
Error: rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
File: C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft (raw, json)
Hash identifier: 5/MQsZdjgbiV7rsGKesxkmacsDVsQ04QusmP4b1CoAk=
Subject key identifier: 96:82:0A:DD:BF:FA:A6:AD:3F:74:45:BC:76:CC:23:FB:51:D8:44:FF
Authority key identifier: C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69
Certificate issuer: /CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
Certificate serial: 6C10D7B0F1407198BC6E756A952C12C38BDD4AF0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
Manifest number: 013C
Signing time: Sun 01 Nov 2026 04:08:28 +0000
Manifest this update: Sun 01 Nov 2026 04:03:28 +0000
Manifest next update: Mon 02 Nov 2026 07:28:28 +0000
Files and hashes: 1: 323830343a373964633a3a2f33322d3332203d3e20323731333332.roa (hash: SAFT+N+rNHh+iObkyZm9fu631KeRVOtBjTBnWBAq3ow=)
2: C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl (hash: rFYhoEeHRnA2NxLuDDJk7uuxsXpD5y3gWZ7jcN/zX50=)
3: 3230302e342e3131322e302f32342d3234203d3e20323731333332.roa (hash: SclR7jTY5+hknjjOMHHp/801rwcJ7Y9KwjLE0V1noIk=)
4: 3230302e342e3131332e302f32342d3332203d3e20323731333332.roa (hash: QkzMBD31USaF+OnUuAfg3IZu/L6GJ6HSc3VBge36gf8=)
5: 3230302e342e3131342e302f32342d3234203d3e20323731333332.roa (hash: Fi1adxzVSDydSMEsPld3pJ2pSeet0X3aZtRxvN+PT8g=)
6: 3230302e342e3131352e302f32342d3234203d3e20323731333332.roa (hash: 0t9bojsvU/HLVT3hLi4c7UaDaxo4OQAGSGuaYTMsRD0=)
7: 3230302e342e3131332e302f32342d3234203d3e20323731333332.roa (hash: ebP6g11nfp+jENozSIjo20CNAySLwV/9emqOCw4hFFc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl
rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 07:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:10:d7:b0:f1:40:71:98:bc:6e:75:6a:95:2c:12:c3:8b:dd:4a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
Validity
Not Before: Nov 1 04:03:28 2026 GMT
Not After : Nov 2 07:28:28 2026 GMT
Subject: CN=96820ADDBFFAA6AD3F7445BC76CC23FB51D844FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:93:05:ad:cb:54:26:15:3a:ee:e0:a4:5f:
9a:d2:94:0d:80:92:1f:67:ea:18:af:5d:dc:43:82:
e2:87:2c:50:00:0a:99:14:72:13:82:4a:54:ba:4b:
e8:99:36:f9:22:31:c3:5a:ce:21:ab:cd:17:80:f3:
05:9b:43:98:d4:b9:01:3f:9c:7e:01:3c:45:c9:5b:
6e:42:57:1b:03:15:f2:4b:62:b4:e2:e5:c7:37:f0:
31:68:e9:dc:7f:96:ea:b5:cc:b2:bb:ad:fb:54:06:
6c:52:f0:e2:42:06:5f:ee:7d:4a:41:f4:c6:53:ea:
13:88:d2:ca:74:fc:fe:76:b1:f8:45:41:44:51:23:
ea:3f:7a:58:4d:6b:4f:3b:a3:55:ce:b0:87:e3:6a:
b2:8b:1e:cc:11:29:c3:6e:cd:53:be:29:24:67:48:
d0:16:be:c0:ca:75:8c:70:e6:14:35:29:fc:0b:90:
13:5f:92:29:4e:66:4f:1d:32:17:75:bb:52:8a:10:
9c:d7:d1:70:c7:64:fd:97:e0:14:e6:a3:bf:c8:08:
69:d4:14:a7:e3:c2:c4:5a:25:e0:db:cc:a6:f4:e0:
97:d0:c6:bf:81:f2:db:f7:66:8d:74:a1:42:e1:fb:
ae:db:6c:ae:44:c7:49:e9:7f:23:dc:2e:f5:6e:cb:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:0A:DD:BF:FA:A6:AD:3F:74:45:BC:76:CC:23:FB:51:D8:44:FF
X509v3 Authority Key Identifier:
keyid:C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c7:2c:43:1d:c4:8c:3c:1a:ce:fa:e5:bc:c0:0b:53:36:70:
fe:7c:3c:e8:34:b7:d8:d0:b1:f1:f8:dd:dd:d0:1e:ea:99:c6:
f6:56:ff:84:9f:c5:db:fb:ed:13:dd:89:90:d6:6b:4a:f2:86:
87:fe:f5:10:06:bc:06:e2:3e:e4:ea:95:60:0c:df:2c:4f:cd:
1b:e8:35:0c:32:ef:ce:18:3a:7e:bf:39:ce:47:1c:b0:5d:2e:
f4:ea:b0:2c:bd:5f:84:0e:92:ea:4f:0f:60:24:54:79:ff:21:
6d:e4:84:60:d5:4a:d7:69:87:c7:e2:a8:b5:2b:dd:73:94:d0:
a3:b5:89:95:45:6a:0c:85:c5:48:23:9c:da:53:70:a7:04:ad:
f5:77:91:9e:e5:06:34:e7:df:32:b2:b0:87:cd:8e:fa:66:0d:
07:6c:8b:c3:37:7c:42:19:80:f3:fa:21:45:47:db:51:f8:3f:
75:d3:8e:3e:de:38:85:9a:3e:51:29:0b:1a:26:37:30:7f:31:
f5:72:45:02:ca:28:f8:19:a8:bf:94:a0:3b:53:d8:03:cd:ca:
b3:f8:a8:27:b4:9c:64:b4:d9:44:24:f2:f8:fc:74:8d:d2:dd:
7a:7c:47:5b:e2:e6:c0:4e:b1:75:27:ec:bc:55:a0:fb:71:c8:
71:de:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:25:17 2026 by rpki-client