
Error: rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
File: 558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft (raw, json)
Hash identifier: YL4AXck50pSrQdcJjwmojrjwXJEeuZ5O6GK9P9tS2rI=
Subject key identifier: 0D:0A:89:74:25:D7:54:5B:B3:DA:D8:D8:52:80:BD:FC:6E:FA:AD:B7
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Certificate issuer: /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial: 0826E11E41DFCF6310E1580C57E681D0094C7ADD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
Manifest number: 04CE
Signing time: Mon 12 Oct 2026 23:50:00 +0000
Manifest this update: Mon 12 Oct 2026 23:45:00 +0000
Manifest next update: Wed 14 Oct 2026 03:41:00 +0000
Files and hashes: 1: 323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (hash: Uf71+lIsdCx07jQByeTOzoC0A0Pw6aqC3AHT0El2VYQ=)
2: 34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (hash: ztBaO7SBjn8vfl+b8JbsrC6RvY/0WOFFarII8OlE82w=)
3: 34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (hash: OikAajYHOgRQNN8Auq4mxDBhJi3Cv5L79UfBlzQx9i4=)
4: 34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (hash: HaQEk7lOgs6GsPLMsAvaGEB6sc5wH9Na9Nw0lrcf4JI=)
5: 558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl (hash: W+pBrceqtiLczlNEKUC4ReTKckumRcqaL49sdbhGl+I=)
6: 34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (hash: ooUArFI7jD46Qywa7B/KeTAi5gPxVr/PYbEZk/qz0IY=)
7: 34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (hash: LMzzrhzmAUlfsBEa68CgBpfRVLprrk9pmGbQqR2nIvY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 03:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:26:e1:1e:41:df:cf:63:10:e1:58:0c:57:e6:81:d0:09:4c:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Validity
Not Before: Oct 12 23:45:00 2026 GMT
Not After : Oct 14 03:41:00 2026 GMT
Subject: CN=0D0A897425D7545BB3DAD8D85280BDFC6EFAADB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:29:db:27:ca:3a:40:41:c1:b4:73:f6:ca:
6c:c0:1a:e1:68:90:a1:09:8d:ee:8f:b0:f4:0d:01:
24:38:de:9d:41:2e:e4:0e:83:38:61:db:b2:d3:3f:
39:0e:1a:c0:f3:95:4f:90:c4:03:f8:64:86:8d:30:
8a:bd:5a:c8:7a:c8:6f:f1:c3:b9:01:6b:55:ed:ef:
15:4e:34:54:c9:0f:15:06:97:cc:c3:6b:c7:36:8a:
d1:32:ac:9f:02:c6:52:f8:8b:54:54:ae:42:b0:78:
99:85:11:e6:39:3e:6c:0f:03:36:27:52:41:38:69:
3d:fc:43:c0:2a:6a:fa:21:53:6a:54:73:90:3b:be:
92:2c:f0:d4:99:b6:61:40:4a:95:09:33:a8:0a:df:
e3:87:9e:30:63:54:37:73:04:5e:6b:d8:c0:d7:c7:
4e:a6:b1:27:8f:24:f8:63:b1:29:75:9c:14:97:26:
5a:a1:6a:49:8e:04:0c:31:05:55:e0:80:22:71:11:
ea:1a:13:c7:5a:d2:7f:fd:63:5b:b5:7a:e3:8e:04:
e9:cb:2d:c7:c0:2f:7f:91:ec:08:fe:2d:c9:0d:80:
af:15:95:a4:16:cc:04:b9:60:9e:76:7a:3f:2f:a6:
9f:85:c7:5a:e3:b8:92:66:d7:32:d2:11:48:46:29:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:89:74:25:D7:54:5B:B3:DA:D8:D8:52:80:BD:FC:6E:FA:AD:B7
X509v3 Authority Key Identifier:
keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:2c:e0:3c:f3:38:b7:b2:6c:e1:54:b4:d3:81:01:78:0f:
11:8f:1b:f0:a7:e4:83:7c:f1:01:b6:15:69:70:ce:73:bc:18:
2e:84:cb:26:41:35:ba:e9:78:0b:cf:de:3c:34:8b:5d:65:52:
78:80:67:78:d5:11:fb:c6:27:50:a0:17:53:b9:5d:29:e5:28:
9b:7c:6b:3b:a1:b1:fb:3a:51:a4:9e:9d:58:c3:62:b8:a3:ac:
56:67:44:5a:98:9c:3c:ae:08:6d:83:f1:92:eb:3c:c4:07:c9:
6b:c0:4a:58:70:9d:86:9e:9d:a3:30:b7:83:cb:1b:32:8a:37:
40:43:2c:a0:5d:40:3e:3b:9d:09:10:19:10:60:fc:75:0e:76:
f2:b5:69:c3:38:93:cd:fa:81:c3:70:63:2f:6f:15:9b:04:31:
cc:84:a2:36:d5:c5:f1:ea:45:8e:9f:33:34:1a:dd:f2:1f:77:
a1:3b:67:a9:5b:0b:fa:68:ef:2f:d6:bf:9c:3f:67:30:77:7d:
96:32:2e:8c:89:13:9d:36:30:53:d4:13:a6:5f:35:0d:54:4a:
47:d1:10:b1:cb:4c:80:62:5c:7f:fe:66:ae:6f:00:f8:c9:02:
ac:02:ea:93:00:33:83:05:94:5b:30:34:0a:3d:77:34:02:e1:
c5:ff:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:30:11 2026 by rpki-client