
Error: rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
File: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft (raw, json)
Hash identifier: YvA6JLI/ludRfkNRxyHJqwpQaEwVTOHJaHcwreBaQuU=
Subject key identifier: 44:08:E5:3F:AF:7E:A6:83:E2:A1:64:44:E0:BC:DD:1B:5F:1A:8A:83
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Certificate issuer: /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial: 1B870F92E34267A607E10AC2BD5A3BC5BD32B2CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
Manifest number: 04E5
Signing time: Sun 01 Nov 2026 16:43:57 +0000
Manifest this update: Sun 01 Nov 2026 16:38:57 +0000
Manifest next update: Mon 02 Nov 2026 18:37:57 +0000
Files and hashes: 1: 323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (hash: zIoVW5kLsGVprEH16+sBlNuGz6phhnOlnr6gicTVECU=)
2: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl (hash: 4phXN/8qTMQEltWvPdUoJh2WMPgcHUFaF+yKI/FD2Rs=)
3: 34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (hash: C+AgJIRk/earQAls+lntGGddukh7mvvIDu73Xt4Rp+o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 18:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:87:0f:92:e3:42:67:a6:07:e1:0a:c2:bd:5a:3b:c5:bd:32:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Validity
Not Before: Nov 1 16:38:57 2026 GMT
Not After : Nov 2 18:37:57 2026 GMT
Subject: CN=4408E53FAF7EA683E2A16444E0BCDD1B5F1A8A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:c3:54:e0:e3:3b:0c:5f:e6:3b:64:53:f7:
27:ff:98:2f:d7:cb:13:2f:14:f3:05:09:b1:22:44:
bc:9b:ca:6c:93:aa:dc:7c:7d:9e:27:70:36:b9:f6:
87:d2:82:23:41:7f:75:b8:fb:3f:e5:14:ae:09:8c:
13:2c:41:08:62:10:c4:38:89:d2:8e:ec:be:22:00:
73:26:bc:e9:5b:5c:49:d3:70:62:41:17:c0:5e:89:
85:fa:8e:92:11:1e:06:4b:17:c2:97:28:e6:73:37:
32:92:f8:ae:c2:b6:f2:0d:b8:bf:84:bd:72:55:e3:
85:bd:99:6e:c3:1b:ac:d0:9f:b9:fb:c8:3d:7f:f0:
a1:df:b6:0b:69:d8:96:7f:86:af:44:8b:e2:cf:a8:
3c:b1:ec:1b:3d:b7:78:11:46:3b:be:73:a3:62:1b:
ce:d4:10:84:15:0d:ee:90:40:0d:8f:1c:9b:f6:1d:
28:8c:e5:ef:b1:cb:11:0a:2c:ed:15:b7:05:21:84:
0f:84:ee:eb:55:cf:91:1c:85:a9:5e:00:4b:67:8f:
cb:5e:69:09:41:0c:54:2f:91:08:07:91:6d:77:96:
98:91:24:92:37:f9:6c:5f:35:c7:92:f3:32:33:be:
04:66:d4:d3:f9:61:24:3c:bd:f9:fb:24:2e:66:6b:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:E5:3F:AF:7E:A6:83:E2:A1:64:44:E0:BC:DD:1B:5F:1A:8A:83
X509v3 Authority Key Identifier:
keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fb:bb:93:ed:95:fa:4e:5e:e9:1a:7d:44:75:2d:5a:72:8c:
