
Error: rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier: QJeYDLySQZCGO+D75kgSOBBvB2bq8j55xteB1FrejQ4=
Subject key identifier: 57:6C:41:4E:D9:8F:40:2A:28:AE:0A:8B:26:44:09:04:DA:CE:F8:56
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer: /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial: 39F88A821AC220BAF1F97CE315DD25933682F641
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number: 04CC
Signing time: Tue 13 Oct 2026 09:20:00 +0000
Manifest this update: Tue 13 Oct 2026 09:15:00 +0000
Manifest next update: Wed 14 Oct 2026 12:32:00 +0000
Files and hashes: 1: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: lV1oKe747G0n6WRgM1a4dM22y9iZagltIiwr2w1aEBg=)
2: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: UMKRCX/4qYhc4XNHoqfKV/1ONT4TGbG+lvZt+EzE/0A=)
3: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: 1z4/xMozbUx2CPAp5a1G9mTLfzpvBpA70xbCWwQm3IM=)
4: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: 1tVL+6B8HhLcFiXsFBeRJ5hySt2gSzAHZgR8EqHAJgk=)
5: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: 0kK3z/TrTAaoriZ3GY5WskvHWB4ENyEqA6Wnc3yr+IE=)
6: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: Mu0Wn6H9qsU4Z+oCCRBb3/sh2XWemV9Lqf1gWwvHxXo=)
7: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: 0ae2f1EZL6HbxhVwcUzw3Me44jF/YDkz9SSwEVRkb24=)
8: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: f48jBUd5pA/EkaPu0n+GmcR4uDXRWc1dTQDVR1Kwz6o=)
9: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: Fx9VT/BBPrSUohUu7tYHinsNONRM+8cKqY2rlMaecck=)
10: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: ECg/+TFC7sOVcDJEnNISsSLO7wDSB/2DnX7fHheA4EU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 12:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f8:8a:82:1a:c2:20:ba:f1:f9:7c:e3:15:dd:25:93:36:82:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Validity
Not Before: Oct 13 09:15:00 2026 GMT
Not After : Oct 14 12:32:00 2026 GMT
Subject: CN=576C414ED98F402A28AE0A8B26440904DACEF856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:07:72:66:8f:c5:f0:f3:f8:1d:bf:8a:5d:
b7:db:1a:33:2d:47:51:d0:7e:ce:0e:d9:67:7b:33:
ad:a5:d7:61:a4:ed:71:aa:27:d6:d2:00:1d:7c:3e:
41:53:a5:18:57:c4:10:b8:fa:15:46:6f:bb:be:ed:
9f:e3:0a:da:18:1c:7e:b1:0d:1c:8d:88:45:bb:81:
93:ab:c8:b3:e0:9a:6a:4c:49:4e:5b:fd:89:64:31:
eb:83:36:56:ce:78:54:b5:90:3a:a0:f4:35:f7:7a:
8d:9c:a4:61:c0:2d:db:d3:a3:cc:40:e0:09:b4:bd:
55:c0:2e:84:ba:80:40:c1:c9:e7:9c:6a:b4:5a:86:
c2:0f:84:9c:38:ec:ae:d4:df:59:9e:d5:1d:3f:56:
e4:a0:7a:44:f0:71:71:a2:43:01:56:36:46:2a:9f:
f5:d4:99:48:57:f0:91:83:1e:59:d0:90:a5:a5:1b:
21:d4:bf:6b:46:30:cb:5f:6a:64:b8:f9:d0:ca:c9:
01:90:bf:4c:8d:77:9c:6f:b4:c6:35:0a:38:f2:38:
7b:b2:a5:6d:0d:9b:56:c7:f1:fe:0e:99:fd:64:ce:
99:a9:85:12:87:c2:14:d4:24:05:a4:e6:18:b1:08:
65:ec:82:4a:54:b0:01:80:c2:2a:fc:77:6f:14:78:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:41:4E:D9:8F:40:2A:28:AE:0A:8B:26:44:09:04:DA:CE:F8:56
X509v3 Authority Key Identifier:
keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:d3:4b:dc:88:ab:b8:d1:bf:2f:b9:16:cf:64:45:c3:a7:
b3:98:b6:0b:88:36:aa:f8:0c:ae:51:39:69:20:99:51:cb:a9:
56:64:3e:f5:8b:e2:a0:94:3a:6a:45:ab:b7:e1:98:c4:77:5e:
c6:4d:f7:3f:c2:2f:f0:f3:ce:4c:0a:8c:62:2e:bc:3e:90:71:
9b:ea:57:29:92:b1:38:d1:33:e0:b1:09:78:5d:60:9c:f0:1e:
80:23:e3:ac:18:59:b0:42:98:db:31:52:f9:4a:fa:1d:1e:49:
09:d2:d7:4f:e8:9a:63:cc:d1:c6:0a:9d:0c:70:c2:57:08:d4:
97:4e:40:89:18:cc:8f:35:bf:a5:8d:be:0b:d0:cf:79:20:de:
95:0f:c5:0a:f7:0b:ce:2e:9a:dc:fe:00:da:5b:c5:3f:06:de:
69:82:6b:01:3f:b1:f1:58:1c:bf:99:74:25:9f:02:9a:16:c8:
bf:62:cd:42:48:05:e8:80:0e:d7:c9:a4:77:a3:0a:a5:02:5e:
eb:98:d6:36:a1:31:cd:73:02:01:3f:61:9a:ec:58:5a:07:9a:
c5:23:89:0b:67:84:68:e3:1c:69:d7:d3:84:9d:94:f5:8f:8e:
56:fa:c4:82:88:59:93:4e:11:27:a9:75:9a:ee:a2:13:b7:cb:
48:27:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:33:15 2026 by rpki-client