
Error: rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier: GqbOtrCUt8Z5JriL35p0mnx/fx5wJPTgfW8Z7qpU27Y=
Subject key identifier: 20:D4:B9:01:C2:88:66:42:05:2D:89:DE:CA:60:65:2C:5D:F4:DD:35
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer: /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial: 34128DB281A830049474D077A6F0DEF53566329B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number: 04E0
Signing time: Wed 28 Oct 2026 10:10:00 +0000
Manifest this update: Wed 28 Oct 2026 10:05:00 +0000
Manifest next update: Thu 29 Oct 2026 13:13:00 +0000
Files and hashes: 1: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: UMKRCX/4qYhc4XNHoqfKV/1ONT4TGbG+lvZt+EzE/0A=)
2: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: 0ae2f1EZL6HbxhVwcUzw3Me44jF/YDkz9SSwEVRkb24=)
3: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: Fx9VT/BBPrSUohUu7tYHinsNONRM+8cKqY2rlMaecck=)
4: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: Mu0Wn6H9qsU4Z+oCCRBb3/sh2XWemV9Lqf1gWwvHxXo=)
5: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: 1tVL+6B8HhLcFiXsFBeRJ5hySt2gSzAHZgR8EqHAJgk=)
6: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: 0kK3z/TrTAaoriZ3GY5WskvHWB4ENyEqA6Wnc3yr+IE=)
7: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: 1z4/xMozbUx2CPAp5a1G9mTLfzpvBpA70xbCWwQm3IM=)
8: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: ECg/+TFC7sOVcDJEnNISsSLO7wDSB/2DnX7fHheA4EU=)
9: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: lV1oKe747G0n6WRgM1a4dM22y9iZagltIiwr2w1aEBg=)
10: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: aqi7sTR7Zy3MI5B9WF0EJ6kx5zAVAGMXbxp20NA2R/M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 13:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:12:8d:b2:81:a8:30:04:94:74:d0:77:a6:f0:de:f5:35:66:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Validity
Not Before: Oct 28 10:05:00 2026 GMT
Not After : Oct 29 13:13:00 2026 GMT
Subject: CN=20D4B901C2886642052D89DECA60652C5DF4DD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:95:06:b3:49:87:bd:c3:58:1a:b1:40:b8:
41:b6:bd:0b:46:69:3d:23:05:fd:c9:de:45:6a:76:
c4:cb:90:c5:7e:b9:84:3d:28:53:b9:7b:e7:30:e2:
ff:4e:c5:e6:c7:da:56:a5:f2:6b:77:83:cc:bc:df:
9f:37:52:d6:c6:03:b3:14:2c:40:93:b5:7a:1b:43:
ad:8f:fb:f2:50:ff:0f:c6:99:c9:f8:95:d1:b8:a5:
5a:44:06:b2:dc:0e:7f:21:40:bd:d5:d8:02:03:29:
ca:e5:31:77:53:34:ad:02:41:44:99:6e:79:e5:5f:
14:d3:2e:71:43:14:df:ab:00:05:35:cb:9f:c9:4d:
99:01:a1:89:39:c5:56:b7:f3:5f:c5:08:75:e3:2d:
0a:da:45:47:64:a5:f8:20:48:1d:0c:b0:64:68:cc:
61:08:7a:b2:4b:77:fb:a4:61:11:b6:98:2b:88:07:
6e:27:02:cd:67:d8:99:aa:f3:6c:3e:cd:98:84:05:
ae:56:5a:b0:d8:76:b3:f7:55:30:b9:91:8c:1a:f1:
25:ba:30:9d:1f:1c:e7:6f:db:90:fb:b0:89:94:fc:
10:cd:ff:05:f4:15:52:7a:f0:39:fc:b4:75:b3:6d:
a8:df:2f:49:a8:5b:93:43:92:36:57:b6:ef:24:a2:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:B9:01:C2:88:66:42:05:2D:89:DE:CA:60:65:2C:5D:F4:DD:35
X509v3 Authority Key Identifier:
keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d2:0c:7b:72:80:e0:fa:e6:40:af:ae:8e:b7:10:11:13:c9:
4c:df:7f:54:e4:fa:e1:e5:cf:df:a7:8b:71:44:6e:b1:54:df:
b4:9b:e2:51:f4:f2:df:c9:ff:60:16:c3:22:e6:e9:31:32:0a:
62:53:bb:24:9d:e3:cc:39:ad:df:33:95:ab:bd:d2:9a:06:04:
97:b4:d8:07:ea:af:17:47:c0:9b:d4:70:c1:10:64:a0:61:d0:
f0:05:ee:59:cf:88:7d:8b:bb:e0:03:9e:d7:a0:f1:71:cc:3e:
cc:6e:43:47:57:d9:d5:de:48:76:fe:1d:86:a8:a2:0d:06:47:
d0:61:16:88:c0:a1:52:a0:bc:1f:70:5c:8f:31:b1:20:c5:23:
13:9c:da:7b:03:ca:ec:09:06:4c:2a:f8:7a:b0:6c:65:71:01:
89:c2:0d:d1:16:99:c4:33:0c:07:2d:09:95:ba:5e:31:80:b4:
2e:82:80:2c:35:ba:d5:c7:76:13:d5:c3:d3:4c:77:2e:08:ee:
d5:b3:cc:3a:43:44:53:27:a0:86:75:fb:a4:e4:6c:db:39:b0:
df:53:60:37:56:9c:29:5a:ca:23:56:4b:2a:b0:68:1b:15:67:
b6:83:14:f5:00:7c:da:35:9e:44:87:ff:44:d4:0e:e8:49:cf:
15:b4:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:07:40 2026 by rpki-client