
Error: rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
File: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft (raw, json)
Hash identifier: dudbZRaWmKjSrCVwguzsxISp4hN6kQQnTCXIr+hOP4c=
Subject key identifier: 15:B4:5C:52:E3:39:75:A4:DA:23:1D:67:DB:54:10:3F:BE:A2:21:FA
Authority key identifier: 57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
Certificate issuer: /CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Certificate serial: 58F035742BBEE6C7695BF05DCED157AB90FA1CF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
Manifest number: 0257
Signing time: Sat 22 Aug 2026 20:30:00 +0000
Manifest this update: Sat 22 Aug 2026 20:25:00 +0000
Manifest next update: Sun 23 Aug 2026 23:13:00 +0000
Files and hashes: 1: 323830343a363635633a3a2f33322d313238203d3e20323639353533.roa (hash: I0L16WjFSpuykXqED0lnmznyQcL5WDK4OqQ9kE7gKFk=)
2: 34352e3138352e3139322e302f32322d3332203d3e20323639353533.roa (hash: rWpXA+4kgU4O0SC7MZZLj50f/4vH8vVnL8aCLqfCOHc=)
3: 57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl (hash: bm1MbJeLGKyKY3gfbpRxRcj7o+VjENqXSU7vWqelH2o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 23:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f0:35:74:2b:be:e6:c7:69:5b:f0:5d:ce:d1:57:ab:90:fa:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57F02E776058156B95AEFD20B6CD5F53BF9CE70F
Validity
Not Before: Aug 22 20:25:00 2026 GMT
Not After : Aug 23 23:13:00 2026 GMT
Subject: CN=15B45C52E33975A4DA231D67DB54103FBEA221FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:dc:97:31:06:1d:0d:4a:0c:a3:f9:c8:14:
25:21:e8:f7:c8:e8:75:8f:b0:bc:6e:dc:95:80:f7:
fb:c6:26:d5:c3:ae:3a:cd:3a:e1:e8:27:ba:e4:0f:
7c:8c:6f:13:f5:58:76:67:4e:ab:3f:73:8b:30:f3:
03:40:04:e0:90:6b:5d:f1:93:ad:49:d2:8f:ce:da:
a9:c5:9f:1c:97:29:40:d2:77:36:2b:85:08:06:07:
56:c9:67:1d:f3:59:23:09:fb:05:66:78:db:b7:96:
23:9b:bd:54:36:89:22:f1:87:85:09:b7:ec:5a:c8:
2e:7f:29:19:64:1f:1a:71:34:e1:6a:10:01:5f:4f:
a7:7d:d2:a9:bc:3c:ce:60:f7:95:a7:ac:c2:48:e5:
a3:78:83:d3:49:74:cd:55:0c:2f:10:c3:f9:29:98:
d5:84:69:c1:86:39:0d:99:e7:37:c9:ed:9e:21:ae:
db:0b:46:60:d5:50:d8:5f:6e:ac:26:b1:03:07:2b:
4b:2b:1b:2a:ce:40:7c:1b:05:ff:24:51:7b:f4:cd:
60:df:65:0b:7d:2d:68:ba:dd:9c:bb:9e:6b:fe:b2:
62:18:a3:66:58:85:fa:a2:82:e6:ac:79:f4:16:7a:
1b:f8:b1:71:d4:63:fc:e2:05:10:ee:91:eb:b4:d0:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:5C:52:E3:39:75:A4:DA:23:1D:67:DB:54:10:3F:BE:A2:21:FA
X509v3 Authority Key Identifier:
keyid:57:F0:2E:77:60:58:15:6B:95:AE:FD:20:B6:CD:5F:53:BF:9C:E7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/57F02E776058156B95AEFD20B6CD5F53BF9CE70F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9b:ff:2a:1d:8d:a9:93:4c:d8:10:63:d0:99:b2:49:fe:32:
84:6c:e1:7f:fa:b4:34:49:af:ec:a7:41:42:fd:51:3f:84:66:
52:79:9c:1f:50:6e:cf:e0:6c:48:17:56:a4:7c:c6:b6:5f:97:
41:4c:ef:c8:7f:81:be:86:08:2d:3b:df:67:3f:06:eb:71:86:
29:8e:61:17:43:aa:ee:b3:33:25:91:e8:a0:eb:5e:a8:34:7d:
ee:64:f6:3c:4b:c5:5c:15:b5:fc:9d:71:eb:ca:fe:cf:31:78:
17:ab:cb:82:1b:7e:c0:5c:59:a8:09:87:fe:70:09:d0:99:1a:
54:a9:aa:cb:c8:50:35:b9:be:82:7b:b8:62:ed:fc:e5:13:ac:
97:b3:23:46:68:01:58:b1:4a:b2:ac:b2:03:76:0a:73:e4:31:
6f:4d:aa:fc:93:49:e1:06:46:73:5f:02:9d:b4:dc:24:75:90:
fa:f0:72:1f:7e:21:67:bc:68:60:50:3a:34:70:e8:98:b2:0e:
01:01:84:bb:7f:89:3a:27:e0:f2:ac:16:da:53:c1:61:6a:c3:
0f:cc:00:34:65:9b:6e:75:84:5e:35:3f:dd:d9:9b:94:a4:47:
48:47:72:d2:17:03:3e:2f:de:70:2e:8b:bf:6e:bd:b9:3b:45:
49:c1:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:23 2026 by rpki-client