
Error: rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
File: 6295613937297D5F10674AC45D3ACAB7545474C7.mft (raw, json)
Hash identifier: sO7cGNSB4Vv1LCLrbwp+//LOX/WcxkyWJhs08VjiweM=
Subject key identifier: 1F:66:78:30:76:CC:A0:15:CE:A5:06:E6:91:39:C3:59:0D:E2:DA:71
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Certificate issuer: /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial: 2BA2174001A1C3BF25F027D6DB17A79CBC3ED6E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
Manifest number: 0405
Signing time: Sat 17 Oct 2026 10:43:23 +0000
Manifest this update: Sat 17 Oct 2026 10:38:23 +0000
Manifest next update: Sun 18 Oct 2026 13:04:23 +0000
Files and hashes: 1: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: /4fWziM9U3nSmPZfElZTP8yOZy+fUtdGWWJ2QyWcDoA=)
2: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: g3okiz+2/0bL2vB6BSWdwfxNP+lWUYkW1h1TDK3da/c=)
3: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: lEf3nD38rzvArDc679LvkbZXO4qLP9HX/TVtFey+paA=)
4: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: gw2kr8iqC2erMFHK8E4vmWOtw1TP0lHRX0o/CnJ8QUI=)
5: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: VP6/e/nSazzAd3NSpgJsMRQi3AVLS8uz2+P6rpSOKnQ=)
6: 6295613937297D5F10674AC45D3ACAB7545474C7.crl (hash: GYAPmbxbJ5e662oMvaEctA3xOP5MhIZ3rEx27b2BwrE=)
7: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: 2CT1TO4QjqGBz/WOvyMPoesL2w/fqtFMGSzr1NvhqiM=)
8: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: +7Jjrw9LTrceEbHh8Jj+E2YrvPalObU6+roW77Z/+cs=)
9: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: 3PT21yrRFXoWY+Lj38++Fa++0QLs7YZDxWRp/vVTEDs=)
10: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: 1CpLJgBZ+6FadzIOEkLyZf4imc+8bSemfgOHonLEeNk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 13:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a2:17:40:01:a1:c3:bf:25:f0:27:d6:db:17:a7:9c:bc:3e:d6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
Validity
Not Before: Oct 17 10:38:23 2026 GMT
Not After : Oct 18 13:04:23 2026 GMT
Subject: CN=1F66783076CCA015CEA506E69139C3590DE2DA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:95:44:b8:b3:85:6c:c6:3b:91:48:86:4c:
ae:86:6d:32:2b:af:54:05:ed:46:0d:2e:47:a6:12:
8f:8d:69:d3:a4:ea:34:41:c0:5b:4f:8d:9a:25:04:
e7:61:eb:07:b7:0c:7d:5e:cd:f5:4a:05:4b:2e:07:
c1:be:ba:89:b8:56:ae:f8:d4:b6:be:f3:79:73:7f:
8e:ea:79:9b:28:8b:aa:0f:7d:77:6b:05:33:62:c2:
f6:b6:d8:fa:88:b2:05:5c:c4:eb:3c:ab:99:9c:8d:
d7:50:9c:7b:49:b8:1d:c7:03:89:c7:a7:a6:1d:d3:
95:21:64:89:4f:ed:54:a8:bf:fc:da:7e:ef:3b:44:
2f:f2:94:37:b9:90:3c:1b:21:dc:ec:a3:72:06:f5:
