
Error: rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
File: 57C950BD274ED8EA04B2AF337313BFE612E66E95.mft (raw, json)
Hash identifier: YGB86iiMGdAhOG0GHCIDCkv4JgR/DBOVIBRFVq+YOnM=
Subject key identifier: 40:30:8D:D1:2F:2F:EE:1A:35:6A:19:5C:62:41:22:BE:BB:1D:F0:19
Authority key identifier: 57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Certificate issuer: /CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Certificate serial: 53A242B5970C28CBB0DEAE4C6DC7F36CE7A5C0F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
Manifest number: 04EA
Signing time: Mon 02 Nov 2026 16:54:23 +0000
Manifest this update: Mon 02 Nov 2026 16:49:23 +0000
Manifest next update: Tue 03 Nov 2026 19:10:23 +0000
Files and hashes: 1: 323830343a346162343a3a2f33322d3438203d3e20323637323538.roa (hash: LR4jZ+GuY91xTigeeMqi4yPycRLcCBeqf/iQnoo3S0o=)
2: 57C950BD274ED8EA04B2AF337313BFE612E66E95.crl (hash: YYbf2F880k5KRd6YWkKAwvVb85gJrm11n4Uar41so/s=)
3: 34352e3233322e3130382e302f32322d3234203d3e20323637323538.roa (hash: lB6r9XZ9Vb9pW1jG+53giwTT3+M0CAqMDaEkvtJCnYY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 19:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a2:42:b5:97:0c:28:cb:b0:de:ae:4c:6d:c7:f3:6c:e7:a5:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
Validity
Not Before: Nov 2 16:49:23 2026 GMT
Not After : Nov 3 19:10:23 2026 GMT
Subject: CN=40308DD12F2FEE1A356A195C624122BEBB1DF019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:e2:8f:bd:c8:95:01:0c:80:7e:c8:5d:eb:
e2:0d:ca:d5:d7:16:3e:cd:03:d2:42:32:f2:f5:3e:
c5:08:51:19:70:09:33:c2:11:d1:73:9f:93:90:18:
70:98:93:8a:e9:f6:7b:7c:66:13:79:79:5b:8f:37:
16:42:d4:65:a5:35:1b:84:c9:65:1c:a5:04:af:b4:
35:d0:c9:74:8b:99:ca:21:2d:16:12:34:50:d2:71:
15:c7:76:e3:73:57:80:93:7f:8b:7d:92:87:2b:39:
85:4f:a3:60:37:de:f8:2b:8d:b8:a4:c3:16:a5:e0:
63:aa:f5:01:40:b5:ae:29:87:06:81:9c:42:c4:2e:
f3:27:a9:d2:c0:74:6b:1c:0d:f3:22:03:f1:b6:da:
dd:f8:1d:c4:2f:74:c9:23:84:50:2c:f4:f8:68:f2:
f8:65:45:16:2c:cc:b4:90:df:d9:e0:d7:24:d2:39:
6a:60:b5:b5:ba:42:57:1f:06:09:39:83:26:26:88:
4b:8b:1b:86:74:af:ba:61:41:16:e4:62:e7:87:e6:
d3:b7:43:78:be:78:40:e5:51:ba:ac:a3:13:65:70:
09:a2:46:ae:fc:98:7a:8c:8c:99:6c:0d:70:5b:1d:
db:c1:69:05:a3:62:92:da:23:a5:46:b0:c3:b3:a5:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:8D:D1:2F:2F:EE:1A:35:6A:19:5C:62:41:22:BE:BB:1D:F0:19
X509v3 Authority Key Identifier:
keyid:57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:aa:39:3a:ba:51:95:fa:7a:33:66:c4:9f:07:b7:8f:4a:f4:
