
Error: rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
File: 457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft (raw, json)
Hash identifier: rhZmacb6QuerlIfH5y1e1f/km5dszEdqvis2V3Hu3Vw=
Subject key identifier: 8F:36:00:77:B0:9B:68:1D:2A:F4:81:BD:0F:64:0B:6C:1D:65:5C:67
Authority key identifier: 45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
Certificate issuer: /CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Certificate serial: 6C6E2987AA554FC68BA6FDC61EF62EC16EBDD87A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
Manifest number: 010E
Signing time: Wed 14 Oct 2026 06:56:20 +0000
Manifest this update: Wed 14 Oct 2026 06:51:20 +0000
Manifest next update: Thu 15 Oct 2026 10:19:20 +0000
Files and hashes: 1: 457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl (hash: UboXWgx5Sm5bvT3r9VepZMOIzfslaxYpciIN0CRYLDM=)
2: 323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (hash: nUQyjMloJCS/+EcGR8sFzwwYNGyOM0O5TkGmhJotCfw=)
3: 3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa (hash: fPF6IZsLCHAm6rSwpYf4QYEZMZYzIRc0abVl8hA03IQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 10:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:6e:29:87:aa:55:4f:c6:8b:a6:fd:c6:1e:f6:2e:c1:6e:bd:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Validity
Not Before: Oct 14 06:51:20 2026 GMT
Not After : Oct 15 10:19:20 2026 GMT
Subject: CN=8F360077B09B681D2AF481BD0F640B6C1D655C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:4a:b3:d7:74:c3:2a:7f:78:86:b0:de:63:
20:67:3f:2f:5a:b8:44:85:d4:26:87:79:41:d7:42:
4b:cb:1b:58:fb:b4:ff:59:c3:e7:83:fc:62:fe:d4:
71:5b:ff:2e:65:48:98:e0:79:ff:15:46:84:35:ea:
be:f4:2f:c6:ff:cc:36:d2:b8:e7:fc:5f:69:1b:f5:
63:1b:9e:29:a2:05:94:81:36:cd:c3:a2:f3:f9:f3:
50:d9:c6:85:33:ea:cf:81:e1:41:37:a7:9c:5f:60:
f1:dc:8a:64:b3:7b:bd:35:b9:3d:93:67:b9:8e:41:
aa:97:a6:ee:0d:f0:71:3a:9c:5f:70:47:58:12:cc:
b7:68:e0:7d:60:b1:f3:47:f9:94:fe:d4:49:32:6d:
85:0a:36:0e:9d:12:42:30:a2:71:ea:93:ce:23:ca:
f6:ce:eb:f6:2f:06:28:01:60:78:d5:c5:81:91:ed:
e6:95:3a:12:7f:9e:13:34:e2:f4:8a:a3:1c:24:a7:
39:69:7c:09:1d:aa:cd:a8:d6:d4:07:fa:e3:2e:48:
c1:b8:dd:0a:11:54:b7:f8:7d:01:42:07:29:a4:8e:
46:16:32:f5:be:0e:dc:a0:d6:00:1d:de:7b:21:46:
bd:ea:b8:65:82:f0:d1:a4:39:13:b7:c2:d4:15:8a:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:00:77:B0:9B:68:1D:2A:F4:81:BD:0F:64:0B:6C:1D:65:5C:67
X509v3 Authority Key Identifier:
keyid:45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:d3:26:cc:56:65:0b:42:48:39:bd:55:20:a1:98:6d:b4:
b2:34:36:cf:96:e9:54:d2:88:c1:70:5a:fa:d6:d6:7f:99:bc:
e5:52:c9:33:4d:25:80:dc:f8:9f:cd:f1:37:33:da:3c:7b:fa:
bf:7e:e4:7d:0a:8d:9b:f6:b0:c3:a4:cf:a4:9b:61:55:7f:65:
27:3f:35:9a:f4:6d:0a:67:e7:b0:6b:e2:03:60:87:ce:36:49:
5c:7c:af:be:c1:25:26:7b:6d:8a:13:f4:34:41:5a:28:2d:87:
97:67:a2:65:64:6c:3e:0a:2e:35:8a:da:67:42:83:8d:bc:33:
38:9e:8c:80:fc:51:54:13:45:e6:a7:5d:03:71:c5:45:d3:bf:
7c:15:db:63:13:83:cf:26:46:e9:f6:c0:5b:23:bd:a8:d4:2c:
22:18:7f:77:ba:e6:3f:bd:16:de:f5:fc:73:01:bd:18:b7:f1:
ad:be:c7:11:74:3d:32:68:39:02:33:c8:4f:22:57:be:63:9f:
fa:ed:56:b3:4c:3f:9e:dc:80:7d:61:7b:d5:54:28:61:b5:bd:
3b:f0:80:7b:34:0a:d5:68:80:ef:ab:d4:5a:85:09:b3:0c:1a:
8b:da:82:83:49:6d:59:ca:c0:66:72:54:cc:6d:94:5c:d3:27:
dc:ae:95:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbG4ph6pVT8aLpv3GHvYuwW692HowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU3NjIyMzM4QzlBODM0MTk2MEQ1QUUzQ0JBMEVCNDQz
QTBGOEUzQzAeFw0yNjEwMTQwNjUxMjBaFw0yNjEwMTUxMDE5MjBaMDMxMTAvBgNV
BAMTKDhGMzYwMDc3QjA5QjY4MUQyQUY0ODFCRDBGNjQwQjZDMUQ2NTVDNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvUqz13TDKn94hrDeYyBnPy9a
uESF1CaHeUHXQkvLG1j7tP9Zw+eD/GL+1HFb/y5lSJjgef8VRoQ16r70L8b/zDbS
uOf8X2kb9WMbnimiBZSBNs3DovP581DZxoUz6s+B4UE3p5xfYPHcimSze701uT2T
Z7mOQaqXpu4N8HE6nF9wR1gSzLdo4H1gsfNH+ZT+1EkybYUKNg6dEkIwonHqk84j
yvbO6/YvBigBYHjVxYGR7eaVOhJ/nhM04vSKoxwkpzlpfAkdqs2o1tQH+uMuSMG4
3QoRVLf4fQFCBymkjkYWMvW+Dtyg1gAd3nshRr3quGWC8NGkORO3wtQVilLNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjzYAd7CbaB0q9IG9D2QLbB1lXGcwHwYDVR0j
BBgwFoAURXYiM4yag0GWDVrjy6DrRDoPjjwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG1meDRmQlBEQ2Z2Mlc1Vm9qMmo0OU5MNVg0c2FUWGR2NkVaS0pKRThq
SzYvMC80NTc2MjIzMzhDOUE4MzQxOTYwRDVBRTNDQkEwRUI0NDNBMEY4RTNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NzYyMjMzOEM5QTgzNDE5
NjBENUFFM0NCQTBFQjQ0M0EwRjhFM0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG1meDRmQlBEQ2Z2Mlc1Vm9qMmo0OU5MNVg0c2FUWGR2NkVaS0pKRThqSzYvMC80
NTc2MjIzMzhDOUE4MzQxOTYwRDVBRTNDQkEwRUI0NDNBMEY4RTNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS6fTJsxWZQtCSDm9VSChmG20sjQ2z5bpVNKIwXBa+tbWf5m85VLJM00lgNz4
n83xNzPaPHv6v37kfQqNm/aww6TPpJthVX9lJz81mvRtCmfnsGviA2CHzjZJXHyv
vsElJnttihP0NEFaKC2Hl2eiZWRsPgouNYraZ0KDjbwzOJ6MgPxRVBNF5qddA3HF
RdO/fBXbYxODzyZG6fbAWyO9qNQsIhh/d7rmP70W3vX8cwG9GLfxrb7HEXQ9Mmg5
AjPITyJXvmOf+u1Ws0w/ntyAfWF71VQoYbW9O/CAezQK1WiA76vUWoUJswwai9qC
g0ltWcrAZnJUzG2UXNMn3K6Vsg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:15:33 2026 by rpki-client