
Error: rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
File: 5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft (raw, json)
Hash identifier: BgawdrS3nD42KI6grO3RG31QgCsv67wHII3JkEpiNIY=
Subject key identifier: 9C:B9:86:B7:59:48:2D:25:4D:45:DB:F7:F8:F1:4F:75:DC:B6:D3:91
Authority key identifier: 5C:33:26:97:D0:37:11:E9:A5:CB:FE:9E:45:C4:8A:02:9F:3A:7B:5F
Certificate issuer: /CN=5C332697D03711E9A5CBFE9E45C48A029F3A7B5F
Certificate serial: 15F80C5C7F7D8F5877766781151159FC2F46D8CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
Manifest number: 31
Signing time: Wed 14 Oct 2026 14:09:11 +0000
Manifest this update: Wed 14 Oct 2026 14:04:11 +0000
Manifest next update: Thu 15 Oct 2026 16:38:11 +0000
Files and hashes: 1: 5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl (hash: k0MVEianqW3ZvBcIgZxCuDuub6/O8lfQD2778LiCuWU=)
2: 323830343a386537343a3a2f33322d3332203d3e20323733343236.roa (hash: F2YeJJuXvKOeLhuTYdY8880PogQ1ADAUg0Lx0W25dvY=)
3: 323830343a386537343a343030303a3a2f34342d3434203d3e20323733343236.roa (hash: 1VDPE5LC8d/vE9gFnPDSCwbYjZQlU63lleppedFR/wA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl
rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 16:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f8:0c:5c:7f:7d:8f:58:77:76:67:81:15:11:59:fc:2f:46:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C332697D03711E9A5CBFE9E45C48A029F3A7B5F
Validity
Not Before: Oct 14 14:04:11 2026 GMT
Not After : Oct 15 16:38:11 2026 GMT
Subject: CN=9CB986B759482D254D45DBF7F8F14F75DCB6D391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:6f:fb:84:35:31:84:3b:f1:88:67:2c:39:
4d:02:77:b3:b7:4e:a7:9e:8e:6c:89:e9:78:38:96:
6c:b0:a2:0b:27:3f:07:c1:97:62:68:50:4d:25:fc:
7c:82:bf:a9:a8:9e:02:da:0e:af:de:ca:22:41:25:
71:af:74:7e:67:2a:cd:b7:ea:6f:8f:53:4e:b2:55:
c3:b2:9d:91:0f:d6:c5:ff:9c:f1:36:a0:3c:67:ab:
69:3a:ea:91:b8:75:01:df:a1:52:85:bc:17:0d:ad:
3e:d2:54:07:ec:b5:f2:43:2b:f4:41:b9:d3:0e:22:
e0:4d:9f:fe:94:4c:1d:10:3d:4b:76:44:15:b2:9e:
65:7e:d6:32:9e:4d:03:18:60:5a:9b:6b:2d:94:71:
d7:4e:7c:83:4f:3c:78:31:26:f9:06:23:a5:1a:3b:
df:b3:92:ea:30:d9:5c:dc:ba:7d:2d:62:fc:7b:5b:
6d:3c:10:60:2a:d3:17:b5:08:f3:36:53:ae:48:2e:
de:c6:70:99:e4:d4:ff:fe:f4:18:7f:b2:e3:ea:79:
0f:27:95:71:1e:47:0b:9d:ee:9f:f9:bd:24:52:01:
ac:37:28:ff:37:e1:4a:38:4f:56:8c:eb:31:31:0b:
86:a8:3a:c0:7e:fb:3d:6d:db:45:a1:c6:c9:ee:a6:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B9:86:B7:59:48:2D:25:4D:45:DB:F7:F8:F1:4F:75:DC:B6:D3:91
X509v3 Authority Key Identifier:
