
Error: rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft
File: 27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft (raw, json)
Hash identifier: H7eKQ9UTQWOblYL8I5v3bPu5CrtJE1vomY65bfCRckM=
Subject key identifier: 3E:F4:EB:B0:FD:C2:FB:61:C2:71:3D:15:F0:5E:14:16:7A:C4:C8:F8
Authority key identifier: 27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36
Certificate issuer: /CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
Certificate serial: 699ACA261C3B4D7E802B2F1FF3344028B7783D4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft
Manifest number: 01B0
Signing time: Wed 14 Oct 2026 05:30:35 +0000
Manifest this update: Wed 14 Oct 2026 05:25:35 +0000
Manifest next update: Thu 15 Oct 2026 05:57:35 +0000
Files and hashes: 1: 27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl (hash: FBCRtD0PZTO0/2a/5n8gTCGMPqPfBZbmpGxVH3YL+/0=)
2: 323830343a376566343a3a2f33322d3430203d3e20323731363537.roa (hash: 936Quy/WLZ9eLgNn8Cg8DqimGUCHBL4RQpiDghxu/vc=)
3: 34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa (hash: k5zyYRS0EfpoNenIqrkfAmpod4PZ6tBJsTpWfZNPphY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl
rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 05:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9a:ca:26:1c:3b:4d:7e:80:2b:2f:1f:f3:34:40:28:b7:78:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
Validity
Not Before: Oct 14 05:25:35 2026 GMT
Not After : Oct 15 05:57:35 2026 GMT
Subject: CN=3EF4EBB0FDC2FB61C2713D15F05E14167AC4C8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:03:f4:23:89:6e:29:91:b2:f1:c5:e5:61:
10:18:d2:39:90:15:f2:c6:8b:fe:46:01:d8:77:80:
97:b5:6b:37:e3:50:2f:af:0c:b5:44:2c:46:7a:3a:
81:f0:d6:60:2a:cb:43:99:bf:2c:85:9d:f4:9f:13:
b5:06:b5:5d:bd:73:1f:c9:76:e8:1c:ed:67:79:89:
b5:d4:c7:44:a9:ec:32:02:f9:8e:d6:7a:dd:fe:47:
36:cd:72:39:53:93:02:d3:4f:6b:db:3b:c6:9a:bc:
a5:e2:74:88:8a:b3:ab:5c:b6:7b:a4:9a:80:9c:db:
d7:3c:40:3c:7e:4c:2e:2e:36:1c:9b:57:ae:28:b5:
13:db:c4:3b:a2:35:b3:0a:cf:a2:db:c2:43:40:aa:
23:73:33:e9:80:e6:f2:00:07:c0:2f:03:e0:62:63:
ad:83:a4:d3:05:3e:06:6e:ce:ae:ec:ef:e3:08:c4:
4b:df:4a:76:18:3b:4e:fb:e4:94:16:4c:1e:1d:e5:
2a:06:19:51:42:3a:25:89:58:5d:31:b8:6d:21:6c:
1a:25:92:4c:9c:0b:fd:f9:7a:8d:2d:49:11:1e:2b:
6c:41:3f:4c:b9:b1:c7:43:de:68:72:f4:c4:8c:b7:
91:74:9f:67:0f:1e:1c:1f:41:98:db:e3:19:9e:f9:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:EB:B0:FD:C2:FB:61:C2:71:3D:15:F0:5E:14:16:7A:C4:C8:F8
X509v3 Authority Key Identifier:
keyid:27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5e:72:a3:fe:78:f4:b4:f8:f3:75:88:58:8b:44:b9:ca:2f:
10:43:d2:60:f4:03:db:b9:76:39:72:6e:b8:9e:d9:5e:a1:11:
77:23:42:fa:d3:12:d0:f9:22:b3:ed:d1:15:2d:e2:08:22:f2:
08:20:09:8b:4f:a6:ba:5e:2a:fa:a2:15:96:25:88:f6:85:48:
f5:83:e1:4b:5b:e3:a8:e1:d8:99:8e:03:d9:1e:c4:06:c1:3e:
55:d4:5c:23:73:0b:ed:92:5d:96:63:68:69:9f:b1:4a:b7:9f:
b0:9a:ba:10:6a:e5:02:0d:9b:dc:21:ff:65:f4:a7:51:4e:04:
22:14:75:b0:ea:79:8a:c3:cd:fb:1f:04:17:22:db:27:60:44:
05:96:74:ca:2d:38:4c:f5:00:fc:47:e7:a9:a1:46:e9:9c:a8:
ce:bb:8d:d6:d0:d1:79:05:4a:25:1f:ea:26:3a:16:55:2f:b6:
04:f5:ca:66:96:c5:00:c9:3e:4a:3e:cb:5c:99:95:91:95:e0:
ac:30:1e:e5:50:07:04:b9:19:79:22:ce:61:7d:fa:d8:e0:7a:
6d:8c:9a:cb:65:8b:c8:ec:3e:d0:14:00:0a:9a:4d:43:ad:4d:
f7:bf:cf:1f:89:1b:d5:62:95:59:62:63:75:84:d8:10:b5:39:
52:a3:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:59:44 2026 by rpki-client