
Error: rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
File: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft (raw, json)
Hash identifier: IzlSGoNPbhMkDnMnYH+q6dmiW+jBrSwYYXbv21069J4=
Subject key identifier: CD:59:BE:AF:85:74:D9:6B:BA:E5:72:B0:93:F7:8D:85:07:3A:DE:CE
Authority key identifier: 8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
Certificate issuer: /CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Certificate serial: 018A8DAA77760BF1FCB7BADEB8672BCCF345943F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
Manifest number: 043E
Signing time: Sun 20 Sep 2026 07:55:59 +0000
Manifest this update: Sun 20 Sep 2026 07:50:59 +0000
Manifest next update: Mon 21 Sep 2026 09:43:59 +0000
Files and hashes: 1: 3137392e34392e3133322e302f32322d3332203d3e20323731313936.roa (hash: NZujrVTIXEbJ/ah47MK1vGl3GMmJWho+DffI2Yz4cU4=)
2: 323830343a373762633a3a2f33322d313238203d3e20323731313936.roa (hash: +TjYpdAsXU+fnV67ojc5JHJAQKNZnNONC8l1uYJW+M8=)
3: 8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl (hash: SJq1yfdARBF2lj+PZ0GYe3qQuvLJ3kbRqw3E5C2nKEA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 21 Sep 2026 09:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:aa:77:76:0b:f1:fc:b7:ba:de:b8:67:2b:cc:f3:45:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CCBAD4CCA170E31C6A6E22B172F884B224E3C49
Validity
Not Before: Sep 20 07:50:59 2026 GMT
Not After : Sep 21 09:43:59 2026 GMT
Subject: CN=CD59BEAF8574D96BBAE572B093F78D85073ADECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:a8:7c:7e:56:b7:90:7a:f6:9e:53:38:86:
d1:b7:f3:ea:dc:14:ed:e7:04:6e:d5:c2:77:2c:e1:
56:3c:3f:26:1b:c7:ea:37:5f:e8:bb:62:c8:4a:2f:
73:ab:e7:cd:fe:9b:82:94:6f:26:2a:88:a8:c8:e6:
3e:1e:a2:81:97:c3:a7:a5:5f:8f:68:94:12:d5:b5:
20:44:53:66:2e:32:48:fe:a6:23:93:9d:93:c6:a4:
3d:79:73:72:45:f7:9e:44:9d:78:b8:f8:60:d6:1c:
86:e9:0c:d1:a4:bd:b2:a5:51:43:e0:bd:a5:24:3f:
c9:cc:df:07:a9:62:b2:c7:36:15:d2:47:9f:84:9b:
1c:3a:81:a0:a3:6d:e6:7e:93:9f:39:39:a3:86:1e:
84:c9:4b:3c:ea:38:9b:81:60:2b:5f:90:f6:4b:e1:
96:9a:27:3c:78:10:84:90:02:28:83:fb:be:c4:cd:
05:2d:34:3a:37:d5:9c:5f:2e:a7:c3:62:ab:df:f7:
20:08:04:10:5c:e3:7a:34:4f:bf:e8:02:14:ea:de:
bd:b6:52:16:38:13:68:a8:6e:1a:96:d1:c3:c9:bf:
64:bc:74:c8:82:ce:09:cb:3f:09:8e:c0:5f:ee:f6:
8f:1e:76:da:71:7c:c2:ac:f4:68:d4:1c:e5:1f:4f:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:BE:AF:85:74:D9:6B:BA:E5:72:B0:93:F7:8D:85:07:3A:DE:CE
X509v3 Authority Key Identifier:
keyid:8C:CB:AD:4C:CA:17:0E:31:C6:A6:E2:2B:17:2F:88:4B:22:4E:3C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETfWMZnBKCnGxV3k9B1mix4wJBt3JVjcfodQAkK2aEkJ/0/8CCBAD4CCA170E31C6A6E22B172F884B224E3C49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:79:66:a6:2a:9a:21:dd:ca:f3:1c:bc:6f:e3:11:16:c9:93:
b1:96:5a:82:2d:e6:c9:7c:3b:86:8f:e9:6c:ad:13:57:73:c8:
69:cd:8f:a8:0f:f0:2a:83:3e:5c:dd:86:75:e9:2d:4e:0d:27:
8f:94:38:8b:cb:e8:49:38:fb:a7:bc:21:85:ad:12:a5:0b:53:
33:7f:03:b6:c7:e3:1d:3c:9b:03:41:fd:b4:82:16:e5:65:ca:
aa:39:b1:47:4b:56:e2:67:05:83:fa:2e:c3:60:40:4b:b6:d3:
24:da:73:25:35:ab:0c:e8:3d:fe:4d:f2:f7:a6:73:67:81:ad:
16:a8:29:7f:80:6a:8e:ff:21:92:a1:d7:db:6c:c0:c5:bc:f7:
e4:02:f7:32:aa:19:a6:85:0f:29:11:1f:0b:ab:25:17:d5:65:
1e:ee:e0:cd:a7:c5:93:c4:1b:bf:4d:61:9d:2e:85:36:b9:87:
35:27:66:26:68:95:b8:36:44:ab:8f:9a:c6:f1:4b:17:6f:ae:
a6:ce:f6:b1:6b:ca:b6:6b:91:1e:6a:1c:b1:9a:e7:04:98:e7:
35:2c:63:a3:43:44:59:61:e6:90:06:a1:2c:c6:54:53:05:fd:
e3:8d:88:b4:2a:de:c0:2f:00:39:3a:1f:76:eb:e8:01:72:0a:
bd:cb:c7:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAYqNqnd2C/H8t7reuGcrzPNFlD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDQkFENENDQTE3MEUzMUM2QTZFMjJCMTcyRjg4NEIy
MjRFM0M0OTAeFw0yNjA5MjAwNzUwNTlaFw0yNjA5MjEwOTQzNTlaMDMxMTAvBgNV
BAMTKENENTlCRUFGODU3NEQ5NkJCQUU1NzJCMDkzRjc4RDg1MDczQURFQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkqh8fla3kHr2nlM4htG38+rc
FO3nBG7Vwncs4VY8PyYbx+o3X+i7YshKL3Or583+m4KUbyYqiKjI5j4eooGXw6el
X49olBLVtSBEU2YuMkj+piOTnZPGpD15c3JF955EnXi4+GDWHIbpDNGkvbKlUUPg
vaUkP8nM3wepYrLHNhXSR5+Emxw6gaCjbeZ+k585OaOGHoTJSzzqOJuBYCtfkPZL
4ZaaJzx4EISQAiiD+77EzQUtNDo31ZxfLqfDYqvf9yAIBBBc43o0T7/oAhTq3r22
UhY4E2iobhqW0cPJv2S8dMiCzgnLPwmOwF/u9o8edtpxfMKs9GjUHOUfT4ULAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzVm+r4V02Wu65XKwk/eNhQc63s4wHwYDVR0j
BBgwFoAUjMutTMoXDjHGpuIrFy+ISyJOPEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVRmV01abkJLQ25HeFYzazlCMW1peDR3SkJ0M0pWamNmb2RRQWtLMmFF
a0ovMC84Q0NCQUQ0Q0NBMTcwRTMxQzZBNkUyMkIxNzJGODg0QjIyNEUzQzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQ0JBRDRDQ0ExNzBFMzFD
NkE2RTIyQjE3MkY4ODRCMjI0RTNDNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVRmV01abkJLQ25HeFYzazlCMW1peDR3SkJ0M0pWamNmb2RRQWtLMmFFa0ovMC84
Q0NCQUQ0Q0NBMTcwRTMxQzZBNkUyMkIxNzJGODg0QjIyNEUzQzQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgHlmpiqaId3K8xy8b+MRFsmTsZZagi3myXw7ho/pbK0TV3PIac2PqA/wKoM+
XN2GdektTg0nj5Q4i8voSTj7p7whha0SpQtTM38DtsfjHTybA0H9tIIW5WXKqjmx
R0tW4mcFg/ouw2BAS7bTJNpzJTWrDOg9/k3y96ZzZ4GtFqgpf4Bqjv8hkqHX22zA
xbz35AL3MqoZpoUPKREfC6slF9VlHu7gzafFk8Qbv01hnS6FNrmHNSdmJmiVuDZE
q4+axvFLF2+ups72sWvKtmuRHmocsZrnBJjnNSxjo0NEWWHmkAahLMZUUwX9442I
tCrewC8AOTofduvoAXIKvcvHJA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:18:59 2026 by rpki-client