
Error: rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
File: 13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft (raw, json)
Hash identifier: dcfvqN5I9WTZYjvZqb6JIc0QEvakitXqpf2V4RIQHOA=
Subject key identifier: E2:2A:89:03:27:11:53:2C:2F:30:83:62:CE:0B:B5:61:9D:8A:F2:70
Authority key identifier: 13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE
Certificate issuer: /CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
Certificate serial: 5669F9A199DF9CB6DB93F8483C68103F30301584
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
Manifest number: 04E5
Signing time: Fri 30 Oct 2026 21:49:50 +0000
Manifest this update: Fri 30 Oct 2026 21:44:50 +0000
Manifest next update: Sat 31 Oct 2026 22:22:50 +0000
Files and hashes: 1: 3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa (hash: SbFXDFNTROotBgt6t4e0avECffvv17yR+l6XztD4SZY=)
2: 3137372e38362e32382e302f32322d3234203d3e20323632343932.roa (hash: DJTR34xaPLjzWOJLXNn8NlcUZasPYJo2cLGioqRm5H4=)
3: 3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa (hash: RYKvI1EyGzbDwGhJH7Mjqlxmsck9eVOzdAZKvHbFNNc=)
4: 13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl (hash: /+T6MGm0AzRSDeA26Z2rJumzU08aijpmRps6heutxS4=)
5: 323830343a313433343a3a2f33322d3438203d3e20323632343932.roa (hash: NfjM6HDee60MW1eGNVc7k8l94uWFJCqlvZahL/QFr7c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl
rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 22:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:69:f9:a1:99:df:9c:b6:db:93:f8:48:3c:68:10:3f:30:30:15:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
Validity
Not Before: Oct 30 21:44:50 2026 GMT
Not After : Oct 31 22:22:50 2026 GMT
Subject: CN=E22A89032711532C2F308362CE0BB5619D8AF270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:8e:f4:cd:d0:69:96:2c:d2:6b:94:44:ac:
e6:fd:64:25:bc:b5:a6:98:24:48:ad:d6:3d:03:5a:
e9:3f:cc:76:1f:89:a6:fa:9e:12:e8:3b:fd:22:aa:
db:fc:2c:70:d6:f3:24:40:5e:b6:fc:35:7c:69:bd:
f7:e5:c8:6b:0c:88:0c:91:93:40:47:b3:a8:a2:42:
0e:20:36:a6:be:af:d1:96:2f:ac:39:14:8c:93:cb:
94:d3:4f:a3:48:e5:14:17:67:d8:1e:7b:3b:26:e0:
78:4f:51:ef:e2:5b:79:81:ea:4b:61:80:c8:02:38:
01:a5:35:09:b1:f6:f1:a1:0d:ff:66:db:22:c9:5b:
d6:52:c1:68:d2:93:15:3b:b3:b9:d0:ec:53:1e:b2:
a4:ff:84:c9:9c:78:80:40:d1:54:f0:84:16:14:87:
41:38:fe:60:f3:a3:84:7b:63:96:18:03:87:33:7f:
d4:a8:50:68:71:53:81:01:58:c1:b3:fe:24:a6:92:
7f:d8:99:ec:0a:24:9e:c5:8d:de:a5:15:66:2f:56:
45:29:28:c9:5f:c1:28:ce:80:0e:7c:be:17:36:2c:
9a:12:1a:34:a2:5d:1d:dc:a5:03:45:38:2f:16:12:
97:65:44:44:f0:5b:ad:e8:88:72:f5:cb:09:ef:8e:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:89:03:27:11:53:2C:2F:30:83:62:CE:0B:B5:61:9D:8A:F2:70
X509v3 Authority Key Identifier:
keyid:13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:62:9f:15:91:40:f9:9c:44:8b:bb:5c:e5:cf:79:ef:6a:
76:3f:d3:5b:e5:c4:dc:ef:dd:2f:4d:02:a0:f4:d9:f1:f6:13:
76:22:ff:75:9d:4e:f6:d0:b3:d3:4d:74:9b:07:31:5f:3a:ec:
e3:b0:c3:d7:8a:f0:96:74:ac:6a:46:00:05:88:9a:34:37:84:
72:75:4e:e5:b2:aa:ca:6c:01:4c:b7:48:5e:dd:1d:5c:ac:c1:
a5:0c:fc:9a:54:38:5e:92:1e:77:4d:67:7a:11:dc:1f:9a:c9:
57:f6:6f:de:48:66:59:4a:38:50:45:8a:5a:d2:ff:b0:63:59:
62:70:52:8f:24:cc:47:15:2c:3c:25:06:e8:86:26:9a:62:1c:
4a:c3:0c:03:7f:4c:fe:57:90:6c:9a:81:76:01:cc:3a:88:c3:
59:66:6d:c2:2d:e3:17:57:e4:19:e1:3c:18:a9:21:d2:d8:09:
83:33:37:f5:ed:b5:22:14:66:1f:29:6a:e7:4a:41:1d:d9:ee:
8d:12:ff:07:00:50:06:47:5e:00:32:8a:dd:d7:07:ad:68:6e:
22:1e:63:d3:e2:0f:50:93:9d:bc:4e:9f:b0:22:c6:54:ae:be:
b7:86:1b:bd:69:13:e5:7e:02:7f:14:22:13:92:06:04:d4:bd:
65:b2:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:17:20 2026 by rpki-client