Error: rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft File: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json) Hash identifier: BsF0g/o6Sttv93t2Lmbx8b0mkX5+mibkeSWdUq3NqQs= Subject key identifier: 48:36:3D:2D:51:5E:D7:FC:FF:14:E5:6F:2F:8A:C2:27:F7:B7:EF:49 Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C Certificate issuer: /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C Certificate serial: 6B2F8EBCD7CF04AF6048EC48BE524ECBFFC7D0CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft Manifest number: 04E5 Signing time: Mon 02 Nov 2026 14:28:29 +0000 Manifest this update: Mon 02 Nov 2026 14:23:29 +0000 Manifest next update: Tue 03 Nov 2026 15:42:29 +0000 Files and hashes: 1: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=) 2: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: a/qca9V85HAgPfX98dagnpOWOk966mBqnRfg2XiP5uM=) 3: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 15:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2f:8e:bc:d7:cf:04:af:60:48:ec:48:be:52:4e:cb:ff:c7:d0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C Validity Not Before: Nov 2 14:23:29 2026 GMT Not After : Nov 3 15:42:29 2026 GMT Subject: CN=48363D2D515ED7FCFF14E56F2F8AC227F7B7EF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:4d:62:a8:e7:37:b9:a0:83:37:97:95:9a: cc:db:41:51:07:d2:09:3e:00:55:05:b1:62:68:06: 7a:43:eb:93:4f:de:bb:48:26:ee:c0:31:96:86:22: 56:0f:13:94:58:d5:bc:6b:8c:f1:d2:3b:ce:09:b0: d0:29:70:11:ca:9b:df:6f:65:b3:7d:ab:3e:ff:c8: 6c:61:65:2c:ad:a5:7e:c9:a7:f2:7b:85:42:ff:48: 86:d3:61:c6:b6:a0:fa:81:ec:8a:64:b9:83:41:b9: 77:52:d6:c8:38:c1:87:0d:6d:81:bb:40:3f:6f:77: 2f:d9:99:de:eb:27:98:84:1c:df:8d:9a:31:b5:7e: 0d:cd:55:10:a5:cc:fe:53:c7:d3:4e:98:66:0b:fa: f5:c2:ac:d2:41:bd:dd:85:ef:80:7e:80:ee:34:e5: b1:11:d6:94:02:47:41:c4:7e:0c:d5:e7:e8:4a:73: 88:a0:27:57:ee:14:4a:e9:db:2a:8f:69:4a:73:09: a9:6c:e8:33:c3:18:75:0d:12:f1:e8:7a:05:35:38: 42:37:43:d8:86:fd:12:d6:5c:65:f6:76:75:7e:ca: ad:1b:50:0f:a1:a6:a6:71:7e:65:bf:5b:71:4d:76: a6:8d:b5:a7:92:12:23:33:fb:11:93:bc:7a:d4:d7: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:3D:2D:51:5E:D7:FC:FF:14:E5:6F:2F:8A:C2:27:F7:B7:EF:49 X509v3 Authority Key Identifier: keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c8:c0:6d:64:6b:c0:40:f0:75:85:fd:3b:f0:b3:73:ee:ee: 97:1e:d5:ac:52:53:8b:42:ff:33:9b:42:06:c9:6a:39:8f:7d: