
Error: rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
File: 53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft (raw, json)
Hash identifier: gpijM4uAD9bWlyhR5qAr5I16n0x0hn4iQW++23VqQ3o=
Subject key identifier: 55:64:D6:D0:30:98:7B:41:97:FC:F7:CE:E0:21:4C:06:21:3E:B9:94
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Certificate issuer: /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial: 28DF9420618B671B33E0094CC3FD552335E1507A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
Manifest number: 04DE
Signing time: Sat 31 Oct 2026 14:45:13 +0000
Manifest this update: Sat 31 Oct 2026 14:40:13 +0000
Manifest next update: Sun 01 Nov 2026 17:25:13 +0000
Files and hashes: 1: 323830343a326563303a3a2f33332d3333203d3e20323635333634.roa (hash: CYkUpLy33rSn6bdPNeDAG1d43TKjAN1ztMrqBCnF+AI=)
2: 323830343a326563303a3a2f33322d3332203d3e20323635333634.roa (hash: X715LlVHBgVDPZr2X4Wu5cYusQIvsQbPQd5v8PJt5DU=)
3: 3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa (hash: IeATtFzvyAjuPkkTerPhLsBz178OTguME6sTx/GqQSk=)
4: 3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa (hash: N7OQtueiFyyEQpHwXiE71dPLo3gPhpXiGSnG3zyFHrg=)
5: 3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (hash: fJHBBNkYo3pr4ZitJ4531VoULZ3CdVDMGtv7qv7vC6Y=)
6: 53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl (hash: JyCE6trZXqq5BkZQOjn2/Z5h4EuvH9S7dkkuJXIJb/c=)
7: 3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (hash: k7M00RNjSTGLOn+GfXsi92WrFTAcoOUs0vze9bpNWIY=)
8: 3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa (hash: uLFlIIHwLu8scJv481s49/Hkz2ROCzrsAA9jzLGWiGY=)
9: 323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa (hash: bnuC1ksvmHSTU3XIhqhT6+G6opkTQv6tsLBYLpLGyVk=)
10: 3136382e3230352e39302e302f32332d3233203d3e20323635333634.roa (hash: AM0TGgLvKWiUUU9q9D+0deqPFcv6yTHG6ZZ0PGQAchU=)
11: 3136382e3230352e38382e302f32332d3233203d3e20323635333634.roa (hash: bSOrC29/MgTodKWwxAYjlREVp9PFIwPpFPUmaOSMyKE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 17:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:df:94:20:61:8b:67:1b:33:e0:09:4c:c3:fd:55:23:35:e1:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Validity
Not Before: Oct 31 14:40:13 2026 GMT
Not After : Nov 1 17:25:13 2026 GMT
Subject: CN=5564D6D030987B4197FCF7CEE0214C06213EB994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:61:3d:dd:ad:4e:25:42:b6:80:d0:d6:25:
e6:18:08:cd:c7:79:af:f0:fb:fd:1d:ba:e8:cb:9e:
0c:72:b4:c9:52:f5:a2:33:ad:6d:d4:e7:2f:6e:c7:
02:ac:75:32:78:e5:0e:aa:38:35:b3:d0:e2:e4:c2:
02:cb:48:5e:9b:c7:5c:ba:a0:c3:fe:62:49:de:04:
ef:26:8e:72:cb:7e:26:4c:ee:65:00:d8:c3:40:7e:
d9:ec:b0:f6:fc:c7:a1:27:3e:ab:44:21:a3:56:bb:
70:52:32:e5:87:18:81:5c:20:52:9d:8e:08:20:e6:
5a:e3:7d:ca:fc:2c:58:07:05:79:2c:42:d7:42:80:
c6:bf:90:be:af:2b:e1:cc:d2:75:b4:5e:53:39:f4:
e2:42:dc:da:0e:1d:a0:11:16:87:9a:10:1f:99:e8:
7a:c5:ba:3e:2b:ec:8a:10:38:f7:f5:b1:81:2b:f9:
16:8b:30:83:a0:84:b3:d9:04:e7:7e:d4:13:73:c2:
65:64:31:b7:e8:5e:1f:88:d0:99:7e:3a:3e:ae:a0:
ea:df:64:bc:82:b6:38:7e:78:b6:46:40:0f:a8:84:
7f:ab:d8:76:ca:a0:ab:e7:67:fe:15:fa:9f:87:ce:
5a:0f:3f:10:7b:85:05:d5:b8:04:27:77:9f:2c:8f:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:D6:D0:30:98:7B:41:97:FC:F7:CE:E0:21:4C:06:21:3E:B9:94
X509v3 Authority Key Identifier:
keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:4e:71:84:46:52:90:d8:70:c0:e5:9e:d5:ee:99:2e:f2:
cc:ba:03:9e:6a:6e:94:75:1d:ef:8c:7b:18:67:cd:09:cc:3e:
4b:8d:dd:fb:57:14:d0:28:37:92:5b:3e:7f:41:4e:06:c5:ff:
0a:1b:3c:bd:3d:38:be:2a:a6:90:d2:94:86:fd:7f:1a:a7:4c:
88:20:ba:fc:b3:83:c7:1b:ca:e2:b0:54:c1:21:a4:76:14:84:
79:cb:e3:31:2f:16:19:df:ad:b0:88:33:70:06:b0:90:15:9c:
99:9f:11:53:97:86:fd:09:53:c1:a1:b4:6c:6c:a5:ed:1c:47:
40:31:d4:ac:52:d3:7d:9e:31:73:a3:b5:84:da:be:cf:af:f0:
0c:90:35:89:63:eb:97:5c:7e:21:e6:48:6d:f8:dd:5a:9f:d1:
a0:55:3b:8d:25:9b:75:26:40:e1:56:f9:52:32:53:e8:6a:55:
8e:a0:02:18:0d:71:81:d4:84:ab:28:0d:36:0a:26:67:f6:13:
cc:db:89:39:d7:0a:6c:86:42:85:92:a6:93:b2:e1:a5:ca:b8:
94:85:62:06:b6:c0:72:65:9a:a0:5a:c8:0b:27:73:e2:fb:56:
25:f0:ba:eb:94:a4:70:35:25:f3:15:05:a0:2b:fa:90:4b:81:
ec:2a:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:58:07 2026 by rpki-client