
Error: rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
File: 4959F557EDB40C3E3B7D450A5F4FE57884600618.mft (raw, json)
Hash identifier: IUauTbByBomU9e6lQvCI8z2WfBRj+Cyd/tRp4OE6fgs=
Subject key identifier: 9F:11:CF:3D:91:7C:70:79:F8:29:8A:5B:13:BF:B7:F9:F0:28:C8:D6
Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
Certificate issuer: /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Certificate serial: 7AFBB6B6E9789F8FC7B1CA4F29A2C39B2D1CA064
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
Manifest number: 041D
Signing time: Mon 19 Oct 2026 08:21:11 +0000
Manifest this update: Mon 19 Oct 2026 08:16:11 +0000
Manifest next update: Tue 20 Oct 2026 10:57:11 +0000
Files and hashes: 1: 3230302e31302e35362e302f32322d3234203d3e203631393330.roa (hash: ZlFzsLNZgcsXxzHfYHVC1lGzeXj1KmF5L6KbIjGO5Wk=)
2: 323830343a313836383a3a2f33322d313238203d3e203631393330.roa (hash: DsNySGVvhBghMZ+WmWoj/DRQ4KH2i4dGCKzoZ1Z/+a8=)
3: 4959F557EDB40C3E3B7D450A5F4FE57884600618.crl (hash: /3ON8dD2ED897knlSPg/M4g2zL3e4JQcAyUzbrd/H20=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 10:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fb:b6:b6:e9:78:9f:8f:c7:b1:ca:4f:29:a2:c3:9b:2d:1c:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Validity
Not Before: Oct 19 08:16:11 2026 GMT
Not After : Oct 20 10:57:11 2026 GMT
Subject: CN=9F11CF3D917C7079F8298A5B13BFB7F9F028C8D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:0a:e1:12:1b:64:9a:21:46:01:e4:74:e9:
a4:bf:8b:3c:3b:bf:a2:83:aa:0a:04:c4:27:47:0c:
82:0c:d0:a1:9c:89:08:f8:87:0d:34:b1:a3:26:87:
eb:80:cd:d3:84:2d:f9:e0:bb:ea:1e:43:4e:cc:5c:
39:e7:8f:46:ee:f7:3e:1e:cd:17:d3:b1:4f:ba:4d:
36:5b:ce:71:4a:63:a6:e4:45:74:fb:17:16:49:00:
cc:31:df:b7:d7:6d:47:18:11:3b:d2:6d:e7:3a:dc:
56:39:22:ac:89:90:12:3d:98:9d:42:47:9c:b6:fa:
12:ff:e1:12:26:09:b4:35:8d:00:a2:4c:a3:93:3b:
dc:62:10:7d:b9:09:e5:48:9b:63:8c:b4:e4:f2:e3:
fc:58:54:0d:df:13:65:cb:bd:91:e6:2a:a4:cb:62:
85:d7:34:db:84:40:f9:eb:92:40:69:07:38:a3:9e:
30:84:09:ea:8b:6a:d6:5b:bf:f0:47:d8:7c:1b:f1:
0e:cc:d1:e7:20:85:3c:4b:e0:02:3d:ca:9d:ae:7f:
ea:c7:24:57:2e:a0:d7:6f:cb:a9:7c:ba:12:47:f9:
1a:cd:35:06:08:35:7a:96:16:1e:46:e1:7c:1c:5e:
cc:da:86:72:12:17:1b:c3:5a:39:de:55:b0:16:cd:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:11:CF:3D:91:7C:70:79:F8:29:8A:5B:13:BF:B7:F9:F0:28:C8:D6
X509v3 Authority Key Identifier:
keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:49:6c:c6:fa:14:c1:35:f5:a2:57:a6:eb:71:94:54:9a:28:
