
Error: rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
File: BF58315949907054B5E7AB00ED192423448BF8DF.mft (raw, json)
Hash identifier: afsWyWhz0mwkbuBcsutleprFXQNd5/KUGGu9mz4alMM=
Subject key identifier: E4:37:4A:83:12:F8:85:E9:2D:FC:91:9E:DB:CC:A4:47:4C:3E:41:B2
Authority key identifier: BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
Certificate issuer: /CN=BF58315949907054B5E7AB00ED192423448BF8DF
Certificate serial: 321025AFED8EE211B9A0FB2ACFCE577A184E5B86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
Manifest number: 02A5
Signing time: Sun 23 Aug 2026 02:57:28 +0000
Manifest this update: Sun 23 Aug 2026 02:52:28 +0000
Manifest next update: Mon 24 Aug 2026 04:37:28 +0000
Files and hashes: 1: 323830343a343535383a3a2f33322d313238203d3e20323636393230.roa (hash: hutdj/bpTB4huOawLScIsT+Xrnd+R7qsDnKQ+yIlZCI=)
2: 3138372e38342e3135362e302f32322d3234203d3e20323636393230.roa (hash: cVMo8jrun0r+w/RizNeehY5xxoGdg8U883tCL7H0lYM=)
3: BF58315949907054B5E7AB00ED192423448BF8DF.crl (hash: dQu6qrIAM4Ip5V72S9o3fq7cuF7gg+FCVrnXV1OQlxI=)
4: 34352e3232352e31362e302f32322d3234203d3e20323636393230.roa (hash: ZnxjM3wnsPoeVidij8SQsEI+uhxQBTJRN8kgln+Gko8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 04:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:10:25:af:ed:8e:e2:11:b9:a0:fb:2a:cf:ce:57:7a:18:4e:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF58315949907054B5E7AB00ED192423448BF8DF
Validity
Not Before: Aug 23 02:52:28 2026 GMT
Not After : Aug 24 04:37:28 2026 GMT
Subject: CN=E4374A8312F885E92DFC919EDBCCA4474C3E41B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:87:3c:85:6d:98:ca:b3:ab:5a:8a:5e:7e:
fe:76:2c:77:9d:89:49:c6:2d:1b:67:39:82:e5:04:
98:a7:54:b6:d9:be:b7:19:b6:4b:71:d3:80:65:41:
97:42:98:55:31:26:0e:4c:d1:54:50:08:6e:d5:db:
7a:ee:3b:77:97:86:72:e8:f0:7e:08:67:d4:b6:43:
45:ee:0c:1a:2a:78:20:8b:11:b5:2e:9f:0d:b3:0e:
a3:b0:a8:e0:ba:a8:0c:3d:37:d5:8b:6b:5e:57:50:
ff:8d:4a:bd:ce:e5:2d:79:60:7a:d3:c9:c1:e3:d8:
af:99:f5:f8:43:5a:be:65:af:ce:7d:1b:b2:81:02:
9f:c0:a6:74:4b:83:07:e3:25:14:de:81:6c:83:08:
e5:03:51:6b:4c:11:7f:26:fa:6a:c0:f6:9d:09:7b:
e7:c6:48:da:23:0e:ea:02:84:96:4f:1f:e4:8d:ec:
e2:bd:09:f5:6e:b7:ba:18:71:3a:20:8e:a4:21:46:
b0:89:56:5d:8b:d6:a5:04:dc:ec:d4:33:99:d3:30:
45:2b:77:d0:d6:4e:84:60:8f:c8:8c:d7:af:90:65:
c8:c1:18:c8:0b:e6:99:58:91:53:6e:90:89:1d:39:
90:77:91:e4:f6:b7:f6:18:f6:cf:81:4a:38:2c:1f:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:37:4A:83:12:F8:85:E9:2D:FC:91:9E:DB:CC:A4:47:4C:3E:41:B2
X509v3 Authority Key Identifier:
keyid:BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:34:62:fb:7f:5c:8f:8a:6b:b0:40:8d:59:8f:3f:52:08:e3:
f6:a3:87:71:53:19:f4:40:f9:5d:17:12:8c:35:3b:8b:a9:67:
e4:89:eb:c7:78:bd:58:4b:5d:40:1b:28:ba:3c:e8:ab:5d:70:
fd:0d:6e:2d:bd:3b:23:94:66:13:6b:d5:75:c1:22:80:22:54:
3e:fc:48:22:18:2b:0f:88:4a:27:dd:68:dd:af:7e:0b:76:a6:
6e:36:e6:2c:7d:a2:66:ef:e0:df:21:b1:2f:b4:4b:aa:c7:b1:
4c:25:e0:e1:27:28:b7:50:23:64:bb:a4:97:87:de:ed:29:b4:
4d:28:3e:1c:31:3d:a4:a8:bf:42:6e:f5:51:0b:18:7e:40:8a:
fe:20:69:86:e7:ad:ec:b5:6e:89:60:e1:04:a4:fc:c3:57:47:
e0:a7:a7:db:61:02:bb:f8:0f:fd:28:19:38:88:c0:81:3a:d5:
a8:09:64:16:ff:fd:7a:52:ee:c1:d1:6a:1e:49:58:a2:5f:f2:
18:b3:8b:c5:1f:d0:73:7e:7a:1b:5c:cb:8d:08:6d:40:f1:49:
9f:96:78:61:6a:93:96:b2:51:3c:73:fd:28:e9:04:3e:ea:e9:
5c:9d:4d:18:a0:27:c2:6b:75:f1:f8:ae:a0:9e:96:b1:e7:e7:
f5:b2:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:27:54 2026 by rpki-client