
Error: rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
File: 4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft (raw, json)
Hash identifier: TW+L+8prQpR1F0GI6/4+l7/+CxFLHLVpoDq7Ezq0MPA=
Subject key identifier: F3:7C:78:1C:6B:E2:25:06:F1:76:06:B3:06:5E:B7:AC:1B:16:C0:45
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Certificate issuer: /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial: 20336CF976E771205884CEA3479CA4C29FD7E688
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
Manifest number: 0570
Signing time: Sat 17 Oct 2026 16:40:00 +0000
Manifest this update: Sat 17 Oct 2026 16:35:00 +0000
Manifest next update: Sun 18 Oct 2026 16:40:00 +0000
Files and hashes: 1: 323830343a373165633a3a2f33322d3334203d3e20323730383230.roa (hash: qzFC8Gk3equw9247bE06DSyL4so4QLyWewLu6GlVxDw=)
2: 4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl (hash: DbYfk0vxzabzX+AAiPwufddxV6otFAVTFJlDuamt1qQ=)
3: 3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (hash: 0mzZARCgbhLak1lhuxRoxw5uXq1d53ugNB7tCj+aPaA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 16:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:33:6c:f9:76:e7:71:20:58:84:ce:a3:47:9c:a4:c2:9f:d7:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Validity
Not Before: Oct 17 16:35:00 2026 GMT
Not After : Oct 18 16:40:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:73:b3:ee:75:b6:03:2e:d8:d1:5d:fa:93:
e6:f4:29:96:fd:a3:e3:50:1e:89:93:3d:95:fb:5b:
12:2a:20:55:48:a9:a5:05:21:98:6f:a9:d7:c6:19:
a2:42:e8:03:3c:77:b8:6c:7e:4a:c5:05:82:a0:75:
37:e1:7e:8c:97:17:73:d2:e1:50:93:92:64:ca:bc:
74:11:f3:36:c7:7d:8c:b5:a9:c9:00:50:48:a4:81:
e5:10:bb:6e:39:8e:b9:3a:b0:48:7f:b7:d4:9c:19:
38:f9:3c:40:79:c7:0e:ba:e0:2a:e1:db:13:3d:00:
09:0d:46:93:98:2c:77:78:46:7d:5e:f5:b5:f0:f2:
4d:8b:fc:0d:3f:51:a8:32:5e:95:1f:27:db:ee:52:
45:b9:fb:e4:fc:57:54:cc:b6:bd:be:77:32:93:b7:
55:03:f7:dc:26:c5:0b:c7:2d:37:cd:d1:2e:06:10:
82:c2:01:6b:1c:11:ba:5b:a4:f5:76:9c:83:30:90:
03:13:fa:49:c1:f7:d3:92:00:8f:8c:44:63:60:f1:
15:0e:3a:5b:16:31:61:6b:8c:9c:58:eb:d8:1a:51:
01:b5:71:6b:a4:09:95:9d:15:98:16:d0:ee:24:79:
8d:05:a1:4c:b6:0e:35:a1:fe:6b:36:e3:51:a0:2b:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:78:1C:6B:E2:25:06:F1:76:06:B3:06:5E:B7:AC:1B:16:C0:45
X509v3 Authority Key Identifier:
keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f4:d5:50:8f:9e:93:0c:05:fe:60:dc:53:39:3e:64:54:18:
65:b0:50:de:2e:57:9d:17:19:80:c7:e7:de:1e:ce:c0:9a:a1:
11:e0:38:40:81:07:80:2b:ce:38:6e:5a:53:0e:99:c8:47:ed:
53:09:73:e4:7d:38:18:8b:f5:a5:1a:0e:bb:3c:71:f0:c8:5c:
bb:7d:c7:c6:c4:9b:23:32:42:50:7f:d3:76:6f:c6:52:e4:33:
64:3a:2a:c0:00:b1:2b:2b:eb:0d:5b:54:e5:70:8d:b9:df:e3:
22:08:25:26:02:9b:fe:50:22:dd:44:94:53:a6:64:6c:f7:d4:
d2:a4:5f:e4:c0:75:25:ed:8b:46:5e:c3:5d:b0:82:49:cb:42:
32:f9:49:95:ab:0e:14:03:7a:cd:c8:45:11:78:71:5d:80:eb:
96:dc:91:62:8c:0f:e5:58:99:41:69:54:ca:18:11:01:df:98:
a5:ec:18:fe:51:d1:c6:8b:ef:83:a7:0b:54:21:4d:dd:fa:92:
ec:d2:be:c7:a4:0d:aa:ce:19:47:89:02:29:d6:19:61:77:d3:
ca:9c:42:71:b0:dd:00:5f:ce:89:97:b2:2e:89:6d:d0:a9:ac:
b6:17:ac:1b:b3:83:dd:90:71:41:c9:6e:ac:05:43:b0:da:13:
a4:3a:5f:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:24:40 2026 by rpki-client