b7:2b:31:a4:3b:de:f0:f9:4d:ba:02:a1:4d:dc:bf:8c:3c:ec:
41:3b:c5:bd:95:f5:ee:42:7b:32:8e:c9:a9:46:aa:cb:a7:f7:
f9:83:ec:de:31:1c:73:99:45:14:70:cc:55:0f:96:86:17:a9:
96:73:0d:5b:d7:17:b0:bc:9b:3b:28:1e:a8:ae:97:26:d3:be:
6e:26:95:be:5d:c3:da:8e:26:6c:c3:60:6b:f7:18:a9:76:f9:
8f:16:fd:51:2c:29:a3:e9:a5:6a:61:1d:38:79:c3:b0:5b:04:
fb:af:4b:7b:15:39:f0:9c:52:e5:af:35:bf:47:ab:f4:15:38:
0f:7c:2b:e5:0f:50:e4:6d:3d:69:5c:8b:62:96:99:9a:78:7b:
f9:43:1d:97:47:67:10:fd:7b:bb:b9:e8:21:28:63:3d:64:d3:
5d:8d:bd:e2:5c:06:ab:4a:63:47:dc:6b:af:b2:26:bf:22:51:
d0:c2:30:c6:7c:65:78:ae:0d:31:7d:b7:c5:ae:41:f0:6b:63:
69:e5:48:58:72:e3:e3:b2:8d:9b:c3:2a:5e:5e:27:c2:e8:49:
46:ce:89:23:a4:2d:ce:2a:c6:db:5d:d5:65:fb:06:05:0c:cf:
26:88:ce:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUevu2tul4n4/HscpPKaLDmy0coGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1OUY1NTdFREI0MEMzRTNCN0Q0NTBBNUY0RkU1Nzg4
NDYwMDYxODAeFw0yNjEwMTkwODE2MTFaFw0yNjEwMjAxMDU3MTFaMDMxMTAvBgNV
BAMTKDlGMTFDRjNEOTE3QzcwNzlGODI5OEE1QjEzQkZCN0Y5RjAyOEM4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YwrhEhtkmiFGAeR06aS/izw7
v6KDqgoExCdHDIIM0KGciQj4hw00saMmh+uAzdOELfngu+oeQ07MXDnnj0bu9z4e
zRfTsU+6TTZbznFKY6bkRXT7FxZJAMwx37fXbUcYETvSbec63FY5IqyJkBI9mJ1C
R5y2+hL/4RImCbQ1jQCiTKOTO9xiEH25CeVIm2OMtOTy4/xYVA3fE2XLvZHmKqTL
YoXXNNuEQPnrkkBpBzijnjCECeqLatZbv/BH2Hwb8Q7M0ecghTxL4AI9yp2uf+rH
JFcuoNdvy6l8uhJH+RrNNQYINXqWFh5G4XwcXszahnISFxvDWjneVbAWzSlpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnxHPPZF8cHn4KYpbE7+3+fAoyNYwHwYDVR0j
BBgwFoAUSVn1V+20DD47fUUKX0/leIRgBhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdi
SnUvMC80OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NTlGNTU3RURCNDBDM0Uz
QjdENDUwQTVGNEZFNTc4ODQ2MDA2MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXZyWWoxWDNQZ0hiY1g5R2VKeDdyQW5BNjZlOEtLN2dNUmQ5eEVpVjdiSnUvMC80
OTU5RjU1N0VEQjQwQzNFM0I3RDQ1MEE1RjRGRTU3ODg0NjAwNjE4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIklsxvoUwTX1olem63GUVJootysxpDve8PlNugKhTdy/jDzsQTvFvZX17kJ7
Mo7JqUaqy6f3+YPs3jEcc5lFFHDMVQ+WhheplnMNW9cXsLybOygeqK6XJtO+biaV
vl3D2o4mbMNga/cYqXb5jxb9USwpo+mlamEdOHnDsFsE+69LexU58JxS5a81v0er
9BU4D3wr5Q9Q5G09aVyLYpaZmnh7+UMdl0dnEP17u7noIShjPWTTXY294lwGq0pj
R9xrr7ImvyJR0MIwxnxleK4NMX23xa5B8GtjaeVIWHLj47KNm8MqXl4nwuhJRs6J
I6QtzirG213VZfsGBQzPJojO/w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:24:47 2026 by rpki-client