
Error: rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.mft
File: 74287883336D6F371731FA4B90A26208089B2DB3.mft (raw, json)
Hash identifier: 11HjsILOgJtwUtMMLePZhc7PvVoohqBxnPHv2vFaQZw=
Subject key identifier: 6F:E4:43:7A:FD:05:07:DA:E3:72:70:C4:85:02:CA:D3:65:8C:7B:A8
Authority key identifier: 74:28:78:83:33:6D:6F:37:17:31:FA:4B:90:A2:62:08:08:9B:2D:B3
Certificate issuer: /CN=74287883336D6F371731FA4B90A26208089B2DB3
Certificate serial: 7ED19283C85846D4EFD00D32337E793E0139881A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.mft
Manifest number: 0435
Signing time: Sat 17 Oct 2026 19:18:07 +0000
Manifest this update: Sat 17 Oct 2026 19:13:07 +0000
Manifest next update: Sun 18 Oct 2026 22:33:07 +0000
Files and hashes: 1: 34352e3137322e3131362e302f32322d3332203d3e20323638373634.roa (hash: rFLHMMNR8JJ8l9tSzo6wsOVpef/375Cf3Ch2HtIEVBw=)
2: 74287883336D6F371731FA4B90A26208089B2DB3.crl (hash: UWujxG5EmegFhY2sPWzj9QAk77dRR58T6SSvotILJmQ=)
3: 323830343a356135303a3a2f33322d313238203d3e20323638373634.roa (hash: 1sBwmwDsAj0ZeBYQmiF7b8VCoWWnxn0229mWK0RQi9w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.crl
rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 22:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d1:92:83:c8:58:46:d4:ef:d0:0d:32:33:7e:79:3e:01:39:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74287883336D6F371731FA4B90A26208089B2DB3
Validity
Not Before: Oct 17 19:13:07 2026 GMT
Not After : Oct 18 22:33:07 2026 GMT
Subject: CN=6FE4437AFD0507DAE37270C48502CAD3658C7BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:d8:94:38:0d:1b:22:49:bf:a1:29:be:82:
ef:b9:09:aa:f2:9d:3e:04:0d:a6:6b:f3:da:40:3a:
42:a9:22:2d:8c:e2:c7:ad:6a:3a:17:50:51:2f:35:
47:e1:2e:d9:86:52:b9:eb:76:41:0f:ab:59:6f:1d:
f1:8e:d7:23:46:d5:60:ac:56:56:d4:a7:7b:30:8d:
c0:93:9e:0f:1d:32:7e:d7:69:ec:66:f8:a6:67:ce:
25:dc:5b:4e:e7:30:f9:e1:04:6f:bc:b2:52:ec:10:
da:bb:e0:b3:05:3f:f1:4e:86:e1:c5:04:05:01:6b:
44:28:2e:2c:4c:dc:c8:f5:21:c1:97:70:ca:2b:81:
66:54:d9:52:db:8b:72:5f:d2:2d:ea:01:40:e1:fe:
b0:ea:f2:61:3d:1c:ac:a1:ff:6e:2f:86:bb:4b:7e:
c8:b0:13:6f:22:31:84:02:17:ab:92:38:2c:bf:bd:
8c:af:5a:d4:6c:0e:a8:09:87:24:f2:12:7b:c5:c4:
f3:76:96:1b:14:ec:fa:87:4f:42:dc:9d:85:47:75:
6a:6d:3b:db:66:35:95:ff:50:cc:af:12:14:d0:6c:
97:65:a5:30:03:6a:6b:fb:38:d8:20:fa:3a:9f:bc:
09:bc:39:6d:e1:5f:b5:fc:29:bc:e6:04:d8:93:6c:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:43:7A:FD:05:07:DA:E3:72:70:C4:85:02:CA:D3:65:8C:7B:A8
X509v3 Authority Key Identifier:
keyid:74:28:78:83:33:6D:6F:37:17:31:FA:4B:90:A2:62:08:08:9B:2D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74287883336D6F371731FA4B90A26208089B2DB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TFqQ4vi3dsT3NibQUB2KSDK9PRptnM9V5f9tJskc7uK/0/74287883336D6F371731FA4B90A26208089B2DB3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4c:12:ba:53:1e:97:d3:09:21:d5:1e:e3:20:53:1e:46:57:
33:6c:40:58:9e:44:bc:8d:e5:48:e2:6e:79:b3:28:6a:99:5d:
8c:93:8f:fc:61:d4:df:a9:e3:6b:8d:e6:27:f8:5b:f9:b4:e6:
97:4d:16:f0:d0:2b:63:f0:2f:d5:06:3e:25:96:f6:df:62:16:
9c:04:bc:65:11:a8:aa:90:dc:f1:81:a6:80:55:d3:7e:1d:4a:
56:f6:a7:84:dd:62:c8:4f:cd:51:50:68:c2:92:e7:2d:88:3a:
ef:9f:07:c5:20:2f:df:be:5e:71:20:e5:f5:d3:c2:0b:67:34:
88:fb:f3:b9:3a:b7:80:64:18:0f:a0:59:26:db:cb:70:28:0a:
d4:df:d1:6f:62:0c:82:0b:a0:9c:17:ee:fa:a9:f1:7c:a5:4a:
27:c0:37:04:b2:8b:06:9e:5e:06:fd:be:3b:b1:01:b5:5d:65:
f5:38:dd:09:5d:91:5c:be:05:63:1e:59:d8:57:3c:08:b4:21:
5b:3f:c9:db:dc:4f:54:75:a0:19:4a:0d:ce:62:87:c4:11:fb:
d0:45:e8:c0:4f:3d:69:5d:f3:1f:01:9a:f6:b5:cd:e0:0e:a3:
f9:c0:15:22:33:0a:35:98:c9:00:28:39:c9:4a:ef:ae:0b:98:
2f:72:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:42:15 2026 by rpki-client