
Error: rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
File: 605F3702CE23BBC04859766117DBC4F04EC8F430.mft (raw, json)
Hash identifier: 0hqnC7KAMAg225N59ZNIXi+simXBH0fH6aRUdlE7+/M=
Subject key identifier: BA:93:9B:66:F1:11:8D:F6:B6:CE:34:75:EB:46:D7:94:FD:5F:E1:29
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Certificate issuer: /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial: 6DA2F04B5F10454A192868F6049CEE46794D8711
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
Manifest number: 1C
Signing time: Sat 10 Oct 2026 22:48:39 +0000
Manifest this update: Sat 10 Oct 2026 22:43:39 +0000
Manifest next update: Mon 12 Oct 2026 01:59:39 +0000
Files and hashes: 1: 3137372e37332e33322e302f32322d3234203d3e20323633383830.roa (hash: qabkfIU7SO5Xyd5cRep2QIYmzN6iTuqS60Pvj2sR+1A=)
2: 3138372e312e302e302f32302d3234203d3e20323633383830.roa (hash: ULAqfDUs8st+1sIKNA5s25TKTRaQckh45OnxniCJZRs=)
3: 3137302e3234362e31322e302f32322d3234203d3e20323633383830.roa (hash: NPaVaGozOlhQNJNOZjHF0rdpR/Z3lG2k7K7mZukmIGU=)
4: 3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa (hash: cofY/ko2BlL7yt0eG6mWvbj4GYh5TGFc8VC2YxEJKbo=)
5: 3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa (hash: Qd3ujbD8SZAH0+ymWaiexWyAOFxOD/i05ECfJ72w25Y=)
6: 3137372e39322e3135322e302f32312d3234203d3e20323633383830.roa (hash: ychLWYboTuJoGFClrr/+eeTTwyVGC8Go0lEfitBMyC4=)
7: 3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa (hash: LtAc0Hruzk4g8SDc9RiXtJ0CEYtXVQkNSd57BgqRvqw=)
8: 3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa (hash: vH6ANbUyo9w7Czvgy2ilsr52z9BeutlqYk7QvALFP8A=)
9: 3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa (hash: oa/3DtqTCA3q3plB52ivGCwWIOvZTszPk6yiUL9eSHQ=)
10: 3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa (hash: tOQiAdn9y68MUkaib/3hsY5Qb8OZzr6wbIb6t3ibry4=)
11: 3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa (hash: 4lknGE9V+/VbjTHyLA8NfmPYpvmoSo19EZlVziNud8k=)
12: 323830343a323732383a3a2f33322d3438203d3e20323633383830.roa (hash: e2Egn+R3ufab+wEAtkBbTjcByjWPu6pDqKJql0cRx1U=)
13: 323830343a3264343a3a2f33322d3438203d3e20323633383830.roa (hash: cNf2r63+MMIuUOyZ8nYxWU64t0pExKQhpg2l2Le0opU=)
14: 3137302e37392e33322e302f32322d3234203d3e20323633383830.roa (hash: VLTHOpNdswTj4bzKKzzkY9lOoZl+jwkj8D6zJeVMIN8=)
15: 605F3702CE23BBC04859766117DBC4F04EC8F430.crl (hash: hDb2C8lACxxBJe2QPV+WClNJ3LlfUuLlTDdFgofU+hs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 01:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a2:f0:4b:5f:10:45:4a:19:28:68:f6:04:9c:ee:46:79:4d:87:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Validity
Not Before: Oct 10 22:43:39 2026 GMT
Not After : Oct 12 01:59:39 2026 GMT
Subject: CN=BA939B66F1118DF6B6CE3475EB46D794FD5FE129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:1c:7f:e3:7b:69:57:1a:97:33:b9:20:22:
69:43:86:17:7d:99:32:7b:c6:28:43:be:25:c3:01:
89:e5:11:10:02:af:ef:51:37:2f:9a:35:05:7e:85:
68:3c:52:0f:be:e8:02:a3:5d:9d:c8:61:ac:9e:e3:
cc:c6:a6:63:92:e7:4f:a6:51:90:d0:6a:08:b8:cd:
0b:b4:fa:31:d1:32:ef:ac:05:e9:f8:82:82:7b:b6:
42:6f:8f:0c:39:48:76:72:23:ea:21:2c:93:9f:3b:
b9:96:bb:80:1b:ea:06:64:bf:80:7c:30:ac:ec:a3:
ae:44:0e:dd:c1:69:81:b1:8f:ca:32:cf:a8:ac:78:
20:99:7a:39:d4:e9:58:6d:91:52:34:75:0a:72:46:
eb:64:5e:f1:83:f7:14:60:12:72:d5:a8:e3:8e:d4:
6e:16:e2:66:f9:42:5c:f0:5e:12:b7:54:ac:3a:51:
97:84:9e:c2:ce:e0:90:b8:f6:f3:bb:00:21:fa:44:
13:9f:63:10:30:d0:a8:e8:24:f9:9d:4e:d8:ec:0c:
a7:c8:5c:28:04:e5:d1:dd:72:16:f4:1c:b3:20:53:
cd:33:9d:79:13:69:a5:8d:93:86:19:e2:ba:a8:b7:
b4:9c:4c:ee:20:d5:61:d4:e4:dd:42:50:87:da:34:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:9B:66:F1:11:8D:F6:B6:CE:34:75:EB:46:D7:94:FD:5F:E1:29
X509v3 Authority Key Identifier:
keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:b2:62:61:ee:f7:82:19:b7:b8:ba:d4:10:2f:55:90:19:
44:18:14:74:1a:aa:42:07:f2:12:3f:09:d2:fc:da:4f:ed:60:
b1:4f:9f:c0:42:fc:f5:fa:c7:2e:ae:aa:29:15:43:0a:10:ac:
84:ae:06:f2:eb:90:bf:23:a9:ef:b4:8a:c2:d3:00:fe:6a:99:
78:14:c9:8a:d1:d9:39:e0:78:a2:87:34:04:01:5d:d6:7a:e0:
2b:ec:be:46:43:9c:53:d6:ec:f4:69:90:d1:1c:23:65:d0:10:
80:30:2b:2b:d3:25:5e:f8:cd:48:93:37:5e:de:5f:0b:bb:7c:
00:41:4f:5d:db:e4:2c:53:77:09:32:3f:5a:87:d2:68:98:ad:
58:c9:1c:21:b6:d8:fd:6e:4d:e3:c1:29:43:49:3e:4d:45:2b:
03:82:26:90:c5:ca:05:dd:95:cf:f0:f3:44:ba:37:c4:91:e0:
fd:82:47:a5:0f:23:78:ec:80:ce:8d:2f:c8:03:4f:aa:3e:74:
4e:6b:a4:0e:26:c3:c9:6e:b7:13:78:06:c8:ee:c6:2a:ab:d2:
ca:eb:68:8e:95:17:4a:8a:00:9c:40:6b:bb:ec:61:3c:ba:30:
d8:e7:b1:ff:19:01:a4:b7:50:92:e4:1d:89:1d:d6:9b:7e:87:
b8:b5:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:29:23 2026 by rpki-client