
Error: rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
File: 1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft (raw, json)
Hash identifier: Noa4bg+A01rm1rNB5lxhMoA62hw5vSl/ZVPYp5a1G9Q=
Subject key identifier: 8C:A7:3B:ED:57:75:55:93:50:13:0D:5E:FB:DB:56:75:2B:14:9D:C8
Authority key identifier: 13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
Certificate issuer: /CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Certificate serial: 0811145FCB76ECF30350C7A1FA93515ABC8AEA6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
Manifest number: 046C
Signing time: Mon 12 Oct 2026 19:12:50 +0000
Manifest this update: Mon 12 Oct 2026 19:07:50 +0000
Manifest next update: Tue 13 Oct 2026 20:08:50 +0000
Files and hashes: 1: 323830343a386335343a3a2f33322d3438203d3e20323733373936.roa (hash: Bsm10JCjVdYJiQ/MObFoO8rQCpvCL6AE4Ycj3RpQ3RQ=)
2: 1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl (hash: XDppuQ64LWYGKR7E+3H+Lewi+sPfZp1SpZzhsSiYcbQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 20:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:11:14:5f:cb:76:ec:f3:03:50:c7:a1:fa:93:51:5a:bc:8a:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Validity
Not Before: Oct 12 19:07:50 2026 GMT
Not After : Oct 13 20:08:50 2026 GMT
Subject: CN=8CA73BED5775559350130D5EFBDB56752B149DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:e9:56:5b:ef:6c:cf:f0:cb:27:88:11:7c:
99:62:96:c9:cd:85:42:ca:f9:9f:b5:18:99:8c:3f:
fe:97:37:cc:a1:93:09:5f:91:58:81:f5:ce:4e:d7:
a8:f6:75:61:28:93:74:a7:5d:e0:32:0c:94:7c:41:
f8:55:94:52:c5:64:fc:c4:26:db:de:69:70:68:e2:
1f:09:f9:c2:71:b7:dc:27:d6:d0:f1:52:af:4e:d0:
0b:66:90:59:e5:9c:89:ae:79:88:bc:6e:4a:fe:e5:
d6:34:20:85:df:02:4b:47:0d:57:46:e1:d1:8e:0a:
ed:20:16:4f:f1:9d:24:03:67:40:74:c4:13:fc:f0:
f1:68:f0:97:16:1a:ab:cc:86:22:d1:de:e5:8e:64:
1d:19:77:29:c1:a4:3d:da:9a:cb:ef:da:6f:16:79:
de:03:87:55:c3:ff:ab:57:15:5c:a5:83:cf:7b:42:
45:55:9b:22:ff:52:e2:c9:69:e6:27:8a:9f:29:39:
65:80:01:0f:e7:ff:2a:51:c0:a9:30:e5:de:a3:85:
9e:40:2c:df:37:6e:c1:e3:61:e4:b2:52:24:0b:3f:
49:a5:08:21:a1:8f:8e:d3:08:e3:b3:0b:b0:f6:d3:
7a:e9:1e:fa:47:6a:fc:5d:9a:b9:0e:7c:57:d7:35:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:3B:ED:57:75:55:93:50:13:0D:5E:FB:DB:56:75:2B:14:9D:C8
X509v3 Authority Key Identifier:
keyid:13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:0a:83:e3:68:24:9a:48:0d:fa:ff:77:a4:26:88:2a:e1:
0e:f3:73:a8:e7:00:df:cb:8b:37:20:22:ff:78:ff:29:f1:d9:
a6:55:bd:72:7d:34:fc:c9:4d:55:19:7a:43:1a:cf:e2:fa:8d:
f9:d8:31:cb:c9:17:71:df:d2:f2:8c:88:8f:69:9a:d0:46:75:
3e:e8:81:2c:2a:90:a2:32:8b:62:05:9d:02:c2:89:04:1d:1f:
a2:88:d2:09:24:54:9c:3a:bf:bf:d8:c0:65:cb:f8:d4:4a:e7:
fc:7e:57:da:2f:5f:92:12:06:80:67:f0:53:b7:4c:f2:f0:f1:
2c:14:c9:18:b7:71:b0:f0:5d:b3:35:bb:1f:9d:5c:bf:32:ce:
53:71:e8:d1:c3:60:a9:62:75:c2:39:28:46:8b:51:cc:9b:91:
d1:3e:15:56:10:95:37:95:4a:70:8f:bc:39:4e:34:f8:2e:12:
b3:ea:2c:89:48:1f:e7:4a:9e:55:8c:08:69:81:08:f6:65:a4:
2a:d8:a8:03:af:d8:3c:54:e4:f9:1e:42:06:4b:c0:30:ea:2c:
be:0d:03:f6:41:da:fc:96:18:30:14:76:2f:9b:8a:b0:19:4c:
34:98:ae:38:6c:0d:cc:24:ab:e2:a3:64:60:a9:42:e0:6a:4a:
31:c7:06:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:27:08 2026 by rpki-client