12:74:db:d6:bb:66:91:6c:14:74:5e:6f:19:14:56:b2:ea:64:
be:48:88:57:f5:ae:0a:34:21:be:4f:dc:81:7a:ab:9f:a0:2a:
cb:9f:77:87:56:06:39:16:af:b0:29:4c:6f:19:c4:94:91:7a:
ed:b7:39:de:5a:9f:2d:e7:32:e0:6e:62:10:25:c9:dd:73:6f:
b2:2b:fe:6c:35:f3:d7:f1:b4:f7:3e:fb:b6:59:8c:d9:0a:db:
77:b5:ae:60:ab:14:da:96:c2:30:ff:00:b3:23:9f:33:83:81:
30:41:20:9d:65:ee:99:84:d0:46:49:1a:20:bc:16:bd:1f:b3:
fd:7d:cd:fe:c8:ba:a3:13:67:85:8b:b4:3f:79:07:92:b6:65:
b4:76:5c:99:0a:28:a6:dd:ee:08:94:d4:91:1f:a1:a4:32:c5:
98:bc:ac:eb:19:aa:63:91:c5:4f:3b:aa:6e:64:f0:5a:e5:e4:
a4:10:5a:bf:93:e5:a8:03:84:52:89:f8:29:ee:31:1d:00:ca:
16:b5:d2:3b:27:4c:22:8b:ee:4d:7b:06:77:80:85:d7:8c:66:
57:ab:97:45:79:65:ac:67:62:40:9e:f0:bb:d1:63:97:d8:ee:
69:b3:c4:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG4cPkuNCZ6YH4QrCvVo7xb0yss8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4MzVENTE0NjJBMUM2NDFCOUE1RURGQTkzRjg0NzVD
Q0VFRTRDNTAeFw0yNjExMDExNjM4NTdaFw0yNjExMDIxODM3NTdaMDMxMTAvBgNV
BAMTKDQ0MDhFNTNGQUY3RUE2ODNFMkExNjQ0NEUwQkNERDFCNUYxQThBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqsNU4OM7DF/mO2RT9yf/mC/X
yxMvFPMFCbEiRLybymyTqtx8fZ4ncDa59ofSgiNBf3W4+z/lFK4JjBMsQQhiEMQ4
idKO7L4iAHMmvOlbXEnTcGJBF8BeiYX6jpIRHgZLF8KXKOZzNzKS+K7CtvINuL+E
vXJV44W9mW7DG6zQn7n7yD1/8KHftgtp2JZ/hq9Ei+LPqDyx7Bs9t3gRRju+c6Ni
G87UEIQVDe6QQA2PHJv2HSiM5e+xyxEKLO0VtwUhhA+E7utVz5EchaleAEtnj8te
aQlBDFQvkQgHkW13lpiRJJI3+WxfNceS8zIzvgRm1NP5YSQ8vfn7JC5mayVJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURAjlP69+poPioWRE4LzdG18aioMwHwYDVR0j
BBgwFoAUEINdUUYqHGQbml7fqT+Edczu5MUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFkMkU1elpqMWtYcUM1NWE1aFZQTmhXblllQWdRS1EzQWtmblFDa0pV
ZzMvMS8xMDgzNUQ1MTQ2MkExQzY0MUI5QTVFREZBOTNGODQ3NUNDRUVFNEM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwODM1RDUxNDYyQTFDNjQx
QjlBNUVERkE5M0Y4NDc1Q0NFRUU0QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGFkMkU1elpqMWtYcUM1NWE1aFZQTmhXblllQWdRS1EzQWtmblFDa0pVZzMvMS8x
MDgzNUQ1MTQ2MkExQzY0MUI5QTVFREZBOTNGODQ3NUNDRUVFNEM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkPu7k+2V+k5e6Rp9RHUtWnKMEnTb1rtmkWwUdF5vGRRWsupkvkiIV/WuCjQh
vk/cgXqrn6Aqy593h1YGORavsClMbxnElJF67bc53lqfLecy4G5iECXJ3XNvsiv+
bDXz1/G09z77tlmM2Qrbd7WuYKsU2pbCMP8AsyOfM4OBMEEgnWXumYTQRkkaILwW
vR+z/X3N/si6oxNnhYu0P3kHkrZltHZcmQoopt3uCJTUkR+hpDLFmLys6xmqY5HF
TzuqbmTwWuXkpBBav5PlqAOEUon4Ke4xHQDKFrXSOydMIovuTXsGd4CF14xmV6uX
RXllrGdiQJ7wu9Fjl9juabPEjQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 01:15:47 2026 by rpki-client