
Error: rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
File: 58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft (raw, json)
Hash identifier: UDjC0TgBDY0YYwxdIPyzHI0TeT8/+rF+t/bKikA/Mic=
Subject key identifier: E8:2E:85:47:28:E6:0E:4F:5B:D2:E1:00:67:B8:E5:06:4E:9F:48:D5
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Certificate issuer: /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial: 0CAAF036CEDB8D55C37C1981114283F2EC6744D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
Manifest number: 04E6
Signing time: Fri 30 Oct 2026 01:00:03 +0000
Manifest this update: Fri 30 Oct 2026 00:55:03 +0000
Manifest next update: Sat 31 Oct 2026 02:04:03 +0000
Files and hashes: 1: 3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (hash: yGOnCaYdXoPSiCcG48IWOeU00/OKKcgTWMjhmvnXKog=)
2: 3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (hash: EmoIYjXAD59Bzs5ZcQ5DjNGPUJPBcmg+ZCKHHOQfOtI=)
3: 58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl (hash: Yxtqr1xKlfzpq0j+W6JJEEK3HQu5BiTj2ZdCabD15u8=)
4: 3137372e36362e3135322e302f32342d3234203d3e20323632343939.roa (hash: ICcMFNn4Yo3O5l0EwjprC2c86LrGS9NSM+r55/Sws90=)
5: 323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (hash: 1lfXMLTbT/3Av+md5xEGj4OAvUPRns7UgGYYrFne5zs=)
6: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (hash: nf1wNq0J3IFfXrmp4dd239LBwzBajPcNtmKDxhSqo9o=)
7: 3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (hash: 0poYO3CbFsxf9KT273lmV4Kizm8boSKhwn7LzF/nQAI=)
8: 3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (hash: /yUOJ2DLNHHztTcwGSt9HMlsmjL0HUeOTFjBxMCw+vc=)
9: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (hash: Ndrd5dgkpPL9bGkE3o3ucD3GM2y0hpytVU6YOr6tmQ4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 02:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:aa:f0:36:ce:db:8d:55:c3:7c:19:81:11:42:83:f2:ec:67:44:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Validity
Not Before: Oct 30 00:55:03 2026 GMT
Not After : Oct 31 02:04:03 2026 GMT
Subject: CN=E82E854728E60E4F5BD2E10067B8E5064E9F48D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:d0:1d:81:80:d5:73:2e:84:37:e1:ca:f6:
26:43:4d:fe:ed:57:30:c3:e7:a5:98:18:d9:53:94:
50:f0:9d:b0:ba:a0:84:7b:27:c5:c5:79:a1:f8:87:
72:80:af:16:b9:bc:8d:8f:d4:18:69:d2:ec:66:f4:
d7:af:f8:42:7a:0e:7e:fa:5c:49:6a:3e:25:c2:45:
2a:cb:a9:72:da:9c:e1:98:dd:02:a9:29:05:86:d7:
63:c5:15:eb:d2:b4:ca:8e:6f:a6:79:ae:89:1a:c6:
3f:7a:67:e1:df:06:24:2e:30:70:ca:95:cd:47:36:
42:34:e2:40:84:c6:39:a7:fa:ab:3d:88:86:80:ea:
8c:dc:19:bb:6e:ff:88:f0:42:19:7f:ba:b1:21:12:
32:f0:5f:4c:af:9b:c8:d4:9d:07:2b:b7:30:61:55:
8a:73:84:be:ae:60:81:95:8b:02:ae:ba:7e:e1:3a:
bb:15:8d:6e:29:e5:b4:2a:66:4e:7d:c8:25:8e:90:
8d:b0:96:60:39:78:4e:b0:1d:a1:bb:02:71:8c:f3:
26:9c:22:a5:cc:d3:7f:9c:10:63:bc:69:ff:41:11:
81:ea:8d:de:87:d6:0e:c9:b0:ee:f0:80:f7:1c:54:
3f:38:ce:ca:85:08:23:24:72:d2:9a:d2:8f:b3:83:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:85:47:28:E6:0E:4F:5B:D2:E1:00:67:B8:E5:06:4E:9F:48:D5
X509v3 Authority Key Identifier:
keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:64:53:45:a0:c7:0f:f1:6c:2f:a3:ad:6c:58:e2:3a:c1:5d:
5d:b9:8a:21:75:06:48:96:e3:c1:0b:82:53:8c:fd:4d:16:a2:
d3:c1:4d:77:95:be:ab:89:9a:0e:54:d0:39:ec:9b:42:31:e9:
2b:6f:6a:84:79:ab:05:99:61:9e:01:21:05:30:7e:2c:c0:5d:
3d:4b:47:9a:c8:c7:a9:27:76:c5:be:88:15:df:8d:0d:e7:f8:
46:b2:41:fe:d9:20:bd:f5:ba:ba:e8:8a:5d:ab:5d:ea:2d:90:
29:0c:ca:66:e5:e7:e9:ea:12:30:e8:b9:76:b0:1a:19:6b:03:
25:ad:9e:3e:a3:3f:97:3b:f7:2d:38:a3:e1:48:fe:dc:55:20:
12:c4:e6:08:6d:db:5e:78:35:c2:f9:bb:31:43:7c:40:1e:40:
0e:1c:ff:39:7d:2e:eb:17:28:6b:77:98:3d:bc:bb:9c:12:9d:
5c:11:19:e8:85:c9:6a:57:7c:13:08:b5:bb:6f:ce:40:b3:ca:
88:45:c0:b9:c8:4f:93:c1:82:e6:80:78:0f:e5:e6:55:47:79:
be:a6:0f:cc:4f:2d:a7:61:c9:05:6d:82:cf:53:ac:f0:44:c4:
cb:2f:dc:7b:9c:44:ee:76:95:bd:91:0b:71:29:3c:49:39:50:
d0:3e:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:49 2026 by rpki-client