
Error: rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
File: 77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft (raw, json)
Hash identifier: N+UA4QeINv0xSb0vaHv5kaDOFYVgeFYP8yGQXguJ4SY=
Subject key identifier: C0:B7:02:56:C1:36:69:92:07:E7:04:50:60:6F:60:56:3D:39:F5:66
Authority key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Certificate issuer: /CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Certificate serial: 02BFAEF91D12F6554F594A4F5888216D42C6ADEF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
Manifest number: 0589
Signing time: Sun 01 Nov 2026 04:00:00 +0000
Manifest this update: Sun 01 Nov 2026 03:55:00 +0000
Manifest next update: Mon 02 Nov 2026 04:00:00 +0000
Files and hashes: 1: 323830343a343330383a3a2f33322d3438203d3e20323637353434.roa (hash: eskuGmDTx++DcErazD48p5t7W/EebSQqTFlYhOJa7mA=)
2: 34352e37312e37362e302f32322d3234203d3e20323637353434.roa (hash: a3oPa26170rrGDJA41jEXPD9SgqM9YNUOvox9TukohY=)
3: 34352e37302e33322e302f32322d3234203d3e20323637353434.roa (hash: F3lNrlocP9t/SPrLJjrw8rL2YaKlmapd9KkuU+mcYaY=)
4: 77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl (hash: vCx3oUsCIW3Mzwe1Xzds3+vE0tt6MuzEAtNYJd0MoLY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:bf:ae:f9:1d:12:f6:55:4f:59:4a:4f:58:88:21:6d:42:c6:ad:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Validity
Not Before: Nov 1 03:55:00 2026 GMT
Not After : Nov 2 04:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:36:d0:13:f0:55:cf:81:70:42:2b:cf:1f:
b6:a1:ae:02:dc:d8:46:96:28:c7:b8:4f:9d:e8:26:
a2:0a:f0:7d:fc:4c:11:9c:46:3f:3c:ae:68:91:99:
d8:49:3e:7a:04:79:c0:97:30:29:e9:be:f1:2a:e8:
e7:5e:5c:60:ac:84:9f:73:60:1d:24:89:db:9d:0f:
cc:e5:cd:27:52:ec:30:b0:12:79:81:ce:8e:33:e8:
83:c1:a4:e8:73:35:8b:10:36:16:32:ad:60:15:16:
ba:ea:ea:5d:b4:44:5b:ce:ad:30:27:42:7e:54:2d:
64:9b:e7:d3:73:ed:f8:51:9f:18:9c:5c:f3:77:b2:
b6:7c:1f:ca:1d:85:49:df:15:65:44:02:3b:f4:95:
e2:8c:31:6a:17:17:81:a3:c8:e8:5b:04:b2:92:4b:
e8:f1:6f:64:ef:d5:bb:d6:16:d5:61:55:3c:28:7c:
e9:78:f2:25:a7:d7:a1:65:92:5e:3b:33:f8:db:23:
d3:85:f4:b6:c0:05:23:75:59:d7:63:a1:83:2b:e2:
3a:5c:b0:62:e9:a8:34:15:ca:8b:ba:25:7f:2f:dd:
b0:10:76:1d:a9:a9:8a:f8:da:e2:60:db:94:47:9f:
6d:50:55:ab:ba:63:73:40:9b:3f:a7:8a:dd:97:6e:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:02:56:C1:36:69:92:07:E7:04:50:60:6F:60:56:3D:39:F5:66
X509v3 Authority Key Identifier:
keyid:77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:b5:18:f3:5f:75:72:da:37:15:a8:8b:28:47:02:c2:c7:
95:de:9a:d0:88:37:eb:59:9f:ed:33:56:9a:71:12:a8:17:61:
7e:77:f7:83:34:4c:5e:28:ed:a4:c5:76:fa:01:c2:95:1e:2d:
b0:d7:5f:bf:23:10:85:68:33:60:b9:09:29:20:3f:06:e3:14:
70:32:91:8b:40:34:c7:b8:4d:ba:2c:80:b5:b3:88:d8:b1:70:
a3:5a:a4:88:14:a6:b1:f0:73:a0:3a:a2:35:4a:1e:4f:5f:29:
4b:a8:1e:07:da:ff:ca:cb:8a:49:29:57:64:da:00:10:31:e7:
60:33:48:d0:30:b4:4a:b6:8b:8a:66:c7:12:5d:4d:e9:ae:6a:
02:55:63:81:a4:cf:bc:3c:1b:d0:ae:e2:1f:7e:16:0b:4b:3a:
b3:31:7e:04:cc:5b:29:32:d8:68:83:29:e9:a6:4c:6a:3f:ea:
40:1c:33:05:26:97:10:68:6b:2b:b0:f9:0a:af:71:cf:75:6e:
d6:13:48:6f:b4:03:e7:6a:32:d4:ff:8d:f3:d3:3b:af:88:1d:
e4:b7:cd:a0:2a:fe:64:f7:1e:b6:2b:b2:a2:32:cd:23:b8:17:
94:8f:4c:22:8b:1c:d3:3f:ad:ea:19:fe:03:eb:de:83:83:9e:
cf:3c:27:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:36:32 2026 by rpki-client