keyid:5C:33:26:97:D0:37:11:E9:A5:CB:FE:9E:45:C4:8A:02:9F:3A:7B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5mwMVsggEToFshs5oYyMtuyL8bFnJMqDoUCRahijwgiJ/0/5C332697D03711E9A5CBFE9E45C48A029F3A7B5F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e9:52:4f:ff:2d:7a:53:49:5e:70:c8:0b:b3:02:1f:bf:95:
4d:f7:e3:7d:9e:c3:89:92:b5:b9:9f:38:0a:75:39:9f:f2:70:
1f:24:b3:6f:2a:e0:4e:83:51:12:7e:c0:fc:13:aa:2f:e2:67:
24:e2:39:c9:1c:a8:d5:8f:32:2d:f9:4b:96:d7:ba:d4:8e:0d:
8a:b3:2c:a0:e7:31:6f:85:b7:23:5d:36:38:d5:8c:38:51:51:
93:f7:35:31:8d:9f:26:d4:e4:a2:cc:08:9e:91:00:34:85:4c:
ba:3a:e1:21:d5:07:da:9d:f7:0b:51:3e:ad:34:71:08:fa:42:
64:58:73:fc:b3:01:5b:8d:f1:13:b9:34:45:37:ee:36:82:55:
b9:4f:f3:4b:1d:98:16:b9:21:61:b9:0e:95:31:2f:96:0a:fa:
22:8f:af:02:d6:3a:8f:b1:79:d1:5b:21:91:cd:7e:ca:15:80:
97:87:a2:f5:d5:9e:8b:8d:42:d6:a5:1e:f4:6f:b7:f4:28:b4:
af:48:71:a3:45:db:87:dc:d4:26:08:42:d8:35:82:8e:39:50:
4d:fa:48:f3:c9:0b:c3:99:f0:dc:5a:ad:e0:9a:74:11:b2:ff:
37:be:36:d3:f2:ed:bf:e3:6d:73:79:37:b5:88:fc:46:8b:19:
8d:4b:5e:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFfgMXH99j1h3dmeBFRFZ/C9G2MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMzMzI2OTdEMDM3MTFFOUE1Q0JGRTlFNDVDNDhBMDI5
RjNBN0I1RjAeFw0yNjEwMTQxNDA0MTFaFw0yNjEwMTUxNjM4MTFaMDMxMTAvBgNV
BAMTKDlDQjk4NkI3NTk0ODJEMjU0RDQ1REJGN0Y4RjE0Rjc1RENCNkQzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1m/7hDUxhDvxiGcsOU0Cd7O3
TqeejmyJ6Xg4lmywogsnPwfBl2JoUE0l/HyCv6mongLaDq/eyiJBJXGvdH5nKs23
6m+PU06yVcOynZEP1sX/nPE2oDxnq2k66pG4dQHfoVKFvBcNrT7SVAfstfJDK/RB
udMOIuBNn/6UTB0QPUt2RBWynmV+1jKeTQMYYFqbay2UcddOfINPPHgxJvkGI6Ua
O9+zkuow2Vzcun0tYvx7W208EGAq0xe1CPM2U65ILt7GcJnk1P/+9Bh/suPqeQ8n
lXEeRwud7p/5vSRSAaw3KP834Uo4T1aM6zExC4aoOsB++z1t20WhxsnupkmFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnLmGt1lILSVNRdv3+PFPddy205EwHwYDVR0j
BBgwFoAUXDMml9A3Eemly/6eRcSKAp86e18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW13TVZzZ2dFVG9Gc2hzNW9ZeU10dXlMOGJGbkpNcURvVUNSYWhpandn
aUovMC81QzMzMjY5N0QwMzcxMUU5QTVDQkZFOUU0NUM0OEEwMjlGM0E3QjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMzMyNjk3RDAzNzExRTlB
NUNCRkU5RTQ1QzQ4QTAyOUYzQTdCNUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NW13TVZzZ2dFVG9Gc2hzNW9ZeU10dXlMOGJGbkpNcURvVUNSYWhpandnaUovMC81
QzMzMjY5N0QwMzcxMUU5QTVDQkZFOUU0NUM0OEEwMjlGM0E3QjVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiulST/8telNJXnDIC7MCH7+VTffjfZ7DiZK1uZ84CnU5n/JwHySzbyrgToNR
En7A/BOqL+JnJOI5yRyo1Y8yLflLlte61I4NirMsoOcxb4W3I102ONWMOFFRk/c1
MY2fJtTkoswInpEANIVMujrhIdUH2p33C1E+rTRxCPpCZFhz/LMBW43xE7k0RTfu
NoJVuU/zSx2YFrkhYbkOlTEvlgr6Io+vAtY6j7F50Vshkc1+yhWAl4ei9dWei41C
1qUe9G+39Ci0r0hxo0Xbh9zUJghC2DWCjjlQTfpI88kLw5nw3Fqt4Jp0EbL/N742
0/Ltv+Ntc3k3tYj8RosZjUteQA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:51:35 2026 by rpki-client