
Error: rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
File: FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft (raw, json)
Hash identifier: G9fgzKFpqBXw8jrliK2T5Er7IG8dv0SujbyE3yVGsuc=
Subject key identifier: 81:71:EB:76:4D:97:D9:44:BC:2A:E8:35:8D:24:5A:CB:1E:F7:71:8C
Authority key identifier: FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
Certificate issuer: /CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Certificate serial: 774ADB0228CC7C7829CD974E7433692FA8095EFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
Manifest number: 04CA
Signing time: Sun 11 Oct 2026 16:04:40 +0000
Manifest this update: Sun 11 Oct 2026 15:59:40 +0000
Manifest next update: Mon 12 Oct 2026 18:55:40 +0000
Files and hashes: 1: FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl (hash: NFWjRVdqG3dn0TDxd9Yl9Gg77xqg/B3WwDj/nTdAABE=)
2: 323830343a386264383a3a2f33322d313238203d3e20323733373633.roa (hash: LXEaWXWcWiUpACwGRPLQ6lb8i3QatNxytAhakQXdBVk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 18:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4a:db:02:28:cc:7c:78:29:cd:97:4e:74:33:69:2f:a8:09:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD
Validity
Not Before: Oct 11 15:59:40 2026 GMT
Not After : Oct 12 18:55:40 2026 GMT
Subject: CN=8171EB764D97D944BC2AE8358D245ACB1EF7718C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:d6:20:18:fd:46:43:41:91:8b:74:4c:41:
13:ab:ee:89:68:97:39:9d:38:dd:3f:ad:5e:83:30:
0c:fe:00:06:1a:1a:0c:e0:e6:5a:ba:15:bc:df:9a:
51:88:81:47:71:9a:62:0f:32:6c:96:ed:f1:77:88:
62:46:19:b7:4d:8b:0e:1e:73:b6:99:df:33:4e:ea:
0f:4f:e5:b5:ef:36:cd:a4:b1:87:e5:b1:66:36:ce:
72:89:31:8e:83:f5:80:53:d4:a8:21:c9:2a:c6:bc:
a5:a9:1a:82:64:5a:62:d0:89:33:16:10:81:05:6f:
fd:fd:7b:f6:3e:95:8b:8a:56:8c:73:fe:29:e7:eb:
89:b5:4c:ec:ca:51:d4:9f:c2:4e:76:7c:72:e2:82:
89:92:33:1f:18:4b:87:54:f3:cc:f6:78:6b:4b:88:
3c:ba:f7:f5:c9:4e:60:38:81:9b:93:c4:21:54:58:
62:22:da:bc:f1:20:97:1d:dd:de:e0:17:58:98:e0:
16:61:9d:23:ec:bf:16:78:d6:46:74:1d:e8:6b:ba:
cc:ef:92:70:f7:b4:a9:d4:af:05:24:19:1b:c4:e5:
4d:f4:51:de:c4:c4:eb:74:86:d7:36:52:f8:87:fe:
9c:4b:30:ae:02:a5:93:b9:36:11:7d:a7:a3:70:65:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:EB:76:4D:97:D9:44:BC:2A:E8:35:8D:24:5A:CB:1E:F7:71:8C
X509v3 Authority Key Identifier:
keyid:FE:37:39:3A:C5:C8:D2:83:40:27:EE:7B:AE:80:CB:6B:AA:05:1C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MqYWSfyGgJmc3pBtGci7gNqMYbYee3oj4ig37Z8mzCz/1/FE37393AC5C8D2834027EE7BAE80CB6BAA051CAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:58:11:8c:7d:88:7f:37:62:e6:63:d6:b5:ad:41:5b:dd:69:
