
Error: rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
File: 5A40D3E78C135512BC4447988687E789A73E2C20.mft (raw, json)
Hash identifier: 9/WLL95gHILZRSO8BTui2hSdOo8XQ8Jsfollaq+l518=
Subject key identifier: 1E:3F:47:13:41:7F:C9:4D:96:BF:B6:F0:48:5F:B7:24:03:D4:B3:98
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Certificate issuer: /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial: 37F451DFE112BBC344626427997C8CCD2A648791
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
Manifest number: 90
Signing time: Sun 01 Nov 2026 08:09:46 +0000
Manifest this update: Sun 01 Nov 2026 08:04:46 +0000
Manifest next update: Mon 02 Nov 2026 09:22:46 +0000
Files and hashes: 1: 34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (hash: d+TJN7XsBrH6LbhjzoGCAQ2udf7x8XrVutGzhi6i5k0=)
2: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (hash: 47PFiIrN8YcgeyMYrPnpq8sw1cn8CKOc9QsHZObWaiI=)
3: 34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (hash: cna1NytKvpGl0P/xPip5ft+23sNxBBqsGIju8aP9bS8=)
4: 323830343a346331633a3a2f33332d3333203d3e20323637333530.roa (hash: xDntTwhPB4XbvoGLNelJS6bPDWp1hb5W0Gl/HScIXQo=)
5: 323830343a346331633a633030303a3a2f33342d3334203d3e20323637333530.roa (hash: tdXUFupULNZKgr/w0C5EyOmm/ohhrLBXnnTwJMIelIM=)
6: 34352e3233332e3232382e302f32332d3233203d3e20323637333530.roa (hash: CcIGdT55RjKfVxYWwDoPAAoRQrBgg9i0I31tbhx79tw=)
7: 323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (hash: gPRN1PiE4hKS95HTYb5THWXUdyfO0TOoeYyLM7n5OMg=)
8: 323830343a346331633a383030303a3a2f33332d3333203d3e20323637333530.roa (hash: UVOVadSw6VDeGZIdlFJ1FOwZn7iXLlg1EqYX8I9FWDk=)
9: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (hash: PHlLU6EBn+KwgERm+tPlUEdoLYTiUPlZg5NHJbQMN04=)
10: 323830343a346331633a3a2f33342d3334203d3e20323637333530.roa (hash: sWTASS4g/VzQt8ztnYDAizFTeNgJZn9vWfZfOQ+b4aw=)
11: 323830343a346331633a3a2f33322d3332203d3e20323637333530.roa (hash: VpHe8diSksGSFx+uhTzuPlsu7YWEidEzJ+QbPDuF8OE=)
12: 34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (hash: EXw8MBp0C2jL7qq/slSRTBtC84Zq78Kd9N8xPDG+MPw=)
13: 5A40D3E78C135512BC4447988687E789A73E2C20.crl (hash: T7VPFVtdaOBApCWwlbBaP86+lhq0RG8hf0Hsen3uOeM=)
14: 34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (hash: tftKrmZZklMgc4dBJRERAFTdNXEAoD4sM8JJrsQF46w=)
15: 34352e3233332e3232392e302f32342d3234203d3e20323637333530.roa (hash: p1sJWpGiZM7O9MtO6kI1tOKvb1V+0H28ctmeAyYx5yA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 09:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f4:51:df:e1:12:bb:c3:44:62:64:27:99:7c:8c:cd:2a:64:87:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
Validity
Not Before: Nov 1 08:04:46 2026 GMT
Not After : Nov 2 09:22:46 2026 GMT
Subject: CN=1E3F4713417FC94D96BFB6F0485FB72403D4B398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:9a:9e:46:b0:7a:e7:1a:39:78:e5:fc:80:
6e:1f:84:d1:24:6b:1d:8e:dc:43:96:3a:82:2f:5e:
1b:6b:6c:58:93:03:ae:0d:ff:d1:39:02:bd:cf:d8:
35:14:38:10:24:0b:cb:4b:93:09:fa:cd:b4:db:a1:
dc:e2:ab:60:51:d2:ad:46:d1:69:fd:c5:19:6c:fa:
f6:f9:2c:55:ce:40:c6:d2:56:e3:fe:84:9d:84:ec:
78:13:12:6f:03:d4:8a:a4:8e:0e:61:f8:2b:2b:a2:
f2:2c:68:b8:19:f0:d9:5a:af:78:dc:e6:38:7d:57:
26:18:51:3f:3b:69:f5:b7:06:87:7d:ff:04:80:14:
7f:69:65:5c:1d:3c:5e:6d:5f:ef:08:02:4a:3d:96:
42:7a:ab:c1:05:e1:e8:f5:67:aa:53:0e:da:74:10:
19:f8:0f:ea:94:64:7b:ff:22:a7:04:23:1f:de:2f:
98:70:8e:d2:01:dd:12:3f:99:c8:72:b1:d5:80:d4:
16:9b:dc:1f:77:d6:3e:ad:a5:7f:c1:3a:cc:50:9a:
61:8f:c7:e6:bc:fb:c5:d2:77:78:c1:a2:e9:37:40:
bc:ea:fa:74:03:08:17:3e:25:81:82:35:96:10:eb:
7a:90:27:5d:a0:19:fe:73:15:0d:4c:b3:81:12:33:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3F:47:13:41:7F:C9:4D:96:BF:B6:F0:48:5F:B7:24:03:D4:B3:98
X509v3 Authority Key Identifier:
keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fb:95:8a:28:ba:36:07:3c:c2:dd:0f:5b:de:6e:92:75:16:
6b:d9:f4:72:02:c2:04:c5:e1:e5:3e:fb:f4:43:a0:74:2c:de:
2c:8b:5c:eb:3c:88:69:03:ae:70:7b:b5:01:2d:32:80:64:eb:
59:ce:1a:2f:3e:8b:14:c1:37:4f:bb:6f:2e:27:ef:cf:35:8e:
98:ca:3a:54:74:47:71:01:b8:c8:4d:a7:53:e6:68:ca:d0:3c:
f0:3c:df:71:12:88:c4:23:68:9c:90:7e:77:7d:c5:ab:68:d7:
3f:bf:50:6b:d4:1f:84:a6:8a:47:c1:8d:79:50:17:83:b3:db:
b3:c4:d8:68:3b:68:48:5f:24:f8:5e:f1:92:46:27:ea:1b:dc:
3e:25:65:36:e0:f2:70:82:c1:09:bd:dc:dd:f9:f1:1b:5e:f9:
a3:a1:d4:90:3e:77:c2:89:24:4e:c1:ee:28:ee:53:5d:25:fc:
ef:f5:6a:72:cb:d6:2d:a3:c4:85:32:e8:6d:91:d1:9a:56:68:
78:08:3c:4b:85:ec:23:cf:91:74:0e:21:2c:b6:b3:14:33:2d:
f7:e4:70:3e:25:8b:d9:5d:2f:d6:9d:c8:94:30:3e:0b:d6:b6:
84:9b:08:8f:61:45:0c:16:9e:6b:fa:cf:c7:a9:45:cd:ec:6a:
b5:59:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 16:26:07 2026 by rpki-client