
Error: rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
File: 4959F557EDB40C3E3B7D450A5F4FE57884600618.mft (raw, json)
Hash identifier: 2TKnvqc7ckSfQgtwWaXVxTKk8URqdJiM8h3BK/5Cpl8=
Subject key identifier: E6:D8:35:C9:EC:E0:10:8F:EE:EA:76:62:D9:0F:89:AD:29:0A:49:41
Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
Certificate issuer: /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Certificate serial: 59430D4A5EE707AC117C41978D14E08A07EAE546
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
Manifest number: 03D1
Signing time: Sun 23 Aug 2026 00:11:15 +0000
Manifest this update: Sun 23 Aug 2026 00:06:15 +0000
Manifest next update: Mon 24 Aug 2026 02:23:15 +0000
Files and hashes: 1: 3230302e31302e35362e302f32322d3234203d3e203631393330.roa (hash: ZlFzsLNZgcsXxzHfYHVC1lGzeXj1KmF5L6KbIjGO5Wk=)
2: 4959F557EDB40C3E3B7D450A5F4FE57884600618.crl (hash: jE4SwWAR+bWTNB3BFxA4ORDsXIYdfoMTfXuGZOxtRG8=)
3: 323830343a313836383a3a2f33322d313238203d3e203631393330.roa (hash: DsNySGVvhBghMZ+WmWoj/DRQ4KH2i4dGCKzoZ1Z/+a8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 02:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:43:0d:4a:5e:e7:07:ac:11:7c:41:97:8d:14:e0:8a:07:ea:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Validity
Not Before: Aug 23 00:06:15 2026 GMT
Not After : Aug 24 02:23:15 2026 GMT
Subject: CN=E6D835C9ECE0108FEEEA7662D90F89AD290A4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:dc:e4:87:21:64:8a:ad:9b:6a:0f:01:0e:
b0:e7:59:84:2e:0e:46:1d:cd:97:70:fc:23:0d:41:
7c:fc:60:92:29:ce:93:cd:ef:2e:d3:96:fc:af:91:
1b:33:86:a7:bf:82:43:05:6d:56:db:a2:3c:74:ea:
bd:7e:11:3e:52:35:a6:45:07:aa:dc:cb:b0:ad:f8:
7b:9b:7d:9a:f5:65:71:ee:56:aa:23:ab:fe:e5:13:
56:05:d4:69:d8:87:1a:24:28:86:25:d6:ac:8b:f6:
4b:2a:5b:6a:15:81:26:a7:06:bc:20:01:b2:5f:ee:
9b:a4:f3:12:72:9a:a2:f9:20:e2:4f:e5:e2:54:91:
8f:ed:54:1e:8a:a8:82:50:e3:c6:a9:4a:f6:b7:42:
91:0a:a3:70:55:d5:16:cd:bb:9d:8f:11:9f:91:57:
c3:59:25:90:a0:cb:fd:a4:ea:65:58:8a:d7:31:21:
7f:dc:e8:0d:e3:04:66:da:03:c3:d0:f9:6e:dc:49:
be:74:58:dc:e5:4e:d3:ec:f0:9c:93:51:bc:b4:bc:
ef:0f:e0:35:e0:e7:d5:e4:3f:91:26:d6:d8:e2:10:
66:0f:c6:31:05:e3:14:4e:1a:d1:67:64:cb:bc:94:
05:ac:3e:e9:06:0b:d1:dc:f9:83:9b:65:25:60:ef:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:35:C9:EC:E0:10:8F:EE:EA:76:62:D9:0F:89:AD:29:0A:49:41
X509v3 Authority Key Identifier:
keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:65:41:62:3d:12:25:3d:96:2b:1c:ae:34:02:4a:9e:85:bb:
b3:91:20:f0:d9:9c:82:a9:af:1b:e1:a9:4b:2a:53:9c:61:11:
a5:ce:27:f5:1b:0a:37:f7:42:bf:03:a4:78:a0:92:52:90:1b:
46:93:bc:88:db:5a:7b:d4:57:cb:00:0b:81:76:e4:e3:fc:9a:
b6:01:16:fc:45:3c:d3:de:67:62:c5:f9:ff:b1:79:ee:05:51:
40:1c:4c:71:08:c4:e2:ee:c1:bf:d2:f5:99:1d:a4:99:0f:c3:
f9:ae:7f:c3:df:e0:68:02:5e:da:22:d3:2b:b5:38:cb:49:bd:
bd:31:73:d4:eb:58:4e:fe:a9:4a:85:04:ee:02:a4:26:bb:e2:
df:7b:c8:59:7d:e1:0f:49:14:17:42:30:6a:b6:1e:71:07:96:
96:a3:ee:99:23:08:eb:57:36:d4:e3:0e:36:7e:77:35:9d:38:
37:cb:4b:e7:2d:01:a3:90:b9:d5:a0:89:24:ce:4c:12:d8:1a:
a4:c8:c9:db:98:2b:6c:db:b9:c1:b4:4d:dc:24:71:4c:a5:d3:
84:21:74:42:bc:40:fc:74:96:15:06:8f:b5:da:fd:e2:f2:4d:
a9:a4:ae:4c:f6:43:02:24:84:fe:ee:5c:45:b9:12:f6:c3:95:
d6:2a:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:34:55 2026 by rpki-client