
Error: rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
File: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft (raw, json)
Hash identifier: GJU4nMKyvXFW51VOiy0tmfhSzThHZJ+Ko84WnIlPLQc=
Subject key identifier: 57:81:C2:B0:33:A3:61:8C:66:04:F8:15:68:F7:A4:9E:3E:13:F9:0E
Authority key identifier: 57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
Certificate issuer: /CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Certificate serial: 56FF76A21F348B593E4CB4A5AA51D017DA5838AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
Manifest number: 02B1
Signing time: Fri 30 Oct 2026 18:30:00 +0000
Manifest this update: Fri 30 Oct 2026 18:25:00 +0000
Manifest next update: Sat 31 Oct 2026 19:43:00 +0000
Files and hashes: 1: 34352e3138352e3139322e302f32322d3332203d3e20323639353533.roa (hash: rWpXA+4kgU4O0SC7MZZLj50f/4vH8vVnL8aCLqfCOHc=)
2: 323830343a363635633a3a2f33322d313238203d3e20323639353533.roa (hash: I0L16WjFSpuykXqED0lnmznyQcL5WDK4OqQ9kE7gKFk=)
3: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl (hash: uRz/jlaGoyET63fDEQPIwmeLLe7uPo1KY6cd1sJxq2E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 19:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ff:76:a2:1f:34:8b:59:3e:4c:b4:a5:aa:51:d0:17:da:58:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Validity
Not Before: Oct 30 18:25:00 2026 GMT
Not After : Oct 31 19:43:00 2026 GMT
Subject: CN=5781C2B033A3618C6604F81568F7A49E3E13F90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:e4:47:18:88:50:a9:30:fc:32:23:7b:c6:
4d:38:a4:28:fd:d4:fb:09:e4:74:29:ec:1d:ac:b1:
40:34:b1:18:fa:bd:2a:2c:39:6b:d1:e6:fb:3a:90:
ce:2c:e1:47:c6:ca:ba:5c:d1:9c:bc:68:ed:b3:cb:
46:6b:4b:26:e5:45:11:43:af:37:37:47:fa:fe:f3:
e6:9e:18:be:66:1a:0d:76:af:ed:95:ae:58:d7:8a:
5f:93:42:98:7d:9b:74:c9:1a:64:ae:72:02:73:5c:
8d:98:92:25:20:d0:40:99:af:0b:b4:47:7f:f2:35:
0d:97:ae:8d:64:b2:03:a6:f2:ae:0c:a6:a2:34:68:
39:df:2d:f6:11:4b:74:4a:40:0f:f7:0a:46:a3:ce:
2c:1e:6a:fc:55:26:ef:35:5e:a2:63:07:ea:95:81:
d7:86:9f:27:e7:1e:c1:ff:e5:2d:e7:1f:f4:df:28:
5a:eb:22:37:82:c1:0a:cd:5b:32:2b:e6:1e:2a:b3:
72:3a:eb:89:47:16:3c:cf:bb:1a:80:63:63:30:6c:
ba:fd:f3:1b:a4:f1:75:44:8a:d2:db:6e:40:b6:8c:
30:8a:19:13:b3:ac:2d:1c:7a:fc:2a:f6:c4:51:68:
9a:fb:71:0e:3a:42:66:22:cd:73:36:20:48:28:22:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:81:C2:B0:33:A3:61:8C:66:04:F8:15:68:F7:A4:9E:3E:13:F9:0E
X509v3 Authority Key Identifier:
keyid:57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:ac:94:5b:ae:4f:ba:d5:8d:f6:05:40:c5:6b:e3:d6:d0:
