
Error: rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
File: BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft (raw, json)
Hash identifier: ZfF0ZTx1x7I/XIdeeWxcgio1MpxsbkVQGAQTbmulEqc=
Subject key identifier: 71:8F:20:CF:26:86:BF:1D:C1:C9:D4:0F:F2:DA:3F:B7:A6:C1:6B:59
Authority key identifier: BB:29:FE:53:3F:66:E5:57:A9:77:87:A5:65:85:CE:14:EC:A8:FC:D2
Certificate issuer: /CN=BB29FE533F66E557A97787A56585CE14ECA8FCD2
Certificate serial: 76DFDDC02A7A67699AADEEBE8CD776A7EFDB9C83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
Manifest number: 0586
Signing time: Sun 01 Nov 2026 18:40:00 +0000
Manifest this update: Sun 01 Nov 2026 18:35:00 +0000
Manifest next update: Mon 02 Nov 2026 18:40:00 +0000
Files and hashes: 1: BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl (hash: lsWLPD+ztLKiTT98W4p4DrhwwsD5ZrP9db6gi81E7IA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl
rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 18:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:df:dd:c0:2a:7a:67:69:9a:ad:ee:be:8c:d7:76:a7:ef:db:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB29FE533F66E557A97787A56585CE14ECA8FCD2
Validity
Not Before: Nov 1 18:35:00 2026 GMT
Not After : Nov 8 18:40:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:11:23:5a:23:ce:52:4c:d0:b1:77:61:a6:
cb:5f:35:f0:32:9d:b8:36:c5:1a:1f:e0:a6:31:09:
d1:a8:b1:3b:54:e4:9f:78:76:29:60:3d:46:73:d0:
6f:86:4f:f4:bb:d6:85:0d:80:aa:3e:84:d6:c9:a4:
dd:b6:bb:58:29:90:43:b3:39:58:c6:c1:4f:ab:f2:
64:d4:80:e4:6c:25:92:ed:38:05:8a:14:fe:16:8b:
ef:b4:f3:ee:0e:61:8e:b9:bc:31:6b:28:fc:df:72:
76:e3:51:98:b3:2b:7e:21:9c:4f:cc:c1:10:04:43:
67:ad:3e:8c:a7:6c:65:06:13:c7:1d:26:a9:43:74:
21:13:76:58:11:c1:ae:b0:a2:fc:15:33:d6:c5:59:
25:70:b5:24:73:d6:ef:49:cc:63:b0:e5:72:8e:ee:
97:5c:ba:f5:5f:21:0e:3e:11:7e:7e:d7:83:01:26:
84:58:e4:c4:86:ca:fa:8b:95:6b:b6:06:db:c1:87:
34:c9:ad:2e:5e:3b:1b:be:60:82:b3:11:ee:6a:11:
96:86:c8:7c:b9:e0:bd:b2:16:fe:0e:e0:64:3a:c6:
75:2a:d4:db:64:74:a2:0c:04:2e:72:1b:c3:13:71:
fa:72:3b:c5:a9:a7:a9:a5:8d:d8:54:52:aa:f0:87:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:20:CF:26:86:BF:1D:C1:C9:D4:0F:F2:DA:3F:B7:A6:C1:6B:59
X509v3 Authority Key Identifier:
keyid:BB:29:FE:53:3F:66:E5:57:A9:77:87:A5:65:85:CE:14:EC:A8:FC:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9WxhmiyNpJYvoHzvkVRxnzj6AtX8kJ1VqV1v3LHSfc4/1/BB29FE533F66E557A97787A56585CE14ECA8FCD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:29:54:60:56:4b:29:1e:d2:8a:af:b7:17:57:ee:4b:39:8e:
e4:4b:a7:87:2e:c8:19:73:12:dc:46:3e:b2:35:bf:63:ca:ff:
5b:52:c7:1f:15:90:e3:2e:f7:96:bb:39:b2:e7:60:fe:89:51:
be:fd:72:83:10:77:3c:05:7a:03:f0:79:c5:c0:17:c7:ad:43:
29:82:fb:93:19:b1:da:d6:0a:06:38:73:6b:a7:b8:4c:f7:6b:
09:a8:cd:6e:84:26:44:c4:d8:8e:44:10:e0:8c:fa:f1:0a:66:
c4:fc:66:cb:99:bb:ee:27:ac:32:e5:52:9e:34:92:b1:30:54:
8f:6b:41:53:c1:09:67:48:f6:e7:87:a7:cb:d5:83:00:d1:6e:
94:b4:91:15:78:57:e5:ee:82:94:c8:ef:88:9a:19:26:fb:a2:
41:72:03:f5:fa:29:ce:59:83:55:6f:43:fa:40:b5:e7:66:d4:
80:ce:b4:37:d3:ba:b4:5a:bb:0a:70:18:75:a1:64:e3:d5:ee:
47:f2:f9:d9:79:fa:92:13:84:fe:a2:00:ef:94:5b:b5:58:b0:
59:13:ea:05:3d:53:1f:cb:62:68:0f:3d:f6:24:bc:84:29:7e:
be:8d:07:43:c6:8c:b3:60:f6:09:5d:91:3b:8d:c7:cb:91:8d:
1a:59:e0:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 23:59:51 2026 by rpki-client