
Error: rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
File: 3929491D59EC78DBDEC7423B04D06034C1A59303.mft (raw, json)
Hash identifier: crhhnXzZ+9crEInj8+DnEzn3Qwl12sK5GDI7ur5AhX0=
Subject key identifier: 57:A7:AB:98:F3:F4:99:F1:15:35:92:2D:10:BC:6E:AA:6A:F9:E7:DC
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Certificate issuer: /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial: 6AC61F0DD5E9300DBA0DE9C71F9DE3ED00DF812D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
Manifest number: 04F0
Signing time: Tue 27 Oct 2026 04:27:45 +0000
Manifest this update: Tue 27 Oct 2026 04:22:45 +0000
Manifest next update: Wed 28 Oct 2026 07:19:45 +0000
Files and hashes: 1: 3137372e3135352e3230382e302f32302d3234203d3e203532373731.roa (hash: wQuUvyrBnHz/Bwoy7HSx0HSwHqPOlSVbPsDzbRx2QVE=)
2: 3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (hash: SFO7lV9AhoR9qtC/YEdbEOF6wBFZayMls9S9/Rnfx24=)
3: 3136382e3232382e39322e302f32322d3234203d3e203532373731.roa (hash: n06A7aMK9KWyvaj6TunFFzOW1nkzjRc2YjajEjkLNUQ=)
4: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (hash: /f3q3WJtTf8n5Tt/4ow8M9X3bI0kbUnjEWsb+N6VSQ4=)
5: 3133382e3138362e34362e302f32342d3234203d3e203532373731.roa (hash: NAjciGpSQCgCEpu/aLRYC9IYZFZ6qupWYDQ6bCtw3og=)
6: 3133382e3138362e34352e302f32342d3234203d3e203532373731.roa (hash: 0gxXrsYO0kG1HUofDdqZqu7vJpCVNf+JdhAc98JtEOI=)
7: 3133382e3138362e34372e302f32342d3234203d3e203532373731.roa (hash: xrip3GzGbts0+j9svHEHgvaLzEPCHkGzlBehBPrzTI4=)
8: 3929491D59EC78DBDEC7423B04D06034C1A59303.crl (hash: rAx/slqpQihdcgptbyvcHbvfpjc23mQH+EVnMVHhCcc=)
9: 3133382e3138362e34342e302f32342d3234203d3e203532373731.roa (hash: H1CAtPqoi98qfBZ8Qhf+bclD0A+AK0qBuAwXopZ4ngQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 07:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c6:1f:0d:d5:e9:30:0d:ba:0d:e9:c7:1f:9d:e3:ed:00:df:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Validity
Not Before: Oct 27 04:22:45 2026 GMT
Not After : Oct 28 07:19:45 2026 GMT
Subject: CN=57A7AB98F3F499F11535922D10BC6EAA6AF9E7DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:bf:f1:d8:8d:7f:8e:ad:c0:d4:a8:d8:f4:
84:ba:68:3b:dd:52:07:f6:09:61:f0:76:6b:ab:82:
9b:13:22:b5:7c:fb:13:ae:94:68:dd:1d:f0:8f:e9:
d2:25:ea:e1:38:2e:06:9f:be:00:4e:81:31:85:5a:
93:3c:24:34:76:c4:a8:fb:21:75:0e:15:a2:c6:85:
6f:5b:da:25:be:73:98:3b:b0:ad:c3:69:d3:1c:10:
7c:d5:94:f6:0a:79:02:96:e6:f8:61:a1:20:89:4a:
c2:84:f1:55:94:31:62:cc:48:34:42:df:13:68:65:
00:7e:52:0b:a1:42:cc:f5:a2:5f:95:4c:ec:fa:37:
da:c7:70:ff:dd:a5:a3:a1:92:4d:27:7b:57:21:cf:
dc:31:68:20:98:94:b3:ee:8b:32:2b:e8:cc:02:15:
f8:48:0b:d0:37:b7:76:8d:05:30:0a:c4:8b:38:cf:
5c:59:39:52:31:5e:e3:09:4b:d2:16:95:2e:0d:ea:
de:10:57:25:4e:2c:73:8c:64:4b:93:70:16:8b:76:
fe:8a:fa:0c:35:2d:2a:21:8f:63:6a:56:c7:8d:ce:
80:8e:01:80:a0:b6:d2:61:d0:69:2a:a2:9f:a3:7f:
e5:ba:b6:67:e1:16:f2:93:97:b8:c9:92:d1:e6:ef:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:AB:98:F3:F4:99:F1:15:35:92:2D:10:BC:6E:AA:6A:F9:E7:DC
X509v3 Authority Key Identifier:
keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:35:0c:f6:7e:cc:be:c9:4f:a9:cc:83:07:5d:ac:b1:1d:ec:
86:ce:62:89:4d:55:53:c1:90:88:5f:07:53:0c:9f:bb:26:05:
71:92:74:5f:03:e3:74:0f:45:d7:67:ef:96:49:d7:3f:4b:e0:
8b:87:50:64:a4:60:05:b6:8b:eb:57:f9:56:e2:bc:c0:07:4a:
92:08:e3:cb:b7:22:f6:be:72:43:e3:45:46:b1:86:89:92:3c:
7b:ab:e3:23:93:71:1b:7f:6b:e8:1f:97:19:f2:6b:10:bf:e7:
e8:37:fe:57:ae:7f:06:8a:8c:69:d5:e4:35:74:0d:59:fd:1d:
a0:4b:16:a7:39:f2:8f:82:2c:e8:cf:eb:9f:9a:66:5d:c8:c8:
a2:cb:76:18:47:f8:87:e2:33:66:c1:f6:d5:c4:4c:c2:73:31:
e6:04:ab:ff:02:39:f8:b4:1c:52:f7:60:0e:a4:95:60:84:65:
26:93:6c:8f:e2:cb:e7:2d:02:65:24:8e:6f:6f:d6:cb:dc:05:
95:c6:1d:b0:d9:79:42:70:9b:1b:c5:86:1d:40:88:93:2d:a3:
fb:c2:47:9f:0c:ea:c8:97:af:f1:1d:00:a9:28:6d:fd:7e:bc:
ab:ef:02:42:20:64:cd:b9:b0:70:a5:46:b6:4a:3d:73:ba:89:
ce:e4:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:58:45 2026 by rpki-client