
Error: rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
File: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft (raw, json)
Hash identifier: oQ4SBSQ8eDrqtX8PgH5FncgOxOis3apPcUZ3dGhh2yg=
Subject key identifier: F8:D0:6F:0F:FB:89:33:A4:E6:13:6A:BF:14:92:1E:8C:66:3E:74:A5
Authority key identifier: 5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
Certificate issuer: /CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Certificate serial: 7B13F2472EEAF93A064E65F6EFE26892584A856E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
Manifest number: 04AA
Signing time: Sat 17 Oct 2026 13:09:05 +0000
Manifest this update: Sat 17 Oct 2026 13:04:05 +0000
Manifest next update: Sun 18 Oct 2026 15:55:05 +0000
Files and hashes: 1: 323830343a336263383a3a2f33322d3438203d3e20323636313730.roa (hash: ucXbh/u1zPDU79FmgBycIt4MKYcl4AplXJNxCK2uUe4=)
2: 5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl (hash: ZotDepc72N4JuVJdLtv8I5Qhqho/yzuBbs+85GcXFNQ=)
3: 34352e362e3137362e302f32322d3234203d3e20323636313730.roa (hash: xxRR51jy1S6wMvDsQVfnoFLzt8GVsHrVSmjy2p5ahYI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 15:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:13:f2:47:2e:ea:f9:3a:06:4e:65:f6:ef:e2:68:92:58:4a:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A85B3827E19AAE0B52BB06C21609C54CE16BF8C
Validity
Not Before: Oct 17 13:04:05 2026 GMT
Not After : Oct 18 15:55:05 2026 GMT
Subject: CN=F8D06F0FFB8933A4E6136ABF14921E8C663E74A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:70:2c:11:00:c3:4b:9e:14:85:fa:3f:e2:
7d:bf:13:a5:26:07:07:81:5d:44:cd:da:15:af:e4:
d7:bc:fc:6f:e1:fc:ee:c8:ef:29:69:b5:b0:c7:ba:
b0:96:e3:22:64:90:4d:36:73:ae:48:e6:3a:a2:0c:
04:b4:05:5b:55:ab:ee:7b:62:1d:43:e0:98:08:6e:
67:cb:fa:79:c3:82:76:b2:d0:a2:84:09:8f:99:db:
c2:fe:ea:30:b0:2f:97:b6:b7:3c:7c:c0:32:6c:25:
c0:5e:c9:67:ec:89:1a:e8:18:1f:25:68:50:fb:e1:
6d:4e:95:54:b8:51:f8:f6:5d:68:60:a0:2a:7c:8c:
b2:02:0d:7f:fc:ea:7b:60:34:60:32:89:3e:4b:d5:
9b:06:c5:ed:da:6a:3b:cb:42:d7:82:56:79:6d:9d:
d4:7f:40:b7:a6:6e:9c:fc:44:b6:15:df:2f:fb:75:
99:84:d2:0c:d5:eb:f0:e8:2e:cb:7f:42:45:41:73:
9b:c0:23:82:3c:f0:49:e1:ed:9a:97:39:a0:0d:e9:
8b:07:67:a5:83:eb:5d:85:b5:4a:a6:12:19:fc:04:
92:7c:f4:1d:28:90:3b:09:78:a8:07:0a:5b:dd:ca:
5d:7d:9a:0c:56:95:ac:cc:6a:a1:05:13:cf:b9:e3:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:6F:0F:FB:89:33:A4:E6:13:6A:BF:14:92:1E:8C:66:3E:74:A5
X509v3 Authority Key Identifier:
keyid:5A:85:B3:82:7E:19:AA:E0:B5:2B:B0:6C:21:60:9C:54:CE:16:BF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/0/5A85B3827E19AAE0B52BB06C21609C54CE16BF8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:87:2b:7d:c3:44:44:46:86:29:5f:59:f3:12:c9:ad:ac:
20:31:07:8c:3e:ca:19:82:99:50:79:dd:12:85:d8:7d:19:84:
40:fb:9b:7a:38:ad:82:30:82:58:da:31:26:a0:bb:d2:a6:bb:
b8:66:94:76:04:ff:82:e7:a9:8c:07:86:05:b9:70:fc:0f:e5:
66:af:9a:19:19:ca:ae:9e:24:45:12:36:cf:59:8c:dc:17:c8:
22:4c:b9:d1:87:1d:51:13:39:54:dc:3e:00:a9:b5:9d:16:99:
13:89:9f:59:34:be:fe:0f:ac:1a:b9:60:a5:ac:b7:b0:83:a0:
c6:c6:cb:da:a7:7a:06:ac:47:35:c6:68:47:d7:44:bc:65:74:
30:28:0b:df:a0:ee:db:7e:12:d8:99:05:c6:80:cf:a6:a8:50:
31:51:34:96:32:3f:e4:c8:fd:1f:2b:9b:d6:89:cb:7d:1e:81:
cb:09:dc:60:81:32:bd:b8:17:61:d1:02:3d:58:de:94:fe:9b:
36:b3:0f:e3:1f:7a:9a:f1:44:80:77:aa:c8:0a:4b:42:fd:92:
75:ca:54:28:01:e0:dd:c9:66:fb:1c:41:0a:79:69:8c:2a:48:
34:64:15:59:e3:85:82:92:e9:e9:e1:f2:73:bf:3c:03:8b:05:
92:a0:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:46:19 2026 by rpki-client