
Error: rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
File: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json)
Hash identifier: kppgNj9mQPxUNdBDtVUnhDenfEEuua4MUchu9z1+9cI=
Subject key identifier: 74:95:A7:D6:42:24:FE:D2:62:BF:29:86:F5:4F:E0:D8:C6:5B:01:A8
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Certificate issuer: /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial: 34CB062AF122440BE37B4883C743601D04033DD1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
Manifest number: 04D1
Signing time: Wed 14 Oct 2026 05:40:03 +0000
Manifest this update: Wed 14 Oct 2026 05:35:03 +0000
Manifest next update: Thu 15 Oct 2026 08:53:03 +0000
Files and hashes: 1: 323830343a333264343a34303a3a2f34382d3438203d3e20323635313030.roa (hash: c9x/IixrLA46R9oqOnvvu1Jek/n6fhR07K83yyiVRus=)
2: 323830343a333264343a34313a3a2f34382d3438203d3e20323635313030.roa (hash: Cp3dbohJVcqt37sfTUoMJ3E+bdUhg84eKNROBpdrawk=)
3: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: rjzLK3OVuqaSmw/wNvoff+GpB+z6iVTAM2YCsZN8qSY=)
4: 323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (hash: DP7VMVTULVPm/t4uYReoBaIU42700EU4VYLJ72yqCDM=)
5: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: H4rGxooSLd9uefPvothMuAiVrUXGg3++Wq1oLVI+E8c=)
6: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: zQQXjp3mj9Ro+jtHpOapxa4PEYrJqPPs6DpcZJN+5E4=)
7: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: Q9KP5wCh+ZPDTItZbChYfaToBd4KkV1aPEf2axonbTk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 08:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cb:06:2a:f1:22:44:0b:e3:7b:48:83:c7:43:60:1d:04:03:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Validity
Not Before: Oct 14 05:35:03 2026 GMT
Not After : Oct 15 08:53:03 2026 GMT
Subject: CN=7495A7D64224FED262BF2986F54FE0D8C65B01A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:c6:4d:7b:1c:de:8d:22:9c:bf:28:11:ee:
d1:bd:05:69:e8:27:46:82:ca:d9:a0:ab:15:55:91:
44:ea:02:4b:2b:92:08:d9:f8:47:2e:83:5a:f5:4e:
8b:c5:80:c7:7d:47:bc:3b:41:54:b6:c5:01:bc:f4:
cf:f0:0d:a9:76:b1:d2:07:da:23:11:2b:1a:c1:85:
52:3a:3e:f1:8a:f8:27:8a:43:a3:d6:b6:fb:e8:ea:
dc:1a:85:66:58:7c:19:dd:ba:1d:11:c2:ef:38:81:
ab:cb:a1:1e:f0:0f:8e:0e:a6:9e:07:48:72:fd:13:
21:38:49:d2:1b:fe:cd:90:7d:45:b9:ee:a4:3c:82:
a4:96:d4:b6:a1:be:f2:aa:e2:ba:2c:4e:98:49:7f:
11:d0:b2:fc:bc:81:6c:11:88:aa:f7:db:e6:dc:90:
8c:51:0d:2d:07:f2:2e:45:9e:a9:d0:7a:49:ec:08:
cd:58:6a:9e:a1:d5:de:ce:3b:a1:bf:e4:15:90:f5:
c6:1e:e6:ef:46:5e:58:24:28:cd:c4:99:e3:0a:39:
7e:79:97:6a:0e:09:a9:01:de:33:39:ed:14:6c:f3:
32:22:15:bc:94:be:22:16:d4:2b:68:cc:0d:2f:5e:
2d:55:69:18:93:d5:9b:79:aa:e6:5d:73:72:08:af:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:A7:D6:42:24:FE:D2:62:BF:29:86:F5:4F:E0:D8:C6:5B:01:A8
X509v3 Authority Key Identifier:
keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:14:71:a2:ef:60:4f:8d:e1:68:9e:e9:e8:53:87:a4:da:
31:67:dc:91:c7:4a:ae:db:3d:6f:75:34:f7:81:ab:41:04:68:
31:7c:47:4a:19:d7:b7:ba:7b:fd:e6:aa:de:50:22:e8:e8:d2:
45:c8:3f:61:c0:ae:e8:46:39:ff:1f:e7:da:47:e5:3c:bf:47:
56:3b:91:79:0f:dc:2f:b2:0d:fd:01:81:53:17:b2:25:3a:f0:
e2:1e:ef:bf:54:0b:78:f4:af:9d:da:5b:97:0e:dd:54:8d:48:
2a:41:c0:86:a2:3f:7e:09:a8:05:64:42:7a:bf:88:e6:5c:3e:
7a:73:d6:62:65:2b:62:09:55:4d:56:fa:5a:7d:e3:6a:df:40:
c7:25:66:af:f1:25:12:56:82:14:60:e4:86:ed:32:a1:41:30:
12:31:9a:84:8e:54:d6:2a:bc:70:d3:7f:cf:5d:b0:cc:95:9f:
52:ab:c1:b3:3e:20:a6:34:ec:5c:bd:22:6e:70:b1:76:ee:91:
5b:72:14:37:b7:ca:18:37:40:b3:83:df:b5:fe:7b:06:a4:62:
d4:a1:b0:8a:12:0a:7f:49:92:f8:fa:de:99:b9:4f:26:e5:b8:
95:8c:ea:59:a0:71:38:70:18:c6:0b:a2:4e:39:15:cd:b1:13:
07:54:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:25:10 2026 by rpki-client