8d:fb:d6:8a:08:58:d7:1d:68:ef:5f:3a:63:d8:b2:fd:ac:84:
7e:b1:31:7a:08:ec:61:43:87:92:8b:d6:32:70:58:f9:1c:4a:
98:2a:d1:27:fb:46:fa:97:cc:66:5f:37:61:0d:3c:da:56:fd:
2c:00:99:4a:32:b7:37:ab:b3:f9:01:00:3a:04:ab:d6:68:fd:
04:45:aa:70:05:f1:23:ae:2a:18:49:08:53:0e:79:48:33:fa:
af:4d:5c:da:5c:45:d8:1d:26:74:0b:bb:e8:87:4d:6f:e5:61:
5c:3b:b1:52:0a:86:e1:23:b5:91:ec:2d:94:02:d2:f5:9f:ac:
53:9c:04:72:80:a9:21:c3:77:44:3d:91:65:cc:22:cf:06:08:
98:17:1e:97:72:4e:55:f5:ff:b2:c7:a7:b7:33:4d:cd:05:57:
bf:25:b5:aa:a3:4c:80:3d:5b:80:3b:91:dd:19:c0:82:18:84:
9d:60:90:b8:1b:2b:32:bf:3c:8a:95:77:a2:5b:78:a3:92:84:
16:01:c6:5f:84:6d:f8:4f:a4:a7:fe:d8:0e:ae:d4:81:e5:be:
86:22:60:94:9b:30:00:ad:fb:74:2a:40:3e:fb:df:f2:c7:8b:
20:42:3c:fd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUd0rbAijMfHgpzZdOdDNpL6gJXv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJB
QTA1MUNBRDAeFw0yNjEwMTExNTU5NDBaFw0yNjEwMTIxODU1NDBaMDMxMTAvBgNV
BAMTKDgxNzFFQjc2NEQ5N0Q5NDRCQzJBRTgzNThEMjQ1QUNCMUVGNzcxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PdYgGP1GQ0GRi3RMQROr7olo
lzmdON0/rV6DMAz+AAYaGgzg5lq6FbzfmlGIgUdxmmIPMmyW7fF3iGJGGbdNiw4e
c7aZ3zNO6g9P5bXvNs2ksYflsWY2znKJMY6D9YBT1KghySrGvKWpGoJkWmLQiTMW
EIEFb/39e/Y+lYuKVoxz/inn64m1TOzKUdSfwk52fHLigomSMx8YS4dU88z2eGtL
iDy69/XJTmA4gZuTxCFUWGIi2rzxIJcd3d7gF1iY4BZhnSPsvxZ41kZ0Hehruszv
knD3tKnUrwUkGRvE5U30Ud7ExOt0htc2UviH/pxLMK4CpZO5NhF9p6NwZU4FAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUgXHrdk2X2US8Kug1jSRayx73cYwwHwYDVR0j
BBgwFoAU/jc5OsXI0oNAJ+57roDLa6oFHK0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NcVlXU2Z5R2dKbWMzcEJ0R2NpN2dOcU1ZYlllZTNvajRpZzM3WjhtekN6
LzEvRkUzNzM5M0FDNUM4RDI4MzQwMjdFRTdCQUU4MENCNkJBQTA1MUNBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRTM3MzkzQUM1QzhEMjgzNDAy
N0VFN0JBRTgwQ0I2QkFBMDUxQ0FELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL01x
WVdTZnlHZ0ptYzNwQnRHY2k3Z05xTVliWWVlM29qNGlnMzdaOG16Q3ovMS9GRTM3
MzkzQUM1QzhEMjgzNDAyN0VFN0JBRTgwQ0I2QkFBMDUxQ0FELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ulgRjH2Ifzdi5mPWta1BW91pjfvWighY1x1o7186Y9iy/ayEfrExegjsYUOHkovW
MnBY+RxKmCrRJ/tG+pfMZl83YQ082lb9LACZSjK3N6uz+QEAOgSr1mj9BEWqcAXx
I64qGEkIUw55SDP6r01c2lxF2B0mdAu76IdNb+VhXDuxUgqG4SO1kewtlALS9Z+s
U5wEcoCpIcN3RD2RZcwizwYImBcel3JOVfX/ssentzNNzQVXvyW1qqNMgD1bgDuR
3RnAghiEnWCQuBsrMr88ipV3olt4o5KEFgHGX4Rt+E+kp/7YDq7UgeW+hiJglJsw
AK37dCpAPvvf8seLIEI8/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:34:49 2026 by rpki-client