
Error: rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
File: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json)
Hash identifier: vamKYuEVGiXYYY71RnH+LPeQc/Mxp/9CqZAS5c53TII=
Subject key identifier: CD:F6:02:98:7D:3D:BD:85:26:57:61:FB:D7:C8:AE:EF:E3:02:E2:43
Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
Certificate issuer: /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Certificate serial: 7F6487B811C96CC5297751A8BFCB555BDBF5931C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
Manifest number: 0431
Signing time: Wed 14 Oct 2026 05:51:19 +0000
Manifest this update: Wed 14 Oct 2026 05:46:19 +0000
Manifest next update: Thu 15 Oct 2026 07:44:19 +0000
Files and hashes: 1: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: OQmF0Jk90VHvSqF5ofjjQsI1Xy469L2IQZ9fHgYE6JQ=)
2: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: 9yFe0uDUm/Z0uAuTBwZ27ym/SP7heLgLgHNt5AGJMHY=)
3: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: z+YShh2i7AQbjwfbZCScAlLVJtG/p4Cg8MeyqUB1gOA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 07:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:64:87:b8:11:c9:6c:c5:29:77:51:a8:bf:cb:55:5b:db:f5:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3
Validity
Not Before: Oct 14 05:46:19 2026 GMT
Not After : Oct 15 07:44:19 2026 GMT
Subject: CN=CDF602987D3DBD85265761FBD7C8AEEFE302E243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:b5:8d:ec:a0:86:46:6d:7b:7c:12:c7:7d:
75:84:ab:77:c8:52:67:2c:b7:ae:51:08:7c:cf:6b:
84:fc:96:ee:86:f6:96:b3:97:da:3f:a1:46:ad:88:
53:c5:2d:7a:63:7d:47:80:ef:27:df:f0:38:33:c1:
d2:f0:ad:ef:4d:11:e9:1a:4f:7d:51:7e:8b:63:e5:
47:d0:c4:7f:06:9d:61:6a:24:db:3d:4c:14:6d:32:
a3:01:28:d4:be:b8:36:aa:ed:31:81:ed:6d:c4:9d:
fd:25:76:d3:dd:91:f8:a2:fa:e0:b2:4b:92:5a:b9:
e0:89:20:e5:d6:2c:0f:4c:75:a4:15:fc:bc:88:d2:
01:06:57:9c:d5:2e:68:53:2d:60:0e:99:12:c1:48:
de:23:6d:f0:25:11:3d:73:eb:df:00:1a:fc:b3:51:
89:a0:6d:29:48:ac:7e:0c:76:05:eb:57:a5:04:77:
d2:89:02:64:d5:24:08:71:22:5d:46:c8:2a:a1:46:
c2:5c:ea:19:dc:32:2e:e6:1d:2b:9b:64:2a:32:a0:
2c:37:a3:dc:07:5c:7f:48:33:77:44:7c:81:5d:06:
ac:77:0a:12:3b:90:cd:f6:dc:a2:a0:12:d6:13:3f:
09:5c:0d:20:85:87:d4:40:3c:2a:3c:d1:4b:33:c8:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:02:98:7D:3D:BD:85:26:57:61:FB:D7:C8:AE:EF:E3:02:E2:43
X509v3 Authority Key Identifier:
keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c3:69:1e:0c:c4:2e:0e:dc:9e:47:ed:21:91:f8:91:d2:a2:
af:f6:13:1c:59:0a:29:1b:3a:7a:d3:89:3a:56:64:ae:32:c4:
2c:ef:1c:39:a4:6e:26:ee:af:8a:9f:b6:ea:9c:2f:02:75:2b:
08:17:ad:b4:da:8c:93:7d:f7:e5:b2:5c:be:c0:38:23:88:e2:
c9:e3:aa:65:f4:0f:cb:70:f5:3f:c7:77:17:9b:ef:98:0a:b6:
0f:f5:94:eb:cc:b9:d5:53:f2:29:be:2b:c7:af:3f:7a:72:5e:
5d:02:7a:05:29:f5:c4:90:bc:a6:8e:81:36:d3:a6:c6:81:38:
d6:0f:80:13:5b:72:07:8e:2b:9d:ed:5c:90:b2:8b:ed:f0:31:
ea:aa:58:15:a5:5f:42:ca:c2:7d:72:eb:1b:32:cc:01:4a:47:
16:f1:f6:0e:5a:30:b5:a6:3f:fd:37:ac:bf:28:15:fa:99:6c:
df:39:c5:6d:b9:31:d9:e5:17:c2:c7:59:09:94:36:f7:9f:1f:
8b:88:6d:5e:c5:a6:07:42:ed:00:66:12:6e:09:35:1a:5e:7f:
6b:45:ca:32:35:bd:ae:61:91:53:09:c3:80:85:61:7c:9b:2b:
60:04:b8:8d:74:d1:15:f8:5e:e4:3b:42:fd:68:1e:20:2a:09:
fc:03:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:37:58 2026 by rpki-client