
Error: rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
File: 713D42750562117CA0DB7D96A623898EF91F6ADA.mft (raw, json)
Hash identifier: m6V+vAtyZphkeCMxtEmXhoStxxI82ZGeje2DhVePTBY=
Subject key identifier: FF:11:19:82:D2:ED:C3:93:A7:8A:E1:1C:09:B6:24:A5:86:47:35:F2
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Certificate issuer: /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial: 48C65DD891CE392001663B1D3CA6DEC2568B454B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
Manifest number: 04E7
Signing time: Mon 02 Nov 2026 00:56:49 +0000
Manifest this update: Mon 02 Nov 2026 00:51:49 +0000
Manifest next update: Tue 03 Nov 2026 04:47:49 +0000
Files and hashes: 1: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (hash: AyCjLshGl+F2l6obwdLA39w5CL9l+QsiCviQdQCNpX8=)
2: 3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (hash: TMDin3rnGrIeVp3qSYo7fJ1XJvh8Ex/25wlB3Azmy+E=)
3: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (hash: xvmiqgJDueaOrERZQBqX3QrW4BkncokeMWQA4yWvoyA=)
4: 713D42750562117CA0DB7D96A623898EF91F6ADA.crl (hash: n7G5AihMS/M3URqdhkVnIgFMfHjzM6zfZaKsTDmhamM=)
5: 3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (hash: Sbr3GGSxs/TpbJEnxyaf9FEO3XI7W7CSYVMWuuULCdo=)
6: 3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (hash: uy5+Ub0+wbd3yZfZJgQXFp+3E71SDlBX3bZO2L6OdKk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 04:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c6:5d:d8:91:ce:39:20:01:66:3b:1d:3c:a6:de:c2:56:8b:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Validity
Not Before: Nov 2 00:51:49 2026 GMT
Not After : Nov 3 04:47:49 2026 GMT
Subject: CN=FF111982D2EDC393A78AE11C09B624A5864735F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:1e:cd:13:ac:04:db:15:f2:e3:34:a9:e5:
2d:73:7f:37:b9:2a:28:87:3a:f9:39:85:61:63:f9:
92:00:cd:77:09:70:61:d0:0e:0f:c9:1a:17:e9:f5:
8b:a0:99:ee:35:6c:b3:f1:1c:9c:e4:ea:b4:8f:32:
4a:0d:9f:e2:0b:ee:2f:4a:f5:88:9a:e0:59:c3:3a:
7c:a6:ce:67:cb:fd:5e:74:28:f5:65:db:bb:87:a1:
f4:20:40:30:66:8b:0a:2f:f1:79:62:f1:7a:c0:d7:
57:4c:e9:fa:c4:52:a2:a4:9f:04:cc:63:65:c1:6c:
19:b4:b1:91:05:08:b6:e7:bf:9b:86:74:4a:63:56:
87:98:e1:e3:74:42:62:17:d9:ca:54:cc:be:72:cf:
d2:4e:93:18:4c:a1:d8:92:c7:ea:bc:06:8e:f6:f4:
56:3f:1b:98:a3:e2:3c:5c:f3:4d:25:92:1b:05:a4:
78:ce:fb:bc:66:72:98:86:2a:29:fe:d4:47:a4:2e:
48:92:c0:47:96:3d:ee:87:2b:16:60:64:ed:db:a8:
16:f7:13:b6:02:a2:94:9c:4d:23:af:83:fc:76:86:
a9:61:4a:dc:31:ae:02:76:b9:50:3e:61:37:49:d7:
1b:aa:2e:eb:6d:77:98:a7:fe:98:f1:de:22:24:eb:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:19:82:D2:ED:C3:93:A7:8A:E1:1C:09:B6:24:A5:86:47:35:F2
