
Error: rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json)
Hash identifier: 6jMhyD6wX8kDyNXd3gvFYYkrsAzGwpadza76lCxyS80=
Subject key identifier: B2:D0:38:66:5C:B8:FB:C4:B9:09:78:DA:51:36:D4:F4:E9:EE:82:C6
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial: 6044A2BB1AD77A48A91B8FE79BC8E43CAA13B28C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
Manifest number: 04D7
Signing time: Mon 19 Oct 2026 02:38:49 +0000
Manifest this update: Mon 19 Oct 2026 02:33:49 +0000
Manifest next update: Tue 20 Oct 2026 03:22:49 +0000
Files and hashes: 1: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=)
2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: 26MwB7Zz6XnTQ+OQFzeJ2WLpvY3bkB5v7w9Ymze6KDA=)
3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 03:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:44:a2:bb:1a:d7:7a:48:a9:1b:8f:e7:9b:c8:e4:3c:aa:13:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Validity
Not Before: Oct 19 02:33:49 2026 GMT
Not After : Oct 20 03:22:49 2026 GMT
Subject: CN=B2D038665CB8FBC4B90978DA5136D4F4E9EE82C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:82:82:eb:a2:69:6d:75:2f:82:13:70:f1:
d5:35:ea:7c:0b:83:f9:56:68:7b:57:02:45:6c:51:
26:42:bf:11:d2:b2:9f:06:c7:ba:cd:fa:09:df:d8:
14:39:ae:f1:9d:98:99:13:d4:81:41:e3:8e:d4:2d:
b3:38:44:6a:cd:b6:01:eb:81:56:5b:55:19:1e:10:
71:6d:36:48:82:18:3d:1e:47:2b:0a:db:b3:50:f2:
09:1a:bc:bb:c1:d1:18:5b:88:54:29:ca:95:74:dd:
68:20:64:9d:61:b3:5d:85:c5:bd:91:03:c1:cd:8e:
3f:88:81:aa:a7:ca:ad:ec:8e:42:e9:00:f4:58:3f:
1a:5a:ec:5f:e7:ae:ef:9f:fa:bc:e3:5c:e7:c5:22:
6e:70:18:71:9e:a8:86:43:9b:2d:67:7c:53:c3:68:
f7:b1:db:50:f2:fe:1f:46:f6:7c:6c:d8:ce:26:19:
43:35:88:d1:8b:c7:2f:0f:85:cf:70:eb:a8:5a:0e:
b7:c1:a2:bf:f2:fe:e7:08:6e:d6:06:9c:a8:51:fb:
11:0a:41:00:72:71:68:43:a9:4b:a0:7e:c5:9a:5a:
86:9e:26:c2:2e:74:ff:bc:aa:d6:9f:31:b1:51:0e:
e9:2e:37:49:7d:00:7b:bd:7e:49:aa:c8:9a:a1:b8:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:38:66:5C:B8:FB:C4:B9:09:78:DA:51:36:D4:F4:E9:EE:82:C6
X509v3 Authority Key Identifier:
keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ca:76:ed:6d:37:ba:7e:e1:99:c3:0a:0f:09:dc:5f:91:6c:
5f:f4:c8:34:e3:bc:da:09:33:4f:1d:25:f2:8b:9a:89:1f:7e:
c2:c3:4d:e5:84:eb:e7:c5:4e:4a:2f:8f:2e:e4:4d:37:c0:51:
58:c1:1b:8d:eb:de:e6:32:8a:b7:14:1c:91:01:94:91:a6:9a:
ae:ec:4c:ef:37:f2:ef:30:95:d3:48:8c:20:ac:72:d4:ae:7e:
96:b2:1e:fd:bc:27:e6:c1:c5:62:7b:7e:ed:ab:99:43:c6:99:
3c:3d:70:82:02:c2:f1:a0:ff:06:8a:e9:40:95:74:b4:a9:73:
59:19:9c:d3:be:85:cc:fd:ae:a9:e8:00:d0:4f:9f:1d:4e:b2:
9c:74:d9:62:0b:2b:cd:6d:87:e7:5e:e2:db:ba:34:45:ab:c3:
45:ce:9b:fc:23:2c:34:d1:6b:58:b7:7e:10:e2:f2:71:81:d4:
88:c5:5c:b4:8a:a2:a6:be:29:9a:ca:fc:ff:2d:42:ff:d6:0b:
02:b1:6e:1f:a3:60:bd:08:a0:36:48:b2:b6:0f:86:98:f0:a0:
2d:22:d5:20:be:95:9f:21:00:1c:cd:e3:41:ff:48:68:44:a2:
8d:24:f7:90:1d:e1:8f:d8:49:f4:44:b3:28:b4:c0:04:28:6e:
b9:65:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:25:13 2026 by rpki-client