
Error: rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
File: D293EBE899975158DDB35D74133FF1297A6D6E38.mft (raw, json)
Hash identifier: g/f6zGk/ZlotWc2wPu5o60Qx52dfGjQ8BzeVBwj7hYc=
Subject key identifier: 58:0A:35:93:EB:73:6A:02:43:F2:DE:AC:4F:D6:41:15:BC:63:75:8B
Authority key identifier: D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
Certificate issuer: /CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Certificate serial: 075715E9BB714F55676F1200B3D75C557AF951E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
Manifest number: 04E6
Signing time: Sat 31 Oct 2026 18:58:17 +0000
Manifest this update: Sat 31 Oct 2026 18:53:17 +0000
Manifest next update: Sun 01 Nov 2026 20:35:17 +0000
Files and hashes: 1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: zwqlDjTaTOLsRjCC1dEZpfr0TWjjEvQbxj8lbG19/4w=)
2: D293EBE899975158DDB35D74133FF1297A6D6E38.crl (hash: OlQuiC+QqlT69Egw+QM0cOHhXgGCsZEPckPfw82vQ3o=)
3: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: 69q5eUgYcgbKj8L1yEZm6+/xpeuQNBN1Y7+wxmnMl6E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl
rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 20:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:15:e9:bb:71:4f:55:67:6f:12:00:b3:d7:5c:55:7a:f9:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Validity
Not Before: Oct 31 18:53:17 2026 GMT
Not After : Nov 1 20:35:17 2026 GMT
Subject: CN=580A3593EB736A0243F2DEAC4FD64115BC63758B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:43:31:a0:bd:f0:29:59:ac:13:01:dd:c0:
9a:a3:af:04:58:17:9f:d6:65:f4:b4:f1:25:4a:eb:
0c:79:b6:f0:12:3d:35:7c:11:b4:c5:bd:ff:e7:55:
61:48:06:f4:1e:04:4c:1a:bc:09:01:60:bd:3e:75:
1e:d9:78:f8:77:30:bd:b2:f8:6a:ab:49:d0:c3:07:
eb:10:39:69:5e:f3:7c:2b:4b:b9:18:12:78:c0:54:
15:ee:c6:63:e7:0a:c4:7d:31:49:b5:53:83:d7:27:
e4:ad:4c:3e:a7:3b:a7:cb:e9:d6:23:da:c4:e5:cd:
6b:31:30:33:8b:6c:d2:70:50:31:21:26:39:24:6a:
85:4e:38:1a:a7:e2:d2:64:01:06:e3:ee:53:9d:58:
de:6d:56:b5:c7:66:e0:1b:79:2d:66:30:fe:7b:18:
d8:ae:ed:b7:c4:a4:28:c0:a8:09:04:41:06:c4:53:
c8:80:63:d7:0f:d6:64:56:33:84:63:9a:ea:a5:ec:
60:b5:fc:43:77:73:17:b4:ba:73:91:8e:37:a8:d7:
c9:a1:fb:8f:b9:67:eb:8a:66:48:98:5c:8e:99:e4:
52:eb:2f:30:c0:72:78:bb:06:11:8a:e2:58:eb:71:
ae:f3:51:94:9e:ce:4f:fb:91:7d:2b:86:96:d7:5a:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0A:35:93:EB:73:6A:02:43:F2:DE:AC:4F:D6:41:15:BC:63:75:8B
X509v3 Authority Key Identifier:
