
Error: rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
File: 8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft (raw, json)
Hash identifier: Dj4XAEfy8oFel/gsXWBQT33cnlzuqFfzMbX9aRZ3zoo=
Subject key identifier: DD:B5:E5:A3:C6:CD:C8:EF:D2:74:1D:71:DD:5E:F8:9A:D1:7A:34:D5
Authority key identifier: 8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE
Certificate issuer: /CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
Certificate serial: 66B7699268DD872FA4B9CA2818E3D1AE4DF98BB8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
Manifest number: 058A
Signing time: Mon 02 Nov 2026 21:10:01 +0000
Manifest this update: Mon 02 Nov 2026 21:05:01 +0000
Manifest next update: Tue 03 Nov 2026 21:10:01 +0000
Files and hashes: 1: 323830343a383564343a3a2f33322d3334203d3e20323732363033.roa (hash: MBDCt87err5A/n7TZ65Mk3UzinozG2L7HaxD50CotnQ=)
2: 8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl (hash: 556+Y73E5JUeE/lo9uceTk/quNdk1lIFNIhoNQy4ppw=)
3: 3139322e3134312e3136322e302f32342d3234203d3e20323732363033.roa (hash: GXR39noGw+vaEtNAzRKg+MEZYUSbTwO0V4M+VIC0wxg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl
rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 21:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b7:69:92:68:dd:87:2f:a4:b9:ca:28:18:e3:d1:ae:4d:f9:8b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
Validity
Not Before: Nov 2 21:05:01 2026 GMT
Not After : Nov 3 21:10:01 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:14:e3:4e:61:80:31:6d:6a:db:f0:05:15:
22:34:96:3c:89:55:fc:54:2b:14:76:e7:ef:a5:17:
ad:72:92:2b:b7:ab:c1:b1:81:82:2c:8a:bf:1a:3e:
b6:57:b4:d1:f1:97:a3:61:a9:99:fd:a2:57:c9:64:
5f:3a:04:57:d3:c1:ee:1f:74:b8:d8:ff:43:12:e5:
08:0b:1f:d0:c6:d1:16:0b:bf:b4:16:09:88:d2:fb:
31:ad:42:aa:ab:3a:72:87:39:8b:db:41:bd:3c:7c:
8d:08:57:b5:01:ed:d3:5a:da:39:2e:5a:50:58:37:
15:07:16:19:71:4c:ff:1b:7a:43:e9:9c:ca:d2:82:
ed:50:f1:40:65:07:a5:4c:27:34:39:28:4f:a7:15:
fc:75:d3:a1:e3:ff:fc:63:e8:db:13:70:56:75:79:
95:87:1c:2f:2f:86:8c:0b:88:41:b3:e1:95:45:58:
96:cb:6b:df:49:36:77:c7:4a:4c:a0:28:c8:01:93:
b3:e1:b1:92:50:ae:bb:99:e1:dd:44:94:07:1c:a9:
44:fd:79:58:6c:f4:c8:e7:a5:8e:12:aa:54:ca:2c:
e9:9b:54:eb:7b:cd:00:c7:f9:be:bc:2a:b8:4e:49:
54:57:19:3e:cb:01:9d:e0:1e:4b:60:61:67:37:eb:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:E5:A3:C6:CD:C8:EF:D2:74:1D:71:DD:5E:F8:9A:D1:7A:34:D5
X509v3 Authority Key Identifier:
keyid:8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:f7:40:a4:ae:c6:43:a7:c9:fb:f9:f0:6b:9e:80:54:52:
fa:62:f4:48:34:61:e1:7c:3d:e1:19:3e:d8:4b:61:1c:67:76:
fb:df:6a:e4:90:8b:29:ae:d5:ff:2f:9d:70:4c:a1:e4:1c:17:
cf:46:d9:23:1e:d3:e2:9f:8f:30:6c:2e:31:31:03:56:a0:90:
bc:64:f5:a1:5d:cd:35:0a:50:58:04:3c:22:74:b4:67:96:30:
e9:60:11:1d:f4:e8:d1:65:ad:9f:af:2b:15:0c:23:25:84:a8:
c0:dd:38:12:ce:3e:de:51:71:0b:e2:09:4f:b4:7f:d6:4a:8f:
be:21:c2:85:8d:8a:72:7e:11:a6:ea:87:19:7a:ff:25:37:e8:
ae:34:32:79:90:a1:1e:3e:ac:5b:fb:48:f7:cb:b0:17:a0:52:
9a:b0:95:54:1f:c7:8a:17:9c:e0:1d:b2:04:1a:e3:ef:17:6d:
d3:fc:aa:dd:31:2c:17:2a:bc:f3:39:9c:d1:f0:e2:de:0e:89:
81:d2:7d:63:fb:50:64:e9:f5:05:09:bc:98:d3:1a:ee:8e:d7:
d6:4b:f5:e2:85:29:b6:35:d5:1a:15:9d:9f:40:7f:1f:58:e8:
63:8d:de:15:b9:bc:91:1e:91:86:9f:5b:44:a3:f5:0c:91:4e:
d1:03:e2:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 10:49:16 2026 by rpki-client