ea:e9:a6:8e:bf:09:49:fd:1d:2b:3c:74:01:de:87:7d:7a:5a: 83:72:ae:30:b7:34:3d:0b:3f:e7:c2:e8:fe:38:2c:6e:d1:ea: 32:06:4a:f9:36:f2:de:85:24:c8:0e:47:3d:ff:17:92:2a:cc: 03:fd:31:f8:64:23:52:4b:29:77:4b:0f:cf:7d:10:2a:ed:d1: ac:0d:ab:ff:3a:33:5b:64:7d:a9:46:39:db:49:8f:c4:47:20: a1:67:f7:4a:88:94:5d:50:44:c4:d6:ab:eb:58:76:40:da:d4: 85:11:53:57:4a:c5:bc:d7:5a:65:49:60:b6:8f:d3:0d:76:e4: ed:79:be:bc:44:ec:b4:43:d9:ee:8c:3f:e1:85:aa:60:80:51: bf:8c:4b:a8:85:02:04:63:84:13:67:70:bb:7d:71:8b:dc:01: aa:d2:0c:a9:b3:eb:ff:36:ad:2f:ed:95:c6:8f:5e:2d:fb:42: 66:ab:f0:0f:64:95:b0:e1:36:cb:87:ad:95:ae:3b:a2:d1:fd: 3b:41:c5:7b:bd:23:4e:1e:0c:94:a7:03:c9:4b:c9:e6:f6:82: 41:bd:b3:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUay+OvNfPBK9gSOxIvlJOy//H0M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNzU0QzU0OTg5MzA1Q0NFMjI5NDFFNkQzQzBCRjhB RjZEN0Y2QzAeFw0yNjExMDIxNDIzMjlaFw0yNjExMDMxNTQyMjlaMDMxMTAvBgNV BAMTKDQ4MzYzRDJENTE1RUQ3RkNGRjE0RTU2RjJGOEFDMjI3RjdCN0VGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50U1iqOc3uaCDN5eVmszbQVEH 0gk+AFUFsWJoBnpD65NP3rtIJu7AMZaGIlYPE5RY1bxrjPHSO84JsNApcBHKm99v ZbN9qz7/yGxhZSytpX7Jp/J7hUL/SIbTYca2oPqB7IpkuYNBuXdS1sg4wYcNbYG7 QD9vdy/Zmd7rJ5iEHN+NmjG1fg3NVRClzP5Tx9NOmGYL+vXCrNJBvd2F74B+gO40 5bER1pQCR0HEfgzV5+hKc4igJ1fuFErp2yqPaUpzCals6DPDGHUNEvHoegU1OEI3 Q9iG/RLWXGX2dnV+yq0bUA+hpqZxfmW/W3FNdqaNtaeSEiMz+xGTvHrU17LTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSDY9LVFe1/z/FOVvL4rCJ/e370kwHwYDVR0j BBgwFoAUURdUxUmJMFzOIpQebTwL+K9tf2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpmNDdzeDFqVE1tdWh0YkZCeWhyaVZCcXdNYmtCY1JnR2VNS0g4SGN4 V1QvMS81MTE3NTRDNTQ5ODkzMDVDQ0UyMjk0MUU2RDNDMEJGOEFGNkQ3RjZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMTc1NEM1NDk4OTMwNUND RTIyOTQxRTZEM0MwQkY4QUY2RDdGNkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlpmNDdzeDFqVE1tdWh0YkZCeWhyaVZCcXdNYmtCY1JnR2VNS0g4SGN4V1QvMS81 MTE3NTRDNTQ5ODkzMDVDQ0UyMjk0MUU2RDNDMEJGOEFGNkQ3RjZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVsjAbWRrwEDwdYX9O/Czc+7ulx7VrFJTi0L/M5tCBslqOY996ummjr8JSf0d Kzx0Ad6HfXpag3KuMLc0PQs/58Lo/jgsbtHqMgZK+Tby3oUkyA5HPf8XkirMA/0x +GQjUkspd0sPz30QKu3RrA2r/zozW2R9qUY520mPxEcgoWf3SoiUXVBExNar61h2 QNrUhRFTV0rFvNdaZUlgto/TDXbk7Xm+vETstEPZ7ow/4YWqYIBRv4xLqIUCBGOE E2dwu31xi9wBqtIMqbPr/zatL+2Vxo9eLftCZqvwD2SVsOE2y4etla47otH9O0HF e70jTh4MlKcDyUvJ5vaCQb2z+g== -----END CERTIFICATE-----Generated at Tue Nov 3 08:24:49 2026 by rpki-client