keyid:D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:60:79:ab:06:3f:78:3a:a2:4e:c8:ee:ac:34:2c:1c:b1:66:
68:23:3c:69:82:dc:c6:16:e3:4a:4c:1b:8e:4d:f5:b3:41:6d:
59:ad:31:9f:5f:06:cb:08:e6:8b:7d:68:65:9a:fc:9e:06:04:
27:eb:ea:35:94:07:6a:d3:c3:56:1c:31:92:ab:73:ff:bc:83:
d3:64:e4:00:d8:f6:4c:08:21:68:f4:00:8e:a9:fb:7b:6a:2c:
57:26:6f:f4:3e:cf:11:a3:16:85:f8:6c:1c:05:a2:78:e3:70:
ea:c1:07:67:6f:ef:7f:6f:f8:a2:3a:f3:7f:d4:fb:ca:5e:e5:
1f:25:22:dd:ab:7d:a2:df:15:d9:1b:ee:2e:d9:23:48:65:20:
03:34:1b:0b:26:01:15:5c:85:2a:e1:e2:a3:70:43:25:10:a7:
86:10:60:5d:02:b2:83:50:2f:f1:e4:5c:a0:0c:30:7e:24:ae:
a2:26:2c:b7:8b:e4:d5:fc:41:50:8a:48:f6:05:ec:47:fd:f6:
c0:30:58:58:45:80:e3:ea:be:6c:62:69:1a:eb:4f:ca:7b:8e:
f3:cf:80:87:83:af:03:48:36:1a:36:3d:bf:67:b6:28:23:06:
3c:6d:45:8c:e7:98:26:db:6e:fe:be:0f:cd:ae:62:dc:df:b0:
9d:7d:87:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB1cV6btxT1VnbxIAs9dcVXr5UeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5M0VCRTg5OTk3NTE1OEREQjM1RDc0MTMzRkYxMjk3
QTZENkUzODAeFw0yNjEwMzExODUzMTdaFw0yNjExMDEyMDM1MTdaMDMxMTAvBgNV
BAMTKDU4MEEzNTkzRUI3MzZBMDI0M0YyREVBQzRGRDY0MTE1QkM2Mzc1OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHj0MxoL3wKVmsEwHdwJqjrwRY
F5/WZfS08SVK6wx5tvASPTV8EbTFvf/nVWFIBvQeBEwavAkBYL0+dR7ZePh3ML2y
+GqrSdDDB+sQOWle83wrS7kYEnjAVBXuxmPnCsR9MUm1U4PXJ+StTD6nO6fL6dYj
2sTlzWsxMDOLbNJwUDEhJjkkaoVOOBqn4tJkAQbj7lOdWN5tVrXHZuAbeS1mMP57
GNiu7bfEpCjAqAkEQQbEU8iAY9cP1mRWM4Rjmuql7GC1/EN3cxe0unORjjeo18mh
+4+5Z+uKZkiYXI6Z5FLrLzDAcni7BhGK4ljrca7zUZSezk/7kX0rhpbXWsYXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWAo1k+tzagJD8t6sT9ZBFbxjdYswHwYDVR0j
BBgwFoAU0pPr6JmXUVjds110Ez/xKXptbjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhLQUpDNzc1Qnk4
Z0ovMS9EMjkzRUJFODk5OTc1MTU4RERCMzVENzQxMzNGRjEyOTdBNkQ2RTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTNFQkU4OTk5NzUxNThE
REIzNUQ3NDEzM0ZGMTI5N0E2RDZFMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhLQUpDNzc1Qnk4Z0ovMS9E
MjkzRUJFODk5OTc1MTU4RERCMzVENzQxMzNGRjEyOTdBNkQ2RTM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT2B5qwY/eDqiTsjurDQsHLFmaCM8aYLcxhbjSkwbjk31s0FtWa0xn18Gywjm
i31oZZr8ngYEJ+vqNZQHatPDVhwxkqtz/7yD02TkANj2TAghaPQAjqn7e2osVyZv
9D7PEaMWhfhsHAWieONw6sEHZ2/vf2/4ojrzf9T7yl7lHyUi3at9ot8V2RvuLtkj
SGUgAzQbCyYBFVyFKuHio3BDJRCnhhBgXQKyg1Av8eRcoAwwfiSuoiYst4vk1fxB
UIpI9gXsR/32wDBYWEWA4+q+bGJpGutPynuO88+Ah4OvA0g2GjY9v2e2KCMGPG1F
jOeYJttu/r4Pza5i3N+wnX2HpA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:19:46 2026 by rpki-client