
Error: rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
File: 058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft (raw, json)
Hash identifier: GS/2q6OkwUgyJa1S1HyMknO0b+9lM444kJx7C8rLUXU=
Subject key identifier: F7:9C:7D:66:39:2E:95:49:0C:A1:99:53:BF:B6:DD:37:E1:61:A7:32
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Certificate issuer: /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial: 0D3951CAE95E76126E520EEA480CA1C5486925E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
Manifest number: 02A6
Signing time: Mon 12 Oct 2026 16:47:34 +0000
Manifest this update: Mon 12 Oct 2026 16:42:34 +0000
Manifest next update: Tue 13 Oct 2026 16:47:34 +0000
Files and hashes: 1: 323830343a323862303a3a2f33322d3430203d3e203532393332.roa (hash: 0Ep1/BD8sPrgb+/bmSkLh/3priboVAo9Pt8vEsxZlDs=)
2: 3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (hash: BgtHd82mla7YM5k/jYNwff+cYiUekMuPwNjBU952X78=)
3: 058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl (hash: Tcxa4eWCdUj5O6wWImIXt03ZFCvIKLfm+rtwblwzc1s=)
4: 3138372e38362e32342e302f32312d3234203d3e203532393332.roa (hash: GZ86pjCl2mFcA1htlxXaoWY1DCVrqWxOeAnMjpgNRI4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Oct 2026 16:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:39:51:ca:e9:5e:76:12:6e:52:0e:ea:48:0c:a1:c5:48:69:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Validity
Not Before: Oct 12 16:42:34 2026 GMT
Not After : Oct 13 16:47:34 2026 GMT
Subject: CN=F79C7D66392E95490CA19953BFB6DD37E161A732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:d7:74:fa:3d:5b:8c:7b:64:29:26:e3:eb:
44:30:fe:42:27:a8:60:73:f1:6f:e4:c7:ad:47:9a:
ea:24:01:e5:d5:b2:41:70:96:fc:47:b5:44:93:00:
26:e8:53:76:a7:62:e8:61:2f:c4:d1:af:e4:c4:90:
a9:da:ad:ab:81:8c:58:94:06:76:71:08:e7:60:70:
e6:6f:ce:d7:48:43:1e:ed:e4:0b:24:e4:d3:3c:96:
b2:bd:18:20:2c:97:47:7e:83:4c:7b:04:96:96:69:
4e:32:9d:34:d2:28:21:f5:85:b5:c8:af:52:c2:b2:
3a:65:f5:7f:05:64:85:6e:b4:d3:f5:c6:11:84:2f:
e1:d9:c4:9e:68:bd:25:21:26:72:2e:72:21:9f:73:
f0:12:1c:9e:c3:45:22:dd:b1:fe:d5:0b:e5:06:56:
f4:2a:c3:fe:56:64:10:75:98:73:e4:00:6a:e8:9f:
2b:c3:5b:aa:94:b6:a1:10:c7:84:b8:60:7d:bb:40:
6e:c4:43:ce:31:13:19:c6:9a:af:d2:ac:96:e0:8b:
9a:48:81:5c:52:51:53:cd:23:f9:8c:a3:d0:16:4f:
7e:be:0b:59:8f:2e:bc:08:c1:c7:38:56:47:41:5f:
3c:6b:42:20:a1:57:50:a0:33:31:52:25:ae:01:3d:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:7D:66:39:2E:95:49:0C:A1:99:53:BF:B6:DD:37:E1:61:A7:32
X509v3 Authority Key Identifier:
keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f5:59:d9:76:a4:91:bb:39:94:99:ce:4a:54:e5:a4:5d:0b:
ca:13:64:8c:0a:a3:34:38:8f:2a:1b:c6:64:72:4f:21:01:fb:
2d:47:63:1c:7a:83:18:e1:a9:46:c6:0a:ca:02:83:ce:45:ac:
a7:e3:9c:d7:af:2e:2a:9c:94:18:3e:5d:02:13:7c:26:2a:40:
85:0b:e9:7c:cf:34:10:d0:42:0f:48:7b:a7:ae:44:64:43:86:
ab:d8:f1:32:05:f7:cd:be:f5:df:78:eb:5c:1e:76:83:4f:1f:
aa:d7:70:3b:24:4f:45:78:97:4e:e5:7d:b2:ea:e3:fa:43:c9:
69:a9:3e:92:67:ba:36:af:4e:a5:4e:66:c3:b1:0a:de:db:09:
84:97:e9:28:3a:95:1d:38:22:5f:5f:d4:18:c2:32:1f:3c:d0:
f0:b6:da:73:b1:f8:7a:4f:06:04:5b:7d:ff:6c:45:53:c1:1d:
e0:23:07:49:ec:9d:ab:17:84:b5:05:a7:0a:49:1f:84:42:39:
2f:fa:bb:5b:ca:5a:14:15:29:a1:f3:f7:a9:f0:ae:cf:98:5b:
dd:b0:01:8a:3b:5f:21:2e:1b:76:b7:37:58:4f:2d:43:ab:99:
db:21:22:35:63:84:8b:73:55:bd:77:aa:8f:13:14:62:cb:e6:
3b:d2:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:23:21 2026 by rpki-client