4b:12:7e:f0:70:45:02:b9:68:87:ac:3a:5a:07:ae:87:b6:07:
b4:87:67:f3:04:c4:39:fc:f6:1f:c0:54:c3:c6:35:57:18:2f:
f8:6f:14:bf:d2:4e:bd:77:56:e4:ac:6c:be:d1:14:3f:e8:5f:
ef:d6:8c:24:d6:84:6c:7a:c4:45:68:e7:b5:a7:13:1b:f3:83:
87:ab:62:66:ab:e6:cb:d2:f8:b3:26:28:ef:9c:79:2b:90:4e:
df:f0:6c:bb:cf:ba:86:ce:7c:5b:5a:b8:ea:c7:f8:30:8e:58:
1b:5c:42:b5:0b:4d:c4:5b:d4:1b:18:65:c4:17:5c:8c:72:6c:
28:f7:47:09:24:fc:cf:48:e1:18:29:12:dc:b3:9d:ed:a9:36:
41:1f:7f:97:01:14:7d:65:c7:ab:5b:76:58:b2:03:01:8f:27:
78:21:6b:d5:78:cc:2d:47:22:19:39:cc:19:16:e1:82:33:ad:
18:86:69:3d:d0:7f:5c:50:54:40:0e:d2:08:12:a6:4a:56:c1:
66:95:65:ef:15:19:65:87:93:62:55:24:25:de:f8:52:c1:fb:
7f:39:3a:f5:ec:b3:bc:97:1d:5c:dc:96:df:5f:7e:47:57:d4:
8d:52:7b:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVv92oh80i1k+TLSlqlHQF9pYOK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdGMDJFNzc2MDU4MTU2Qjk1QUVGRDIwQjZDRDVGNTNC
RjlDRTcwRjAeFw0yNjEwMzAxODI1MDBaFw0yNjEwMzExOTQzMDBaMDMxMTAvBgNV
BAMTKDU3ODFDMkIwMzNBMzYxOEM2NjA0RjgxNTY4RjdBNDlFM0UxM0Y5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cuRHGIhQqTD8MiN7xk04pCj9
1PsJ5HQp7B2ssUA0sRj6vSosOWvR5vs6kM4s4UfGyrpc0Zy8aO2zy0ZrSyblRRFD
rzc3R/r+8+aeGL5mGg12r+2VrljXil+TQph9m3TJGmSucgJzXI2YkiUg0ECZrwu0
R3/yNQ2Xro1ksgOm8q4MpqI0aDnfLfYRS3RKQA/3CkajziweavxVJu81XqJjB+qV
gdeGnyfnHsH/5S3nH/TfKFrrIjeCwQrNWzIr5h4qs3I664lHFjzPuxqAY2MwbLr9
8xuk8XVEitLbbkC2jDCKGROzrC0cevwq9sRRaJr7cQ46QmYizXM2IEgoIv3XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUV4HCsDOjYYxmBPgVaPeknj4T+Q4wHwYDVR0j
BBgwFoAUV/Aud2BYFWuVrv0gts1fU7+c5w8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkh3d1RreVA4eE5CUTVyZnoyN1RyQTRLZXBCUms2NHZlbUxkb1p5SFlp
elcvMC81N0YwMkU3NzYwNTgxNTZCOTVBRUZEMjBCNkNENUY1M0JGOUNFNzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RjAyRTc3NjA1ODE1NkI5
NUFFRkQyMEI2Q0Q1RjUzQkY5Q0U3MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rkh3d1RreVA4eE5CUTVyZnoyN1RyQTRLZXBCUms2NHZlbUxkb1p5SFlpelcvMC81
N0YwMkU3NzYwNTgxNTZCOTVBRUZEMjBCNkNENUY1M0JGOUNFNzBGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKRuslFuuT7rVjfYFQMVr49bQSxJ+8HBFArloh6w6Wgeuh7YHtIdn8wTEOfz2
H8BUw8Y1Vxgv+G8Uv9JOvXdW5KxsvtEUP+hf79aMJNaEbHrERWjntacTG/ODh6ti
Zqvmy9L4syYo75x5K5BO3/Bsu8+6hs58W1q46sf4MI5YG1xCtQtNxFvUGxhlxBdc
jHJsKPdHCST8z0jhGCkS3LOd7ak2QR9/lwEUfWXHq1t2WLIDAY8neCFr1XjMLUci
GTnMGRbhgjOtGIZpPdB/XFBUQA7SCBKmSlbBZpVl7xUZZYeTYlUkJd74UsH7fzk6
9eyzvJcdXNyW319+R1fUjVJ72A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:49:39 2026 by rpki-client