
Error: rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
File: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft (raw, json)
Hash identifier: U1L5cEoTETAIjyovtDJp6Jo6s/4+mZX4rce6TeUqmFU=
Subject key identifier: 0D:D7:60:2D:DD:4D:7B:59:DE:EA:9A:51:D9:0F:AF:F1:4A:A0:91:A6
Authority key identifier: 57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
Certificate issuer: /CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Certificate serial: 575E935344B29C260C86B01B4D2FCF35CB020F5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
Manifest number: 029A
Signing time: Tue 13 Oct 2026 04:50:00 +0000
Manifest this update: Tue 13 Oct 2026 04:45:00 +0000
Manifest next update: Wed 14 Oct 2026 07:07:00 +0000
Files and hashes: 1: 34352e3138352e3139322e302f32322d3332203d3e20323639353533.roa (hash: rWpXA+4kgU4O0SC7MZZLj50f/4vH8vVnL8aCLqfCOHc=)
2: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl (hash: WrEa7CRMo9Yct0fRU11/erd/15gQCY64p/9zmvxIFeI=)
3: 323830343a363635633a3a2f33322d313238203d3e20323639353533.roa (hash: I0L16WjFSpuykXqED0lnmznyQcL5WDK4OqQ9kE7gKFk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 07:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5e:93:53:44:b2:9c:26:0c:86:b0:1b:4d:2f:cf:35:cb:02:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Validity
Not Before: Oct 13 04:45:00 2026 GMT
Not After : Oct 14 07:07:00 2026 GMT
Subject: CN=0DD7602DDD4D7B59DEEA9A51D90FAFF14AA091A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:3b:5f:72:da:8f:ca:6c:0f:94:bf:45:bd:
4f:57:31:c8:fd:5b:43:88:fe:66:09:dd:1c:e7:9e:
95:0a:f1:24:39:3e:d9:99:05:83:a2:1c:cb:33:01:
64:12:b4:c8:43:8b:90:c1:2b:b8:53:80:3d:fc:4b:
1b:a8:16:27:ed:6a:f8:e7:08:33:ec:66:6f:68:5d:
44:e7:8f:00:0e:95:d7:f4:bb:e1:54:78:40:d5:23:
56:6c:60:0f:34:90:6d:3e:88:03:1b:b8:68:7f:8a:
a6:fc:4b:97:5a:ec:77:fb:68:f8:b2:e9:df:d1:6f:
7b:59:a7:f6:83:73:29:ad:34:15:b6:0d:55:03:50:
4f:8d:6e:a2:d0:6e:4c:98:b6:42:c0:eb:16:80:bb:
e4:26:23:42:9b:f7:e6:ac:a9:8f:f6:93:d4:4d:ec:
11:5d:cc:10:2d:cc:6d:53:a9:ac:92:02:14:1e:65:
65:41:36:6f:a1:a6:5c:b2:b5:79:4d:b6:1c:90:62:
63:d0:4c:85:ec:cf:56:f2:fa:6f:7d:a0:cc:92:2b:
7e:71:8b:75:39:ba:99:5f:4b:63:97:fe:89:fd:6e:
45:45:2c:52:16:c8:6f:28:6c:b4:a0:01:c7:77:98:
34:0b:6d:8f:eb:78:69:3e:10:70:52:29:2d:b1:9a:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:60:2D:DD:4D:7B:59:DE:EA:9A:51:D9:0F:AF:F1:4A:A0:91:A6
X509v3 Authority Key Identifier:
keyid:57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a8:36:95:4e:aa:ce:c5:9b:46:ed:92:30:c5:cb:57:b2:1c:
23:a1:2b:64:91:5a:d2:7b:90:16:27:89:fc:af:71:6c:2c:ea:
0e:cc:4f:cc:55:1d:04:00:36:b3:d3:93:a1:38:1b:a5:8f:ac:
e9:28:cc:b9:66:48:ab:7e:32:33:ed:40:0e:db:45:5e:80:a8:
84:ef:c8:cf:05:1a:06:3e:e0:51:88:e8:90:ab:e7:f0:02:27:
dc:47:0a:31:74:b7:49:f8:70:d4:24:d0:9f:03:29:a0:94:76:
0b:a8:33:e5:ca:fe:ee:03:f8:a4:56:83:8d:36:03:2b:43:bb:
3e:6d:58:84:fe:45:9d:2a:0c:5c:7f:69:c2:c5:00:dc:11:61:
ac:2b:52:5a:f5:3a:2d:07:e0:17:4e:f4:63:ee:b7:69:db:0d:
b4:8c:a0:94:0c:50:bc:2d:e5:16:2e:72:4e:6e:3f:f5:b2:c2:
6b:cb:37:d9:09:6a:38:38:77:6e:e6:a4:a8:e8:a2:0e:d9:1d:
1f:3d:d1:92:26:d3:fc:79:ee:66:92:45:11:0d:b8:60:d4:d7:
72:84:32:8f:fa:e0:a3:ef:98:47:9b:50:1c:18:f7:ae:d2:5e:
44:8b:8c:d0:f3:8a:ec:23:74:c5:8d:40:7c:b8:8e:df:ea:38:
1d:22:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:28:23 2026 by rpki-client