
Error: rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
File: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json)
Hash identifier: Oi8XjZHZG3KGgh2Tbj+cgXfxRROPiFXidHcRrTGNpc8=
Subject key identifier: B3:78:30:4A:98:22:7C:50:27:FF:71:10:23:C7:54:05:A0:9F:16:2D
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Certificate issuer: /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial: 7557C379CD2993A4EBCE948DAA489B8E0811D59C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
Manifest number: 04D0
Signing time: Thu 15 Oct 2026 07:23:54 +0000
Manifest this update: Thu 15 Oct 2026 07:18:54 +0000
Manifest next update: Fri 16 Oct 2026 08:13:54 +0000
Files and hashes: 1: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: ZSd+FPtDjR8CzHwuh04Cmylb4eaIKCnANhxtRn9qiNA=)
2: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: T1Ym0QDmqhoa/DiNnrEKEkmEgtEn6X5T4uH0U4nQkGM=)
3: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: b1bWqdl1nl0hK/R0pp2vlvzY1ea1GeSNUD1Voulpm7c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 08:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:57:c3:79:cd:29:93:a4:eb:ce:94:8d:aa:48:9b:8e:08:11:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Validity
Not Before: Oct 15 07:18:54 2026 GMT
Not After : Oct 16 08:13:54 2026 GMT
Subject: CN=B378304A98227C5027FF711023C75405A09F162D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:c4:c6:43:20:ed:f1:e9:a4:59:9f:6b:df:
91:1b:96:d2:2f:da:26:b7:d1:6c:89:d4:70:2f:6f:
8c:9b:27:f0:4d:42:5d:0e:07:8a:84:7c:79:03:49:
d7:5c:7b:07:d3:0e:00:95:10:84:c4:02:78:60:50:
ad:e0:02:fb:11:2a:2d:7f:85:68:37:2f:26:5c:0a:
88:16:95:0b:c5:a2:ed:17:ec:16:c4:b0:f4:fd:41:
bf:e1:ea:93:09:d4:df:49:8f:6d:0e:a3:21:5d:f2:
a9:f0:70:ee:01:0f:0e:05:0a:6d:d8:73:ac:bf:63:
6a:e8:b2:fb:5f:c0:41:20:75:e1:95:0f:e3:10:9c:
54:b4:91:bc:52:3d:3e:e5:f3:ed:84:8a:f4:c7:30:
63:ce:ad:59:47:ef:78:af:15:a1:83:1a:d7:f6:4e:
c8:09:b3:2a:b4:01:41:be:cd:60:38:c5:8e:db:e8:
02:13:c2:ef:d7:6e:e9:46:3c:b8:af:ae:a8:13:c7:
2b:25:24:2b:cd:fc:7d:1d:21:5d:28:e1:39:13:60:
4e:29:6d:5a:a3:bd:64:b3:f4:49:b8:19:4a:9a:cb:
30:8e:0e:16:55:78:25:dc:f5:9c:28:f8:55:40:82:
18:7b:e9:9b:08:c9:5e:f4:bd:6d:27:d2:c0:be:9a:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:30:4A:98:22:7C:50:27:FF:71:10:23:C7:54:05:A0:9F:16:2D
X509v3 Authority Key Identifier:
keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:1a:fa:93:61:92:7f:97:ed:6f:b4:74:f0:15:ba:b3:9f:
03:1f:2b:c7:f7:7f:67:1d:73:cb:2b:0f:c8:ca:9a:f5:2c:f7:
c1:df:9d:ec:63:45:3a:04:3f:e2:6f:fe:81:a0:91:82:5f:a0:
51:ef:dd:dc:72:67:0a:6c:6b:dd:03:5d:77:e5:d9:f7:2d:77:
d3:bd:be:05:22:54:6a:f7:d1:13:b5:db:93:53:e9:52:be:7f:
97:7b:f1:05:55:69:50:2e:30:7d:5d:86:dc:f4:43:a0:65:cc:
48:1c:60:cf:2a:3e:5a:10:68:b6:97:e3:a6:a3:0f:37:d1:91:
18:9a:83:5e:fd:8f:c0:ef:d5:26:47:f7:ce:3b:97:8d:d1:fe:
c6:d2:1f:54:9e:6f:61:7c:1d:a7:0e:6b:7a:5d:aa:b7:a5:64:
d0:cf:f3:b2:88:18:e2:ba:95:b7:02:d7:93:e7:07:2a:d0:22:
80:5e:bc:1b:0a:5e:b2:ac:24:91:ba:e1:1a:c9:3f:1e:fa:75:
10:e8:80:9e:e1:e7:9d:19:75:5c:1f:08:8d:69:24:e4:60:6f:
13:57:25:e2:b7:b7:c5:7c:16:74:a9:e6:61:5e:91:70:ef:1f:
60:66:af:a9:f4:e0:ac:5a:f8:e5:f5:90:d0:30:21:8f:68:c9:
9a:dd:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:10 2026 by rpki-client