
Error: rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
File: 6295613937297D5F10674AC45D3ACAB7545474C7.mft (raw, json)
Hash identifier: Fy4GOlekmWLiLDMF3PxIH1vvDuPMXLb5+Kw8I5ZLqMU=
Subject key identifier: 59:5D:C1:E3:5C:9F:29:E3:4F:FB:B5:97:BC:E3:34:BB:1D:94:23:0A
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Certificate issuer: /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial: 3AF905A1379157DC8C22541C217D692C55874785
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
Manifest number: 0414
Signing time: Wed 28 Oct 2026 16:04:07 +0000
Manifest this update: Wed 28 Oct 2026 15:59:07 +0000
Manifest next update: Thu 29 Oct 2026 16:22:07 +0000
Files and hashes: 1: 6295613937297D5F10674AC45D3ACAB7545474C7.crl (hash: 1ED0XwWZ+KDHpmEEefv3JLsZPv4PsDZvlkcQAijqSb0=)
2: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: +7Jjrw9LTrceEbHh8Jj+E2YrvPalObU6+roW77Z/+cs=)
3: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: gw2kr8iqC2erMFHK8E4vmWOtw1TP0lHRX0o/CnJ8QUI=)
4: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: 3PT21yrRFXoWY+Lj38++Fa++0QLs7YZDxWRp/vVTEDs=)
5: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: lEf3nD38rzvArDc679LvkbZXO4qLP9HX/TVtFey+paA=)
6: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: g3okiz+2/0bL2vB6BSWdwfxNP+lWUYkW1h1TDK3da/c=)
7: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: /4fWziM9U3nSmPZfElZTP8yOZy+fUtdGWWJ2QyWcDoA=)
8: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: 1CpLJgBZ+6FadzIOEkLyZf4imc+8bSemfgOHonLEeNk=)
9: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: VP6/e/nSazzAd3NSpgJsMRQi3AVLS8uz2+P6rpSOKnQ=)
10: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: 2CT1TO4QjqGBz/WOvyMPoesL2w/fqtFMGSzr1NvhqiM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 16:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f9:05:a1:37:91:57:dc:8c:22:54:1c:21:7d:69:2c:55:87:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
Validity
Not Before: Oct 28 15:59:07 2026 GMT
Not After : Oct 29 16:22:07 2026 GMT
Subject: CN=595DC1E35C9F29E34FFBB597BCE334BB1D94230A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:6e:c2:30:dd:c6:cf:7d:9d:02:d6:bc:52:
d0:39:03:f5:80:ea:e2:c7:f6:94:b8:5b:ec:68:0a:
bc:2a:29:3b:1c:08:da:f0:ed:ca:bf:c3:24:29:80:
e7:04:1e:48:16:cb:5c:4b:e5:b0:40:ef:ca:8e:df:
bc:e9:05:22:75:e2:44:2f:8f:2a:12:65:df:78:48:
16:77:00:4a:de:54:7e:15:02:21:fe:66:0a:54:8e:
d4:7b:c4:35:a9:d7:dc:a9:60:66:df:3a:fc:97:09:
fe:8d:63:c5:dc:14:f6:7a:3d:69:be:1c:5a:e2:45:
0c:71:7b:4f:8b:c6:8f:11:ae:06:e5:4b:3b:b6:f3:
56:90:f1:e6:fc:82:37:f0:bc:8e:c0:29:2c:3b:0e:
14:72:50:6b:fc:11:d5:ac:df:62:1a:45:e7:cf:a2:
8b:f9:d6:a9:e4:e6:b8:ee:6c:ae:88:29:27:99:f0:
a4:90:0d:c7:ca:30:09:4b:65:2e:a4:da:d0:31:20:
6f:30:ff:f9:01:a0:95:02:c9:a5:00:a0:c7:29:15:
37:8a:47:b8:e7:a3:aa:fe:1b:e2:dd:13:67:34:a9:
bb:44:97:aa:da:7b:ba:24:41:47:34:4f:35:57:24:
fc:87:38:04:71:c3:68:3d:bb:5b:25:f9:c8:a2:65:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:C1:E3:5C:9F:29:E3:4F:FB:B5:97:BC:E3:34:BB:1D:94:23:0A
X509v3 Authority Key Identifier:
keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:bd:66:e7:98:8c:94:47:27:8f:80:11:05:4b:ff:1d:63:76:
ba:5b:fd:34:f8:ab:aa:0d:1d:d1:15:fa:be:f1:55:aa:13:60:
43:a2:3b:8d:d4:91:89:c4:8e:37:04:22:82:b7:08:f7:67:f3:
cd:d8:2c:b4:d9:91:74:76:14:4a:4b:a3:ad:92:ac:48:26:6f:
7d:98:07:55:5b:db:9a:d5:c4:1d:26:f1:7e:58:01:ff:8f:04:
7c:28:3a:a1:87:a2:4a:2d:68:f1:83:ed:96:ef:b3:29:99:de:
15:d4:e1:1e:13:dc:81:85:b5:aa:9f:47:01:de:33:76:4a:3d:
90:f8:a7:03:95:99:58:09:25:fc:56:c3:4f:23:d9:c7:87:1c:
67:36:46:2c:3d:43:2e:3e:6e:85:18:4e:94:ab:3f:f0:12:6d:
33:56:01:d6:49:1f:2e:97:7b:2f:21:54:4e:e8:9a:06:8a:8c:
62:42:47:3f:0d:f3:50:af:5e:c2:a3:25:13:b1:a5:7a:87:fe:
15:6f:a5:49:76:d6:df:d4:21:e7:50:84:8d:30:03:56:73:0d:
62:a7:f3:46:dd:b9:db:48:4a:bb:28:e3:f2:18:61:86:ac:8d:
a2:60:27:42:58:2a:71:7e:93:05:2b:96:f1:3d:d2:b5:a0:bb:
e3:bb:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:18:45 2026 by rpki-client