38:0c:13:63:1d:49:1d:59:7f:45:42:59:
1f:f8:13:31:64:43:06:d9:28:1b:6a:7c:cb:31:1a:
d4:ff:7a:e6:35:03:46:d1:c4:fe:8b:c6:82:f4:71:
d9:69:a9:be:d0:be:56:fe:66:fc:25:88:b9:91:b6:
86:76:72:16:1f:5a:5d:f9:f1:79:62:47:7f:39:38:
16:c9:a2:45:49:a2:09:45:2f:3c:4c:49:04:2c:6b:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:76:A3:55:36:B9:31:68:38:00:E2:63:8D:60:16:A0:4D:26:F0
X509v3 Authority Key Identifier:
keyid:80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:77:fa:ab:13:15:e7:8d:c8:a2:df:79:7a:c8:25:67:b0:d1:
fe:27:62:f1:a9:f8:5b:61:4a:5e:df:18:c7:5a:11:f5:bd:73:
05:39:a9:c0:e8:b2:e3:bf:a7:b7:33:ae:d3:cf:1d:61:2e:83:
b7:68:ec:ac:53:a1:54:a2:38:0b:be:da:b2:e6:f3:01:fd:94:
ca:65:68:49:97:8d:52:ae:31:e8:5f:8f:e2:46:77:f0:9d:ed:
7a:04:4f:74:d1:89:6f:1f:bb:0a:89:16:91:12:4f:af:35:d2:
36:18:8d:ef:68:09:38:be:3b:14:4f:42:eb:22:99:1a:a1:10:
ef:e6:e8:bd:a9:8f:ea:30:c8:1d:84:95:28:d9:05:ca:93:01:
09:9c:ee:d1:84:af:be:34:03:d1:49:6b:17:03:49:2d:fd:83:
f6:bb:7c:ef:88:73:d3:40:68:84:1e:0b:95:84:22:6d:7e:78:
b0:6c:f8:0f:18:36:3a:24:d0:e4:2f:01:4a:68:e6:6c:84:04:
e4:84:ba:5f:ad:4c:9d:a6:01:bc:2c:a3:09:2d:ef:af:a9:ae:
12:a5:41:16:1f:07:7e:6d:7a:5e:63:45:cc:26:72:5f:b4:61:
f9:a9:fe:50:93:3e:34:5e:92:f5:97:a6:ab:0c:68:84:d8:e9:
f8:5e:ec:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCOjIUdOxLOUYQnxjIX9e0wNlssgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA1QzZGRTc1QzM0RkRDMTE1RTk5RUE0RDQzNkE1Mjgy
RTUwNTVCNjAeFw0yNjExMDIxMDM4MjBaFw0yNjExMDMxNDMyMjBaMDMxMTAvBgNV
BAMTKEEzNkQ3NkEzNTUzNkI5MzE2ODM4MDBFMjYzOEQ2MDE2QTA0RDI2RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQ8Zcl+CG2JCmY77/rzeRsHl4
EH3LqqEVw4czQnNOT3DFfQOmbXwKGsGmXiRaSd9kH27ykb+zuHoABxDV3jiURsJ4
6xgDmABgnBlbIKkpVhjOz9+CFm+Ri0ESMagoKb9Ne8SQERH6xR6Gz782/gAG3scq
Bri9LN81S4mwfs06/QK0iiLtPMPBYIeRxyCVpFzD7tLahUSyFcs20+9Gj0atT+tI
kjFnRTgME2MdSR1Zf0VCWR/4EzFkQwbZKBtqfMsxGtT/euY1A0bRxP6LxoL0cdlp
qb7Qvlb+ZvwliLmRtoZ2chYfWl358XliR385OBbJokVJoglFLzxMSQQsaxHPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo212o1U2uTFoOADiY41gFqBNJvAwHwYDVR0j
BBgwFoAUgFxv51w0/cEV6Z6k1DalKC5QVbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRXMzdzblE5S3ZQTXA5U0haVDVtYkVySER3dFJubURBVWU3WEMyTHVU
RkovMS84MDVDNkZFNzVDMzRGREMxMTVFOTlFQTRENDM2QTUyODJFNTA1NUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNUM2RkU3NUMzNEZEQzEx
NUU5OUVBNEQ0MzZBNTI4MkU1MDU1QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnRXMzdzblE5S3ZQTXA5U0haVDVtYkVySER3dFJubURBVWU3WEMyTHVURkovMS84
MDVDNkZFNzVDMzRGREMxMTVFOTlFQTRENDM2QTUyODJFNTA1NUI2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgXf6qxMV543Iot95esglZ7DR/idi8an4W2FKXt8Yx1oR9b1zBTmpwOiy47+n
tzOu088dYS6Dt2jsrFOhVKI4C77asubzAf2UymVoSZeNUq4x6F+P4kZ38J3tegRP
dNGJbx+7CokWkRJPrzXSNhiN72gJOL47FE9C6yKZGqEQ7+bovamP6jDIHYSVKNkF
ypMBCZzu0YSvvjQD0UlrFwNJLf2D9rt874hz00BohB4LlYQibX54sGz4Dxg2OiTQ
5C8BSmjmbIQE5IS6X61MnaYBvCyjCS3vr6muEqVBFh8Hfm16XmNFzCZyX7Rh+an+
UJM+NF6S9ZemqwxohNjp+F7sYA==
-----END CERTIFICATE-----
Generated at Tue Nov 3 07:58:46 2026 by rpki-client