
Error: rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
File: 57C950BD274ED8EA04B2AF337313BFE612E66E95.mft (raw, json)
Hash identifier: MgobhzJRFJCkWNN1UYNCSS2hKyMty0K8OlEPdOoLpgo=
Subject key identifier: F1:DD:44:77:98:5F:3A:6D:92:B9:7A:A1:4B:94:6D:76:EA:9E:A8:76
Authority key identifier: 57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Certificate issuer: /CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Certificate serial: 4A23DE27B1F2F1A52CB60F2CC9268418399FB06A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
Manifest number: 04E8
Signing time: Sun 01 Nov 2026 03:56:24 +0000
Manifest this update: Sun 01 Nov 2026 03:51:24 +0000
Manifest next update: Mon 02 Nov 2026 07:10:24 +0000
Files and hashes: 1: 323830343a346162343a3a2f33322d3438203d3e20323637323538.roa (hash: LR4jZ+GuY91xTigeeMqi4yPycRLcCBeqf/iQnoo3S0o=)
2: 34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa (hash: lB6r9XZ9Vb9pW1jG+53giwTT3+M0CAqMDaEkvtJCnYY=)
3: 57C950BD274ED8EA04B2AF337313BFE612E66E95.crl (hash: gcmue+ud4hJlEKttu5U+v2DHTrorQ05t2XlRYNrxAeQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 07:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:23:de:27:b1:f2:f1:a5:2c:b6:0f:2c:c9:26:84:18:39:9f:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Validity
Not Before: Nov 1 03:51:24 2026 GMT
Not After : Nov 2 07:10:24 2026 GMT
Subject: CN=F1DD4477985F3A6D92B97AA14B946D76EA9EA876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:83:35:a3:8d:2b:c8:df:7b:9d:2f:86:db:
83:9e:74:9b:e7:a4:a1:cd:d9:34:ad:10:fd:b7:68:
4d:e4:8d:2b:15:46:6b:dc:7f:e3:60:9d:01:da:29:
37:2d:3c:cd:3e:d8:a3:4e:a4:be:1b:ab:ca:41:f5:
e6:1e:70:cc:07:21:cc:4d:70:99:71:19:ff:72:b5:
fc:3d:97:d1:08:ab:5b:57:47:87:ac:05:a1:9c:f2:
3e:a6:54:e9:b8:39:10:aa:a1:02:d6:52:3f:42:5f:
35:d9:e9:1b:48:f4:5c:54:29:bc:95:87:10:72:5a:
3b:b7:ba:8a:b8:cc:01:12:3c:06:33:b1:55:97:2a:
75:e3:c7:4e:cb:0f:e3:04:18:2f:5f:79:d3:4a:84:
2a:f2:43:62:1b:e2:74:06:0c:0e:40:de:1d:bc:e7:
85:29:b3:e0:0d:6c:59:1c:0c:f2:2b:fe:ba:e0:f7:
53:f8:6a:b8:f4:f0:cb:1f:bc:aa:90:8e:80:c6:ff:
36:80:98:6c:da:2f:50:59:27:52:bd:ed:1d:49:3a:
d4:e5:56:c8:a3:2e:68:7d:92:8f:56:4c:6c:56:24:
89:1b:1e:0d:4e:1d:f6:2e:08:7a:7f:1a:fc:0c:c0:
d2:15:82:e3:39:1c:4e:a8:5d:c4:34:cc:8b:35:f9:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:44:77:98:5F:3A:6D:92:B9:7A:A1:4B:94:6D:76:EA:9E:A8:76
X509v3 Authority Key Identifier:
keyid:57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ff:69:3f:f4:3f:d9:1a:88:1a:81:3b:69:ae:dd:e8:70:95:
cc:9c:a3:11:50:fa:30:3c:96:0c:2b:4f:87:2d:8a:a6:8e:3d:
2a:48:a7:3c:9b:10:41:45:22:dd:33:f0:7d:90:5b:0b:9d:c4:
06:42:49:24:8c:be:e3:af:b9:27:f8:8c:4c:74:38:42:2d:aa:
35:1a:36:60:8b:01:bf:0a:e8:8b:4b:e6:1c:8c:b1:a4:20:c1:
b3:7b:72:f0:5d:f0:93:07:74:65:87:68:44:09:ad:7d:ee:23:
27:06:db:f9:02:d9:51:80:71:0f:79:f1:6d:b0:39:ec:1d:cc:
57:52:3b:ee:f5:07:a9:33:18:46:f9:e0:bb:ff:73:c9:71:3c:
98:c0:f1:4b:75:d9:c3:25:db:42:e2:9a:ab:55:36:89:21:5b:
b7:6b:0c:b5:6e:13:2e:9d:2d:68:b5:99:7e:02:f2:10:ae:0e:
1a:aa:42:83:cf:72:79:e6:97:b6:11:aa:67:53:4b:f0:c3:57:
ce:3e:fd:7e:b6:4c:ff:29:28:39:16:7c:32:2e:1d:db:3c:fd:
f6:bc:e6:63:17:c7:4a:f8:73:61:d8:b5:20:a0:07:88:24:18:
8b:e4:41:b3:95:52:05:7b:4e:39:cd:51:51:29:d8:72:02:5f:
89:56:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:48:53 2026 by rpki-client