ba:d6:76:b1:17:bd:14:ab:b3:40:a9:07:63:be:05:
5f:02:c2:74:64:d1:f7:1d:5f:86:2d:30:8d:1d:9d:
cd:47:6c:86:f6:bc:93:1a:5c:b8:66:10:bb:5e:2f:
13:69:84:37:f4:a5:6d:1c:75:b1:60:43:75:50:3c:
f0:b4:bb:a5:a6:0c:d4:7e:25:b5:26:14:7f:a4:ca:
6d:48:72:d4:d0:e3:a3:e7:de:63:d1:f6:4a:06:11:
bd:af:8f:f5:51:68:2e:36:2f:ac:ed:21:cd:43:af:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:78:30:76:CC:A0:15:CE:A5:06:E6:91:39:C3:59:0D:E2:DA:71
X509v3 Authority Key Identifier:
keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:eb:74:ed:8b:20:11:16:db:a2:c0:89:1c:27:e6:4f:a6:80:
cd:41:e5:c5:04:1a:20:c0:88:ff:28:c3:b3:15:1e:d4:ab:d6:
76:00:d0:30:83:23:49:58:ef:68:e3:5d:3c:b0:72:79:30:99:
02:fa:61:41:af:26:e3:af:f4:33:3b:f4:1d:7f:1b:7f:39:3a:
36:f9:ed:09:7c:43:db:89:0c:11:c8:f7:20:b8:ea:79:d7:6f:
15:35:4f:eb:58:bb:5b:0e:41:3d:4b:a3:70:83:23:22:d7:a5:
a5:5d:43:91:0d:51:1f:2c:2b:ef:42:ca:45:53:db:c3:47:4a:
60:56:74:80:60:63:a5:a4:99:d6:a5:04:77:5c:e4:5f:01:57:
e7:15:62:cd:56:29:d3:b5:c3:15:eb:c0:16:3f:e2:b1:c5:7f:
a6:f8:62:f8:39:3d:8e:cd:c0:b6:a9:d6:9a:ed:39:fc:df:b1:
62:36:a2:c7:10:fb:ce:c9:07:b5:fe:42:7a:a0:2b:a1:5a:f1:
25:6d:b9:78:f0:a5:65:84:db:d1:ae:8e:2a:80:be:29:c0:62:
fa:94:0d:f6:83:07:45:71:8e:5d:f2:ef:d6:db:bf:d4:dc:f3:
6c:58:e6:02:fe:da:fb:1c:d9:02:e0:2a:e8:f9:ab:63:35:c4:
d5:a9:c4:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK6IXQAGhw78l8CfW2xennLw+1ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNjEwMTcxMDM4MjNaFw0yNjEwMTgxMzA0MjNaMDMxMTAvBgNV
BAMTKDFGNjY3ODMwNzZDQ0EwMTVDRUE1MDZFNjkxMzlDMzU5MERFMkRBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh75VEuLOFbMY7kUiGTK6GbTIr
r1QF7UYNLkemEo+NadOk6jRBwFtPjZolBOdh6we3DH1ezfVKBUsuB8G+uom4Vq74
1La+83lzf47qeZsoi6oPfXdrBTNiwva22PqIsgVcxOs8q5mcjddQnHtJuB3HA4nH
p6Yd05UhZIlP7VSov/zafu87RC/ylDe5kDwbIdzso3IG9brWdrEXvRSrs0CpB2O+
BV8CwnRk0fcdX4YtMI0dnc1HbIb2vJMaXLhmELteLxNphDf0pW0cdbFgQ3VQPPC0
u6WmDNR+JbUmFH+kym1IctTQ46Pn3mPR9koGEb2vj/VRaC42L6ztIc1DryurAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUH2Z4MHbMoBXOpQbmkTnDWQ3i2nEwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUxTTEvMC82
Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv+t07YsgERbbosCJHCfmT6aAzUHlxQQaIMCI/yjDsxUe1KvWdgDQMIMjSVjv
aONdPLByeTCZAvphQa8m46/0Mzv0HX8bfzk6NvntCXxD24kMEcj3ILjqeddvFTVP
61i7Ww5BPUujcIMjItelpV1DkQ1RHywr70LKRVPbw0dKYFZ0gGBjpaSZ1qUEd1zk
XwFX5xVizVYp07XDFevAFj/iscV/pvhi+Dk9js3AtqnWmu05/N+xYjaixxD7zskH
tf5CeqAroVrxJW25ePClZYTb0a6OKoC+KcBi+pQN9oMHRXGOXfLv1tu/1NzzbFjm
Av7a+xzZAuAq6PmrYzXE1anEuA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:53:01 2026 by rpki-client