e9:1f:ea:88:83:be:b8:da:61:c6:64:39:63:91:2c:b0:53:f8:
c5:71:d1:aa:55:44:00:01:1f:01:d3:9c:52:05:e4:9d:5b:36:
d4:c7:7c:86:0d:f9:fd:db:70:04:ae:3e:e8:e2:4a:3f:3e:a2:
c1:df:6b:89:d6:2d:e1:16:18:19:ea:f4:22:b5:a7:2c:46:dc:
a2:d6:17:8b:95:62:0e:e8:f2:ae:73:17:0c:10:65:49:2b:fa:
1d:2d:52:1c:80:be:8c:d0:2a:f5:0c:14:f5:c0:03:cc:8b:d2:
08:2f:74:66:4d:d9:59:ba:0b:28:d6:51:0b:ec:a8:ca:a1:6f:
d7:ee:64:b5:9c:e4:95:17:42:51:12:37:39:02:e1:1f:dd:05:
bb:a0:4a:3d:c7:84:80:18:a4:a2:8a:1a:0d:c4:6b:cc:46:a6:
e6:cd:36:c3:cd:7e:88:9b:f6:38:5c:b3:1c:e9:c1:04:0a:30:
b3:57:f6:74:31:28:c7:e4:d7:21:9b:71:e6:e7:c5:57:5e:be:
fd:eb:c0:b7:b6:1c:2b:7f:12:91:23:02:0a:36:d1:40:d9:d6:
97:f2:65:27:ab:52:05:a0:62:92:7b:52:40:0d:2d:8e:63:59:
f8:de:c9:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU6JCtZcMKMuw3q5MbcfzbOelwPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdDOTUwQkQyNzRFRDhFQTA0QjJBRjMzNzMxM0JGRTYx
MkU2NkU5NTAeFw0yNjExMDIxNjQ5MjNaFw0yNjExMDMxOTEwMjNaMDMxMTAvBgNV
BAMTKDQwMzA4REQxMkYyRkVFMUEzNTZBMTk1QzYyNDEyMkJFQkIxREYwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36OKPvciVAQyAfshd6+INytXX
Fj7NA9JCMvL1PsUIURlwCTPCEdFzn5OQGHCYk4rp9nt8ZhN5eVuPNxZC1GWlNRuE
yWUcpQSvtDXQyXSLmcohLRYSNFDScRXHduNzV4CTf4t9kocrOYVPo2A33vgrjbik
wxal4GOq9QFAta4phwaBnELELvMnqdLAdGscDfMiA/G22t34HcQvdMkjhFAs9Pho
8vhlRRYszLSQ39ng1yTSOWpgtbW6QlcfBgk5gyYmiEuLG4Z0r7phQRbkYueH5tO3
Q3i+eEDlUbqsoxNlcAmiRq78mHqMjJlsDXBbHdvBaQWjYpLaI6VGsMOzpcSrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQDCN0S8v7ho1ahlcYkEivrsd8BkwHwYDVR0j
BBgwFoAUV8lQvSdO2OoEsq8zcxO/5hLmbpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDZENFhrc1dlWEpGZ0htOGtWczRhVm1xQUhxUVFkblRaWTR4cmVrN016
R2gvMS81N0M5NTBCRDI3NEVEOEVBMDRCMkFGMzM3MzEzQkZFNjEyRTY2RTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3Qzk1MEJEMjc0RUQ4RUEw
NEIyQUYzMzczMTNCRkU2MTJFNjZFOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDZENFhrc1dlWEpGZ0htOGtWczRhVm1xQUhxUVFkblRaWTR4cmVrN016R2gvMS81
N0M5NTBCRDI3NEVEOEVBMDRCMkFGMzM3MzEzQkZFNjEyRTY2RTk1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK6o5OrpRlfp6M2bEnwe3j0r06R/qiIO+uNphxmQ5Y5EssFP4xXHRqlVEAAEf
AdOcUgXknVs21Md8hg35/dtwBK4+6OJKPz6iwd9ridYt4RYYGer0IrWnLEbcotYX
i5ViDujyrnMXDBBlSSv6HS1SHIC+jNAq9QwU9cADzIvSCC90Zk3ZWboLKNZRC+yo
yqFv1+5ktZzklRdCURI3OQLhH90Fu6BKPceEgBikoooaDcRrzEam5s02w81+iJv2
OFyzHOnBBAows1f2dDEox+TXIZtx5ufFV16+/evAt7YcK38SkSMCCjbRQNnWl/Jl
J6tSBaBikntSQA0tjmNZ+N7Jiw==
-----END CERTIFICATE-----
Generated at Tue Nov 3 10:57:16 2026 by rpki-client