
Error: rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
File: 058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft (raw, json)
Hash identifier: UWqtTv8CdhYjqs2vR3ccaSd37eU6gJwY93fq1YRXOu0=
Subject key identifier: 95:DA:40:B7:66:44:AA:08:C4:83:4B:5F:1E:13:62:29:78:CC:4D:8D
Authority key identifier: 05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
Certificate issuer: /CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Certificate serial: 3A1F6981D946EE6D5BA7667BEF6F620F3F79ABAC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
Manifest number: 02BE
Signing time: Sun 01 Nov 2026 09:30:49 +0000
Manifest this update: Sun 01 Nov 2026 09:25:49 +0000
Manifest next update: Mon 02 Nov 2026 10:29:49 +0000
Files and hashes: 1: 3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (hash: BgtHd82mla7YM5k/jYNwff+cYiUekMuPwNjBU952X78=)
2: 058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl (hash: DvNs/dYgeJngT+c+Ms+HS245tK5omEHt+oMz7iNCgHY=)
3: 323830343a323862303a3a2f33322d3430203d3e203532393332.roa (hash: 0Ep1/BD8sPrgb+/bmSkLh/3priboVAo9Pt8vEsxZlDs=)
4: 3138372e38362e32342e302f32312d3234203d3e203532393332.roa (hash: GZ86pjCl2mFcA1htlxXaoWY1DCVrqWxOeAnMjpgNRI4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 10:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1f:69:81:d9:46:ee:6d:5b:a7:66:7b:ef:6f:62:0f:3f:79:ab:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058629EB1C805566CA700E3A2EE9B2B066B42FB4
Validity
Not Before: Nov 1 09:25:49 2026 GMT
Not After : Nov 2 10:29:49 2026 GMT
Subject: CN=95DA40B76644AA08C4834B5F1E13622978CC4D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:6b:c0:af:2d:f5:1e:2e:d7:e5:0e:f2:68:
62:82:b7:fd:c0:06:06:98:43:9c:75:08:7f:ac:70:
48:31:02:75:ab:da:a2:b5:0d:b3:bb:52:16:be:5b:
14:df:f1:89:87:9b:a9:51:81:21:33:65:58:5d:cb:
64:8e:aa:d8:8a:62:f6:e9:25:e4:bc:30:fb:71:01:
dd:98:08:e3:fe:83:f9:1e:60:24:8d:fa:5e:5a:28:
7e:d9:26:18:14:1c:1b:8b:34:f5:f7:19:0f:9b:16:
89:7e:57:f4:15:fb:a1:48:98:99:86:61:44:41:b1:
14:0d:f2:2d:98:fb:65:e4:c6:21:02:0c:1a:15:d0:
c3:9c:62:87:95:01:4d:49:ed:c7:5e:1a:0c:eb:c4:
65:50:01:e6:5a:97:78:e7:bf:f3:eb:47:b7:59:f1:
ae:34:3b:7b:cd:b0:c7:01:6e:36:90:b9:21:d4:f7:
a4:fb:e7:95:25:4b:69:45:5a:be:5b:78:27:2f:0b:
a3:59:97:24:0b:0d:ff:dc:0f:95:b6:3b:65:07:dc:
08:35:32:7a:9e:03:3a:5c:f2:b6:aa:19:11:82:b5:
2c:55:32:50:4b:4c:c2:fd:84:be:18:70:d0:dc:84:
6d:b4:91:c3:82:2a:d7:66:95:51:88:ff:d7:ed:79:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:40:B7:66:44:AA:08:C4:83:4B:5F:1E:13:62:29:78:CC:4D:8D
X509v3 Authority Key Identifier:
keyid:05:86:29:EB:1C:80:55:66:CA:70:0E:3A:2E:E9:B2:B0:66:B4:2F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/058629EB1C805566CA700E3A2EE9B2B066B42FB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/058629EB1C805566CA700E3A2EE9B2B066B42FB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:57:44:07:e4:f7:c7:0b:10:cb:4a:ad:80:06:7f:cd:af:f5:
da:26:8c:a1:20:d1:ad:cf:e6:38:51:43:81:2c:26:1e:95:a4:
b2:1c:2e:15:11:4f:56:a8:54:e3:58:26:b9:50:c4:af:de:73:
89:db:e7:33:47:43:e8:32:f5:9e:32:d8:2c:db:f8:17:48:00:
85:6f:f0:bb:ba:cb:f0:b0:31:74:ec:de:a2:db:5a:af:dd:cb:
52:73:df:69:1e:fb:5f:24:14:4f:da:86:9e:df:10:93:11:ac:
3a:11:99:aa:e9:be:b7:6e:72:36:40:34:41:e6:75:ab:a8:dc:
92:19:ab:0d:ff:14:5b:90:7b:88:13:b0:38:e5:87:d4:85:a0:
c4:55:e8:97:50:57:b7:2b:18:6e:fb:7b:ce:a9:6d:e8:32:92:
0b:cd:0c:db:c2:2c:73:7a:08:68:2a:03:2e:04:a0:95:0e:bb:
e0:52:93:1f:75:96:05:5c:da:5c:cd:14:a9:6e:c7:0f:d4:0a:
82:2a:53:75:79:ea:93:ef:0c:45:14:2a:2a:2f:c5:ba:52:35:
39:4f:4b:40:45:36:bd:4d:a7:d6:da:ea:54:4c:58:24:c0:3d:
29:f6:c8:ff:5f:51:eb:cf:80:95:63:06:f4:f7:1a:88:f3:ec:
64:77:76:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOh9pgdlG7m1bp2Z7729iDz95q6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU4NjI5RUIxQzgwNTU2NkNBNzAwRTNBMkVFOUIyQjA2
NkI0MkZCNDAeFw0yNjExMDEwOTI1NDlaFw0yNjExMDIxMDI5NDlaMDMxMTAvBgNV
BAMTKDk1REE0MEI3NjY0NEFBMDhDNDgzNEI1RjFFMTM2MjI5NzhDQzREOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wGvAry31Hi7X5Q7yaGKCt/3A
BgaYQ5x1CH+scEgxAnWr2qK1DbO7Uha+WxTf8YmHm6lRgSEzZVhdy2SOqtiKYvbp
JeS8MPtxAd2YCOP+g/keYCSN+l5aKH7ZJhgUHBuLNPX3GQ+bFol+V/QV+6FImJmG
YURBsRQN8i2Y+2XkxiECDBoV0MOcYoeVAU1J7cdeGgzrxGVQAeZal3jnv/PrR7dZ
8a40O3vNsMcBbjaQuSHU96T755UlS2lFWr5beCcvC6NZlyQLDf/cD5W2O2UH3Ag1
MnqeAzpc8raqGRGCtSxVMlBLTML9hL4YcNDchG20kcOCKtdmlVGI/9fteXMnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUldpAt2ZEqgjEg0tfHhNiKXjMTY0wHwYDVR0j
BBgwFoAUBYYp6xyAVWbKcA46LumysGa0L7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC8wNTg2MjlFQjFDODA1NTY2Q0E3MDBFM0EyRUU5QjJCMDY2QjQyRkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1ODYyOUVCMUM4MDU1NjZD
QTcwMEUzQTJFRTlCMkIwNjZCNDJGQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQR2QvMC8w
NTg2MjlFQjFDODA1NTY2Q0E3MDBFM0EyRUU5QjJCMDY2QjQyRkI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJFdEB+T3xwsQy0qtgAZ/za/12iaMoSDRrc/mOFFDgSwmHpWkshwuFRFPVqhU
41gmuVDEr95zidvnM0dD6DL1njLYLNv4F0gAhW/wu7rL8LAxdOzeottar93LUnPf
aR77XyQUT9qGnt8QkxGsOhGZqum+t25yNkA0QeZ1q6jckhmrDf8UW5B7iBOwOOWH
1IWgxFXol1BXtysYbvt7zqlt6DKSC80M28Isc3oIaCoDLgSglQ674FKTH3WWBVza
XM0UqW7HD9QKgipTdXnqk+8MRRQqKi/FulI1OU9LQEU2vU2n1trqVExYJMA9KfbI
/19R68+AlWMG9PcaiPPsZHd2RA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 22:28:31 2026 by rpki-client