X509v3 Authority Key Identifier:
keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:20:e6:64:91:a8:d2:f9:b5:d5:ff:e8:e8:44:eb:7e:04:a3:
34:26:af:45:2b:4b:70:d1:e9:a1:6e:de:ce:28:93:52:38:ac:
ac:38:87:1c:94:de:e6:84:27:eb:49:b6:65:b0:1a:f8:51:cd:
41:ca:c1:20:94:ca:ff:4b:5e:28:57:a5:2f:42:69:75:1c:f7:
75:92:fd:86:30:0f:58:41:28:a1:13:ee:54:fb:66:29:20:5a:
f7:3d:c7:b7:0a:f6:df:2e:8b:48:7e:a9:95:1d:3a:58:9c:ed:
5c:bf:67:73:b2:70:b7:f7:96:0b:e5:67:f5:1c:48:52:b8:51:
7e:a5:b0:f4:1f:16:e9:5b:07:03:04:b2:23:03:c7:0b:bb:8c:
0a:74:9b:83:50:81:da:fb:8c:85:e8:34:8b:e9:cc:2b:34:15:
50:e5:6c:20:a5:ed:fe:da:51:10:51:2e:6c:e9:d6:e1:e9:93:
95:59:48:f0:e5:d2:8b:b7:94:02:48:03:0b:e1:6b:77:c6:28:
50:b9:3d:9e:23:48:87:bb:5a:60:fc:35:40:9c:1b:d1:a4:e0:
88:a0:e3:bb:9a:47:fd:77:c1:5a:2f:b9:29:9b:57:2d:b0:8b:
36:b4:97:ed:ed:e2:6c:47:81:1c:ad:bf:6b:0f:84:87:21:6c:
4d:ae:a6:05
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUSMZd2JHOOSABZjsdPKbewlaLRUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEzRDQyNzUwNTYyMTE3Q0EwREI3RDk2QTYyMzg5OEVG
OTFGNkFEQTAeFw0yNjExMDIwMDUxNDlaFw0yNjExMDMwNDQ3NDlaMDMxMTAvBgNV
BAMTKEZGMTExOTgyRDJFREMzOTNBNzhBRTExQzA5QjYyNEE1ODY0NzM1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FR7NE6wE2xXy4zSp5S1zfze5
KiiHOvk5hWFj+ZIAzXcJcGHQDg/JGhfp9Yugme41bLPxHJzk6rSPMkoNn+IL7i9K
9Yia4FnDOnymzmfL/V50KPVl27uHofQgQDBmiwov8Xli8XrA11dM6frEUqKknwTM
Y2XBbBm0sZEFCLbnv5uGdEpjVoeY4eN0QmIX2cpUzL5yz9JOkxhModiSx+q8Bo72
9FY/G5ij4jxc800lkhsFpHjO+7xmcpiGKin+1EekLkiSwEeWPe6HKxZgZO3bqBb3
E7YCopScTSOvg/x2hqlhStwxrgJ2uVA+YTdJ1xuqLuttd5in/pjx3iIk66ZVAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/xEZgtLtw5OniuEcCbYkpYZHNfIwHwYDVR0j
BBgwFoAUcT1CdQViEXyg232WpiOJjvkfatowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jUXZ4a1dkakM1dnZ2WlVuWjQyQWRMWVFWcTg4ZXJzYmRVdm96bXROdE04
LzEvNzEzRDQyNzUwNTYyMTE3Q0EwREI3RDk2QTYyMzg5OEVGOTFGNkFEQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83MTNENDI3NTA1NjIxMTdDQTBE
QjdEOTZBNjIzODk4RUY5MUY2QURBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2NR
dnhrV2RqQzV2dnZaVW5aNDJBZExZUVZxODhlcnNiZFV2b3ptdE50TTgvMS83MTNE
NDI3NTA1NjIxMTdDQTBEQjdEOTZBNjIzODk4RUY5MUY2QURBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ESDmZJGo0vm11f/o6ETrfgSjNCavRStLcNHpoW7eziiTUjisrDiHHJTe5oQn60m2
ZbAa+FHNQcrBIJTK/0teKFelL0JpdRz3dZL9hjAPWEEooRPuVPtmKSBa9z3Htwr2
3y6LSH6plR06WJztXL9nc7Jwt/eWC+Vn9RxIUrhRfqWw9B8W6VsHAwSyIwPHC7uM
CnSbg1CB2vuMheg0i+nMKzQVUOVsIKXt/tpREFEubOnW4emTlVlI8OXSi7eUAkgD
C+Frd8YoULk9niNIh7taYPw1QJwb0aTgiKDju5pH/XfBWi+5KZtXLbCLNrSX7e3i
bEeBHK2/aw+EhyFsTa6mBQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:44:48 2026 by rpki-client